Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File: 4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier: hV8gkbxRZ+HQsqkHo+28SPRzgm/XoXw4H91hkYviEiU=
Subject key identifier: 6B:6C:D3:21:A6:48:04:3B:0C:F3:DB:75:FA:28:CB:E2:80:CB:C2:B4
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial: 019A28C2394A8F201CE6672E4FE5A409D2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number: 0EDA
Signing time: Tue 28 Oct 2025 03:00:08 +0000
Manifest this update: Tue 28 Oct 2025 03:00:08 +0000
Manifest next update: Wed 29 Oct 2025 03:00:08 +0000
Files and hashes: 1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: gIuC9eYJQrVaaEEjjWIEiUsNIIYs9M8/XKWtKeJ+g24=)
2: nlxhNU09PYV8ICYRds67uFQ8SD4.roa (hash: 5Mkpw05F7xKd7rn+KAmOk8IiGnvRNLjGed3AF2L+Quk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 03:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:c2:39:4a:8f:20:1c:e6:67:2e:4f:e5:a4:09:d2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Validity
Not Before: Oct 28 03:00:08 2025 GMT
Not After : Oct 29 03:00:08 2025 GMT
Subject: CN=6b6cd321a648043b0cf3db75fa28cbe280cbc2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a5:37:bd:25:b0:d2:79:8b:df:f3:ee:f3:68:
ee:db:30:47:a3:9a:a5:3e:fe:52:6e:4c:04:ed:77:
82:d6:48:ea:c3:4f:c2:58:49:e4:97:41:dc:8c:63:
f1:08:69:45:93:83:21:97:32:27:55:2a:49:a2:7c:
c9:10:fd:c7:45:0d:72:69:40:28:48:36:b4:9e:b4:
2d:08:84:9c:13:3a:85:eb:0a:1d:b5:73:9f:d6:8d:
d1:1b:9f:2e:25:f7:26:c1:5a:0d:6e:b9:a8:a4:f9:
70:43:14:2d:b6:02:ee:4e:89:53:c2:fe:7a:f5:90:
bf:cd:b7:10:60:10:cc:f2:21:de:87:88:42:9a:c5:
9a:13:39:a0:76:6c:ae:93:2d:12:4d:e9:4c:68:fe:
66:b2:49:58:c4:93:44:21:ff:55:17:d9:62:e3:4a:
2c:ab:38:84:f2:44:5e:95:e7:4b:7a:b8:a2:52:c8:
2c:ce:21:3c:d9:e8:bc:4a:9b:94:c3:9d:84:ff:4c:
9e:18:ea:86:13:ad:d7:05:f7:4b:5f:0b:3d:9c:02:
a7:59:5a:07:d5:c5:ea:f2:ac:66:e7:2a:e2:12:86:
b3:b6:e7:af:d4:8b:f3:5b:fd:36:b6:d8:ad:c8:bf:
9a:30:8e:81:3e:95:6e:e3:49:d4:74:f6:b0:a8:cc:
2a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6C:D3:21:A6:48:04:3B:0C:F3:DB:75:FA:28:CB:E2:80:CB:C2:B4
X509v3 Authority Key Identifier:
keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:47:a5:b9:7c:9a:42:93:05:92:c0:cf:6f:1c:7f:fc:8f:b6:
63:5a:d8:cd:97:cc:14:cc:09:f2:11:84:4c:48:1a:76:bc:6f:
8d:ee:1d:8f:a1:7a:b9:74:6d:0e:33:c9:09:2f:61:eb:f3:ba:
8e:da:14:a6:8f:58:02:c9:50:8f:f1:69:da:5b:6d:e0:2c:6a:
4c:6d:a7:bc:64:c9:2d:d6:7e:07:a7:bc:c4:12:b5:9e:c6:8d:
37:73:78:34:85:27:76:b7:95:89:36:c9:56:59:b3:51:4c:5e:
f9:9f:8f:f3:5f:55:39:24:50:a5:45:b5:41:e2:44:b1:54:bb:
ed:2a:93:42:bf:32:ca:72:d5:b7:31:a4:12:47:1e:72:90:94:
28:82:35:a5:8d:87:f3:d2:f6:7b:64:86:db:9e:41:02:ad:8c:
7c:a4:31:27:03:ac:b7:28:2b:64:2d:31:c3:ea:43:e4:54:db:
e0:03:67:03:48:63:5f:69:da:4d:fd:ad:b2:a9:8d:1d:28:de:
fe:d6:24:5b:a9:4a:41:13:d0:a0:33:87:60:99:91:45:a6:d2:
e6:7f:ae:15:d2:ca:fc:a2:41:6b:80:25:e9:82:63:d1:97:ae:
95:9e:6b:62:65:f9:09:cf:a3:98:40:28:79:7c:59:ff:3f:4f:
86:ce:b3:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:04:00 2025 by rpki-client