Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: PE/IjugjU0RH4LU1F5ury+EaasDyr0tLp2l/YI6fuMY=
Subject key identifier: 7D:B2:BB:B4:00:CF:96:F3:F9:43:9B:D6:4F:1B:6C:10:3D:6B:2E:76
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019A7112DD71EB69E95D1AE3FAAF61729E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 04:00:52 +0000
Manifest this update: Tue 11 Nov 2025 04:00:52 +0000
Manifest next update: Wed 12 Nov 2025 04:00:52 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: z6XiXxGbNnOtnu550zrhOVv0rBbCYKnIwm+otU+EimY=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: Z9n5DV0w7GnExRRm5adMC5c1O74.roa (hash: 61N91t8/tHrGPHbqd/Q8TWwC/7eUsMLcp5Fv9vIC6tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:dd:71:eb:69:e9:5d:1a:e3:fa:af:61:72:9e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Nov 11 04:00:52 2025 GMT
Not After : Nov 12 04:00:52 2025 GMT
Subject: CN=7db2bbb400cf96f3f9439bd64f1b6c103d6b2e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:3c:98:01:a1:78:87:4c:11:fc:37:c6:74:fc:
1c:a8:2e:f9:16:98:b8:4a:55:93:b8:c6:82:a7:ba:
a3:72:1a:5c:c3:eb:01:63:82:76:d1:ff:6e:46:d7:
cf:36:81:12:52:4a:db:f2:46:f6:96:6a:b9:d7:1b:
1f:c0:d6:df:0c:42:37:8a:b1:d3:62:ac:79:f1:61:
1c:e4:dd:a0:01:2a:67:f8:09:66:a4:a2:9b:72:13:
18:c8:b0:37:61:aa:5e:d1:53:94:ce:39:1a:d9:1f:
9d:ba:07:e0:28:1c:a1:70:b4:5b:35:ef:a8:0c:dd:
37:4e:0a:4c:d1:fa:e3:5c:fe:79:e3:03:53:0e:32:
29:c0:52:a7:b4:6d:60:e0:fd:59:60:84:10:0f:ef:
62:5d:b7:a2:66:19:db:10:86:62:59:b4:47:80:08:
81:52:e5:37:5b:8f:3b:21:fa:7f:09:e4:0b:85:e5:
e0:43:85:5d:9c:07:2d:d7:15:78:c4:36:f8:e8:3a:
58:8b:3d:48:d9:8d:d3:d9:b4:1d:08:76:c2:93:23:
fa:af:23:bc:c0:dd:15:a0:d9:44:5e:48:9b:c9:3e:
cd:d6:1c:d7:54:ef:df:d7:c6:84:6e:fb:f6:85:f3:
e1:a8:1b:b5:45:a2:2c:87:7a:a0:f7:3b:da:49:d7:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B2:BB:B4:00:CF:96:F3:F9:43:9B:D6:4F:1B:6C:10:3D:6B:2E:76
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c9:cc:98:1c:bd:9e:da:a2:c4:ff:54:f2:6c:ec:00:d1:a8:
8c:67:9d:8e:61:37:71:ad:79:9f:1e:61:f6:22:83:13:dd:da:
7b:82:5c:f5:7f:5b:7e:05:36:b8:62:34:99:99:09:8f:4a:ad:
f4:72:48:fd:50:1b:00:e7:68:06:48:cd:4d:d2:6a:31:18:24:
b9:ff:ad:6e:69:30:fe:91:48:3e:0d:9b:e4:43:c1:4c:14:e8:
a9:d6:94:f3:74:c2:8c:dd:74:a7:ad:af:a4:98:ce:d9:6c:03:
4d:78:f3:06:bb:46:82:9b:de:24:15:20:b5:37:1b:91:29:d4:
42:05:d9:d5:e7:07:09:b8:ff:57:50:6a:48:bf:a7:36:5d:e6:
b6:f0:b2:f3:19:ec:09:3f:7f:f6:71:ca:5f:43:10:53:27:6b:
e2:ec:66:69:2c:6b:9d:e2:0a:f6:61:1e:3f:c1:cc:32:47:ad:
b8:59:4f:92:ee:1d:29:52:5e:26:c8:e1:7b:13:e7:44:2f:1e:
da:53:9a:f0:50:e7:f8:a5:57:27:db:84:69:1d:75:2f:43:fa:
95:1f:a9:e7:70:22:c3:84:df:ca:a9:de:6b:96:a8:0b:f8:5f:
71:c1:12:54:03:b9:30:0a:e0:fd:d4:e2:1a:9a:1f:f3:1a:8a:
2e:ae:37:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:37 2025 by rpki-client