Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: 3Z3vpOwSu6hgPSbfRPHcAu6s2R36/NGVv29tTT2Ov2o=
Subject key identifier: B5:E7:74:98:B2:02:0A:8F:3B:60:9E:D8:D9:83:9E:52:EE:19:EA:E0
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019A7225CF718024BD83E3B8EB192E3AEECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 1723
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: qnfOKZrJ1feA0lTJbnJ+l4lRpY5dC435DewOxnADJBI=)
2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=)
3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cf:71:80:24:bd:83:e3:b8:eb:19:2e:3a:ee:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=b5e77498b2020a8f3b609ed8d9839e52ee19eae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:1b:48:36:72:10:27:ab:7a:a5:bc:b8:e7:
97:79:28:70:73:2e:2d:91:26:12:c9:37:50:8b:97:
a9:b1:0f:d4:aa:20:95:eb:fc:b3:84:42:99:e2:9c:
32:f7:07:25:79:cf:45:7a:6e:37:cc:3d:24:5b:88:
9e:0f:c1:5e:06:23:be:45:31:b7:29:7e:df:68:5f:
a8:b4:25:83:ad:f0:65:9e:96:0c:e4:40:fc:b1:f8:
dc:74:ce:49:98:e4:29:1b:be:f5:87:f1:9f:de:b0:
3a:6f:70:48:bb:0b:c0:93:a1:cd:d9:b3:d9:00:a0:
2f:2e:d9:e9:ce:ce:30:8a:6b:ac:d7:98:4d:39:3c:
ee:e7:5f:9f:97:b6:17:82:55:fd:88:57:c2:f1:d7:
e5:bd:0f:e3:39:9f:5f:79:4b:51:56:7e:f2:08:9a:
64:b8:b7:f6:99:70:c9:2a:0d:d6:80:91:e3:66:04:
95:57:1d:c4:da:bf:ed:f4:08:b6:b8:08:c0:0e:be:
01:73:b5:71:ce:63:7d:cb:83:87:e0:e2:71:4b:91:
13:2d:7e:b1:78:ef:9e:ba:79:79:f7:fb:43:4e:76:
2f:94:65:6a:ce:b5:9f:42:44:9e:94:7c:c3:8b:d1:
84:2f:58:76:47:e1:1a:83:33:f0:f9:5c:ca:d0:ac:
a6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E7:74:98:B2:02:0A:8F:3B:60:9E:D8:D9:83:9E:52:EE:19:EA:E0
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:8d:35:66:6d:d4:b1:72:66:f7:3e:de:83:40:86:14:13:1f:
2b:b1:c3:e8:e6:12:6b:a5:0e:dd:39:35:bc:6b:f6:ad:2e:ca:
55:4f:a4:ac:71:3d:07:1b:10:a9:5a:ba:35:11:0b:5d:be:8f:
04:12:a4:e1:f1:16:ca:7a:ca:dc:20:f5:43:6b:7a:f4:9d:0b:
a1:ce:b3:3f:62:19:17:d0:ac:81:bf:48:e5:b7:8a:52:f2:c1:
82:fa:8d:73:77:5e:00:9d:6b:a1:1f:39:3d:ef:ad:d5:9e:83:
0b:d6:0a:fb:1d:ea:6f:1a:81:29:8e:6d:94:cd:db:0f:28:88:
e3:84:0d:f5:98:5c:c0:79:75:26:c8:25:bc:ae:40:de:65:cd:
01:05:8e:1e:94:79:70:c0:69:34:b6:db:d3:6d:37:25:b8:9c:
dd:d8:b4:cb:a3:e4:54:69:8e:95:af:bb:1d:04:2c:75:8f:ba:
9a:0e:5e:4d:c5:e0:12:1a:eb:bd:1e:6d:08:5a:7a:4b:43:10:
e5:e7:39:dc:23:f6:74:23:fa:bd:18:e4:93:c7:99:34:b1:ac:
47:9e:61:2f:55:09:ad:43:6a:a5:15:2f:2c:29:6b:46:d7:7b:
f1:f7:8d:19:2b:9d:75:bd:0d:35:20:1f:a9:ec:a7:fb:21:26:
02:1e:06:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:58 2025 by rpki-client