Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: UhnI+RKQS886KHV1UrxXiPEKN2X4mlgnrE23uDZyuac=
Subject key identifier: 98:AC:01:6B:64:6C:69:47:D4:79:D4:96:E7:5E:F9:1F:A8:DB:89:DA
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 019A2C9FDD8286CFA1C28150A3E32B211588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 12E2
Signing time: Tue 28 Oct 2025 21:01:05 +0000
Manifest this update: Tue 28 Oct 2025 21:01:05 +0000
Manifest next update: Wed 29 Oct 2025 21:01:05 +0000
Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: ygYjwc0iaj6WBiFD1SJRddbyRLOnG0+dNVZKAtLarRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:9f:dd:82:86:cf:a1:c2:81:50:a3:e3:2b:21:15:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Oct 28 21:01:05 2025 GMT
Not After : Oct 29 21:01:05 2025 GMT
Subject: CN=98ac016b646c6947d479d496e75ef91fa8db89da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:39:0b:14:7e:5a:03:00:85:49:d6:89:5a:50:
12:73:92:93:04:a1:b4:9c:b2:aa:34:f7:14:79:87:
2a:39:b3:a7:c2:c5:d6:62:5d:fa:40:24:7f:9a:31:
4c:da:08:65:f4:57:fb:54:61:0c:72:d1:77:51:ad:
87:ca:72:4c:9f:6e:7d:12:c3:ae:49:d5:bb:aa:cc:
3b:04:2b:c5:5f:13:62:59:42:48:da:f5:6f:c6:1e:
0f:be:09:e7:78:ba:e8:4b:72:1e:ff:58:ed:b2:ae:
55:fc:00:4a:f9:45:c7:bf:1a:4e:f7:21:a4:13:ae:
f5:37:81:8b:67:23:f2:bd:b5:01:d5:c6:83:dd:ec:
01:6e:9f:f0:17:92:e1:b9:72:9c:00:56:34:13:5a:
7d:45:83:1e:59:bf:37:82:6b:ee:ec:f6:37:20:42:
cf:e3:cd:a3:d4:5f:3c:c0:85:3c:da:01:c5:2a:08:
6f:cb:5a:03:d3:4b:13:6e:13:2d:7e:41:14:02:63:
ee:31:9c:7f:07:f2:c1:75:5e:23:99:0e:fe:00:5a:
9c:8b:85:26:12:27:ec:34:e9:5b:c6:84:53:77:fb:
90:64:63:ec:5f:cb:b3:41:f2:d7:2e:c4:d4:47:42:
5d:c2:4f:41:a9:90:62:de:d6:d7:14:9f:a4:1d:5f:
1f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:01:6B:64:6C:69:47:D4:79:D4:96:E7:5E:F9:1F:A8:DB:89:DA
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:8b:25:2d:64:be:9a:db:2f:56:9f:d4:b1:e4:86:69:f0:40:
81:1a:dc:00:ab:b9:a9:0e:5c:5b:ab:a7:2e:f5:df:7e:56:28:
cf:7c:af:a4:67:39:a7:b9:49:c0:0f:21:17:d5:b4:5e:b5:a1:
c9:de:99:28:11:79:5c:22:21:38:aa:40:66:6a:39:7a:cc:60:
e1:86:52:d3:86:b9:e6:50:d9:88:9c:8a:a2:33:ea:c6:ba:0b:
95:85:80:d5:f0:5b:a8:6d:b5:53:fe:bf:cd:b2:4d:71:06:8e:
0b:62:b4:5f:b9:90:38:40:33:3a:a5:54:19:e7:85:f0:8b:8e:
84:a2:13:58:6a:e7:f6:2d:63:cd:64:dd:bb:dc:bb:31:28:1a:
47:d4:e9:d1:77:ef:f6:99:1b:a1:4f:63:b7:ce:85:8c:fa:5e:
34:e7:ec:b4:4f:36:b2:a1:36:5d:96:ac:5d:77:d8:b8:f8:13:
33:b9:ee:f0:ae:29:76:f7:6d:9e:a3:4c:6c:95:2e:ea:1a:83:
a0:d1:3e:a9:c0:59:e2:7a:91:10:74:04:4e:80:23:c2:8a:8d:
83:37:43:4f:e5:1b:3b:8a:c5:a0:a5:f1:fd:0c:ad:c4:d7:92:
ed:d3:ed:f3:cf:be:2f:88:37:f0:86:b2:db:18:36:c5:04:a0:
54:31:99:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 22:11:27 2025 by rpki-client