Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: e/q66XQU75qmNeMn9fl3cTItklUfOytX3qaOYLYU11k=
Subject key identifier: E6:7F:19:F9:69:CD:76:94:96:05:F4:64:64:6C:CD:5E:BF:A5:40:7E
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 019A2A43E7408FCAE9EEE060C9BFE0A5FFD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0961
Signing time: Tue 28 Oct 2025 10:01:24 +0000
Manifest this update: Tue 28 Oct 2025 10:01:24 +0000
Manifest next update: Wed 29 Oct 2025 10:01:24 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: +g+AmeJ9Fuhfeoj/9Bd6dXL7fNV49GVvU7KjdIn8sbU=)
2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:e7:40:8f:ca:e9:ee:e0:60:c9:bf:e0:a5:ff:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Oct 28 10:01:24 2025 GMT
Not After : Oct 29 10:01:24 2025 GMT
Subject: CN=e67f19f969cd76949605f464646ccd5ebfa5407e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c6:0a:1b:50:b1:26:c2:cb:74:65:b2:57:7c:
f3:e2:37:9a:b1:de:bb:d9:f8:12:26:ad:07:6c:07:
64:50:9a:92:4a:20:f9:2b:c0:24:64:95:6a:32:e6:
df:a4:ce:69:d8:6d:11:ed:c4:a4:cb:9f:d1:32:9f:
77:10:0b:3c:0e:fc:d8:b6:4c:aa:fe:62:32:d2:c8:
13:a6:93:12:82:e3:4d:c5:64:1a:48:53:58:b8:bb:
87:7b:63:a7:b1:18:b1:25:51:65:63:2e:f8:f2:9e:
6f:96:e9:66:5e:88:6a:3f:08:b2:a1:5e:f2:46:4d:
9c:39:6a:c7:10:d8:62:0d:72:fc:f2:bc:b7:1d:0a:
a7:84:20:8a:25:03:c8:1c:27:73:06:d4:c2:bf:45:
e4:71:4d:c1:c5:4f:86:0a:82:43:17:62:9b:14:0b:
97:fc:57:be:08:27:36:c6:21:4c:48:51:0f:e9:0e:
db:73:9f:79:8d:2e:86:f4:91:31:64:93:9c:a2:cb:
93:1d:d5:d5:b0:2b:96:a0:e0:72:56:af:92:66:e7:
17:43:2c:c3:ac:9d:32:92:0a:56:58:c8:c3:c2:84:
5b:bf:75:6c:61:78:ae:10:19:8b:a8:45:d4:e7:1e:
cf:fe:d7:29:b2:43:e0:13:dd:f2:c4:56:96:31:66:
38:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:7F:19:F9:69:CD:76:94:96:05:F4:64:64:6C:CD:5E:BF:A5:40:7E
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:40:bd:5d:17:65:b0:1b:70:1d:22:a1:d0:64:46:31:30:aa:
18:a0:99:b1:86:b0:7b:ef:74:59:1c:79:98:f3:fa:da:98:81:
c7:7e:b7:79:33:f2:6f:0d:79:4d:c1:49:4f:82:80:fd:37:7f:
44:e5:95:4a:41:94:fb:c3:d0:f7:7d:f5:c9:17:6c:3c:d3:88:
c4:a0:ee:b4:ab:d0:a3:de:0b:a3:50:f4:c7:79:08:6f:fa:e1:
4a:9b:11:30:ac:81:78:6b:b7:fd:3b:39:97:1d:4c:31:e2:80:
a4:9b:4f:d6:68:ee:c8:d7:71:e8:1a:6e:67:57:e9:35:b6:53:
3a:49:8f:42:2f:3f:77:20:0a:28:a4:3d:39:95:c8:9b:c7:a7:
98:db:ba:d2:91:42:4a:70:49:c9:79:9b:66:b6:8a:50:66:c7:
1f:be:ce:27:6a:2e:9a:85:a9:ca:6e:b7:36:07:a2:60:2e:2a:
14:2d:12:1c:15:f4:88:ca:6b:2b:67:46:02:d6:d8:dd:f3:9a:
71:11:af:a9:41:2b:fc:db:93:f0:96:1a:f9:d6:66:ac:3f:37:
b3:41:c6:81:6e:1e:c3:4c:e4:7c:d4:62:27:db:46:99:7c:f7:
5e:08:89:6d:77:f3:67:94:9e:95:da:2a:e5:96:d7:5f:32:ca:
4c:87:48:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 11:52:59 2025 by rpki-client