Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: 3yODKfZNHhIHLec0xaU7rbcbWsRa93dbN8zrOLywEGA=
Subject key identifier: 95:39:5C:3C:04:67:6B:11:9A:FD:4F:B6:5F:F6:50:B5:AD:74:F7:BA
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019A12040C875E26A6A83B53D3F750969789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 143F
Signing time: Thu 23 Oct 2025 17:00:46 +0000
Manifest this update: Thu 23 Oct 2025 17:00:46 +0000
Manifest next update: Fri 24 Oct 2025 17:00:46 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: 2XguQ/c69PDqrQVsSSQbPx1v3bVn7ectWd8/6YF/EuY=)
2: HTMh6RJF_q53kTnEGeTtdGIx040.roa (hash: nzX5ZOpXvf0qMt8FdSECR2favMzFA7ed3+MWJmI8hm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:12:04:0c:87:5e:26:a6:a8:3b:53:d3:f7:50:96:97:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Oct 23 17:00:46 2025 GMT
Not After : Oct 24 17:00:46 2025 GMT
Subject: CN=95395c3c04676b119afd4fb65ff650b5ad74f7ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0a:40:84:8b:4b:15:c8:bf:5a:a4:e5:27:47:
4b:98:c5:9b:27:eb:74:34:03:74:db:1a:45:ef:8b:
a8:94:82:e8:37:4c:2d:27:ea:f5:7b:1c:3d:71:81:
cb:36:51:de:85:99:b1:0d:d9:f7:f8:6d:21:b5:ec:
32:af:04:64:ed:e2:6e:7c:c3:f1:06:01:52:e4:c9:
49:1f:42:9d:3b:d3:66:58:6c:52:79:91:72:dc:93:
76:58:63:ab:08:2e:61:6c:95:de:01:ce:fb:f6:dc:
e1:24:7f:68:37:e3:eb:fe:e1:bb:e6:af:a5:41:1f:
33:28:f0:68:82:6c:fb:c1:d7:09:31:65:2c:4e:28:
99:a9:fa:e0:69:2d:3f:ed:60:74:3c:5a:71:45:de:
6c:45:dc:b4:07:ac:65:64:e6:89:40:d0:b0:f9:ba:
63:4b:7c:9a:37:d4:ba:88:2b:c7:68:cc:79:42:62:
db:f1:4a:42:c7:5f:41:79:cc:0e:da:5a:a8:b5:bd:
46:67:47:d2:e2:a1:4f:70:67:83:7d:93:68:43:d2:
24:23:4e:66:00:b3:e3:50:74:d7:ae:21:a6:c3:ff:
29:cd:e2:2d:8e:df:8d:d4:e1:19:8c:63:50:43:67:
14:ed:cb:d1:59:06:db:b6:6c:26:cf:12:91:57:16:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:39:5C:3C:04:67:6B:11:9A:FD:4F:B6:5F:F6:50:B5:AD:74:F7:BA
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ba:3f:53:77:1b:f6:45:31:15:fb:2f:93:83:1d:ba:12:76:
19:1c:b7:27:aa:a3:c9:3d:9a:35:20:e5:7d:ac:ea:66:2e:ba:
fa:53:f6:e8:87:fc:d1:27:eb:a9:ea:c9:d6:27:04:c2:2d:3d:
65:f9:68:2d:9e:97:9b:c3:5e:1e:a7:b9:74:8a:8c:aa:9b:7a:
47:d9:bf:f2:75:d7:a3:f7:27:5c:a1:a3:23:c3:28:14:89:d0:
8c:fc:9d:73:1e:69:94:89:24:c1:de:2a:ee:a7:6e:e0:e1:62:
77:9a:11:0c:24:d5:01:f6:40:40:81:6b:65:35:1f:84:27:97:
93:fb:c1:ba:ba:4b:00:6b:d1:29:91:17:09:ce:db:92:0d:52:
14:fa:26:9b:6d:da:96:4c:42:39:ac:d5:e6:3a:1b:dd:3a:63:
3a:c8:75:0f:4d:51:ba:70:98:3e:1f:cd:ab:cc:96:d8:6e:d5:
0a:d4:0e:1e:d5:d8:52:69:64:9e:85:40:34:c9:fe:50:a9:64:
70:d0:7a:dc:92:af:89:77:a2:3b:19:5c:4d:33:56:aa:3d:c4:
45:bc:ed:4c:6e:f3:a2:0b:b2:ad:9a:05:7d:0d:c6:d5:dd:f1:
4e:b0:28:44:5b:78:ac:fc:85:a7:8f:a9:37:e0:9e:de:4b:47:
36:a1:f2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 23 21:06:57 2025 by rpki-client