Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: hvgNTj/fP7g0d6WFDciTscTCShWWXWLZtFnBOZdVHXE=
Subject key identifier: F1:3B:DB:EC:75:03:E5:F9:2D:97:22:F8:A9:18:D1:D6:9E:76:76:A0
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 019A73015330FB9C840AE3FA935811D16E0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 0ADF
Signing time: Tue 11 Nov 2025 13:00:57 +0000
Manifest this update: Tue 11 Nov 2025 13:00:57 +0000
Manifest next update: Wed 12 Nov 2025 13:00:57 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: M8t1v1mFDn/sZXTGiI8MnuisFxKnI0aW1EnZo+PKyL0=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:53:30:fb:9c:84:0a:e3:fa:93:58:11:d1:6e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Nov 11 13:00:57 2025 GMT
Not After : Nov 12 13:00:57 2025 GMT
Subject: CN=f13bdbec7503e5f92d9722f8a918d1d69e7676a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:38:e5:2e:19:bd:74:fe:2b:6e:8c:2c:e4:58:
81:c0:95:94:6c:83:b9:40:55:5b:77:73:d0:3f:a2:
62:0b:20:b0:be:12:61:f5:c5:02:0c:91:73:52:28:
34:0e:7d:61:c6:16:3c:5c:f7:d8:38:5d:41:97:b8:
e4:a9:75:df:ef:e3:0b:e7:aa:98:cd:e8:e4:4d:ac:
3b:19:cc:61:79:b8:d6:86:84:cb:8a:60:ea:46:97:
80:cf:a1:6f:3e:41:6a:9e:ca:a9:90:bf:86:0f:c0:
38:05:a8:cf:97:a4:88:3a:8a:1b:c6:50:f8:6e:20:
23:28:60:06:3c:e6:1d:22:60:f1:96:e3:d1:13:63:
81:bc:82:d7:0e:3e:e1:15:83:18:ab:f3:96:7d:8a:
0a:d4:f0:74:3e:e6:cd:e2:73:42:2e:1d:4e:ee:f3:
e0:aa:24:e0:ce:da:6e:96:f7:e9:f9:a9:5e:f1:c3:
43:0c:0c:a0:d5:5a:8c:5e:55:be:7a:df:e7:6d:e8:
d9:4b:7a:5f:86:b3:16:58:1c:92:61:5a:31:23:fd:
a7:93:ad:a8:58:45:c5:1c:8d:b2:ee:38:17:ce:c0:
35:41:aa:2c:7a:a1:14:c4:dd:39:3a:42:4d:00:e4:
11:e7:cd:05:5f:1d:e7:6f:36:8d:15:c9:fe:80:b5:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:3B:DB:EC:75:03:E5:F9:2D:97:22:F8:A9:18:D1:D6:9E:76:76:A0
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:01:dd:11:0c:c5:42:96:bc:26:fe:40:3e:c9:dd:52:c8:eb:
3d:56:e7:c4:85:5d:db:59:e8:44:63:45:30:6f:e9:53:84:17:
a2:70:b0:72:5a:d6:23:3a:79:89:fd:d9:39:c8:59:8a:a0:87:
0b:6d:b8:73:9f:04:07:58:30:50:7c:b6:13:20:53:12:d0:a5:
ca:c5:70:ce:22:54:61:aa:25:03:35:3a:1d:5b:d7:7d:d9:e5:
6b:a5:06:e9:8e:0c:7e:12:3f:ca:6a:bd:31:5c:7a:80:f9:74:
b3:e0:ad:ae:27:80:7d:d3:6e:da:b2:42:81:7b:ae:b2:05:7c:
54:5f:2e:e8:9e:91:78:21:1c:d8:dd:b2:71:48:ac:57:f1:d4:
64:c6:e7:d2:b0:99:b1:4a:6f:4b:7d:62:50:d9:67:01:9c:10:
53:51:cc:1d:82:12:1d:fd:28:49:9e:36:1f:aa:91:e6:f9:30:
01:7f:54:dc:ca:b9:48:93:19:f4:ea:c8:28:2c:c8:d5:f2:20:
a2:cc:26:b8:89:36:fd:d1:7a:53:90:e2:37:2e:2c:aa:a1:b8:
01:95:55:c6:39:64:65:d0:7b:59:34:6f:f2:e8:c1:97:93:18:
58:19:a8:4b:e9:dc:13:fb:fd:94:6f:62:1c:b0:ef:4c:9e:f8:
28:06:3e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:08:38 2025 by rpki-client