Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
File: 4koyJ4zntMsgXfzK14YBSjsK4yM.mft (raw, json)
Hash identifier: gYJiRergFGsEOqLLF/DqX3be0ik4jkCLSh9RSVwuWTg=
Subject key identifier: 27:A3:A9:FA:0F:E0:77:1C:1D:61:CB:4F:21:58:38:CA:CD:DC:56:79
Authority key identifier: E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
Certificate issuer: /CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Certificate serial: 019A725C61A1E491482F9B71BCC17A5EC961
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
Manifest number: 0EB8
Signing time: Tue 11 Nov 2025 10:00:48 +0000
Manifest this update: Tue 11 Nov 2025 10:00:48 +0000
Manifest next update: Wed 12 Nov 2025 10:00:48 +0000
Files and hashes: 1: 4koyJ4zntMsgXfzK14YBSjsK4yM.crl (hash: 1YO9gFiThFDPTK60VtLWYY7yuDvsEL0hLcz8HkaByl0=)
2: Fl9jCud-UU_nsltrgxF4woEzDPA.roa (hash: t0KQ+pJmnr1NHNCgrJUYJH3j4t5bgDietQ+c+4tjYIw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:61:a1:e4:91:48:2f:9b:71:bc:c1:7a:5e:c9:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a32278ce7b4cb205dfccad786014a3b0ae323
Validity
Not Before: Nov 11 10:00:48 2025 GMT
Not After : Nov 12 10:00:48 2025 GMT
Subject: CN=27a3a9fa0fe0771c1d61cb4f215838cacddc5679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:0a:86:67:44:64:10:aa:1c:20:d2:38:7d:
dd:58:b3:bc:d9:cf:1f:77:ec:2d:ad:aa:1a:e9:9a:
d7:f4:0b:c1:b7:2f:b6:9e:1a:f9:c2:ae:ba:f7:08:
30:85:8d:34:fe:71:5c:1e:02:2d:4f:b1:a9:56:c8:
f9:0c:22:ea:33:89:b2:7e:9b:c0:d4:b8:37:8d:ed:
f5:96:15:2f:8b:30:d3:63:d1:0f:63:2e:f9:b3:13:
a9:43:db:b2:4f:67:d9:d0:7e:42:7a:cd:d7:97:75:
a1:6a:1a:5d:40:3b:02:fb:53:12:be:a7:22:eb:88:
7f:ae:bf:df:3b:3b:34:1a:9f:6d:25:2d:b0:88:ca:
13:79:19:aa:7f:df:38:1a:17:cb:02:e1:ca:79:f5:
83:5e:88:84:45:df:f5:de:db:9f:d9:a9:44:1b:e7:
85:f3:3d:7f:ce:b1:d8:a3:51:44:98:fc:a0:8c:66:
de:c0:96:fc:77:6f:19:e8:0e:95:77:65:68:d0:a2:
90:07:f2:8f:d1:31:5d:83:a4:91:cf:86:29:57:37:
6a:36:8d:48:d8:99:55:cf:b2:d0:e6:a3:87:0d:8e:
59:11:bf:8e:e0:d2:26:27:72:bf:9f:f7:14:72:41:
66:e6:68:b6:4f:96:a1:3f:ca:d5:8d:f3:cc:ff:4a:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A3:A9:FA:0F:E0:77:1C:1D:61:CB:4F:21:58:38:CA:CD:DC:56:79
X509v3 Authority Key Identifier:
keyid:E2:4A:32:27:8C:E7:B4:CB:20:5D:FC:CA:D7:86:01:4A:3B:0A:E3:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koyJ4zntMsgXfzK14YBSjsK4yM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/36486b-b7b7-43a2-bb27-77ab05e0cf62/1/4koyJ4zntMsgXfzK14YBSjsK4yM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:84:b5:e0:3d:a1:36:2d:3e:f2:d3:b3:94:36:3d:b3:c4:a5:
1b:be:44:6a:6e:bf:8e:d1:10:fd:0e:75:22:71:ba:b4:f6:8d:
0e:fd:d6:c8:a1:82:d2:65:27:b5:39:42:89:08:b1:b6:bf:f8:
d3:99:45:10:46:6b:5e:e0:3b:7d:80:f7:24:59:50:fa:db:a3:
b7:e5:21:0e:00:37:fe:ac:a8:96:98:75:6d:08:05:26:cf:3f:
dd:ea:1a:21:51:f5:6d:b7:8c:0b:6c:e7:c6:8f:14:84:1b:67:
96:20:e8:1d:3b:54:fe:25:9e:36:55:38:39:cc:63:a2:a7:ce:
79:ad:5b:39:9a:ca:02:9f:af:a3:0a:41:63:b7:2c:86:4f:f7:
c3:24:60:bf:90:a8:f5:a8:7f:49:f9:16:58:06:2c:5a:d0:12:
d6:a0:db:5a:2e:ed:b9:8a:f7:04:ad:fa:21:4e:25:67:7a:ec:
81:a0:b2:68:5c:5b:22:a1:e9:a2:74:aa:f0:8d:94:89:16:5e:
aa:38:9b:e7:9f:7b:47:7b:4e:d9:e7:88:16:71:e0:ba:ca:86:
fc:01:37:83:e4:97:69:74:fc:28:34:96:21:d0:26:70:f0:4d:
ba:21:b7:bb:fa:93:81:80:d7:f8:74:4e:b3:35:82:00:c0:60:
25:a5:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:16 2025 by rpki-client