Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: GeHOjTrNTEjxW53fdZKC27aeO1vj3JUKsjH0dOtxsiI=
Subject key identifier: EF:E1:90:8B:89:7A:D4:5A:44:FF:10:5F:BC:CE:53:42:BC:68:38:39
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 019A7112FA1FAC04DB32A4CF76F8021DB080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 04:01:00 +0000
Manifest this update: Tue 11 Nov 2025 04:01:00 +0000
Manifest next update: Wed 12 Nov 2025 04:01:00 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: 0JbMIB6lNpXvONDpbyFwofTejGf7RI7mrohFJdD5V2o=)
2: GfCJvI9nayXOG-c9-kNZYMtGvRY.roa (hash: iErUIkofrDIWovm2VEktlTu0LGFlXqiT+Jb2IEFCjN4=)
3: b6PxSRMMpYMDelZhlHVJswnGzlY.roa (hash: 2hbPovorwIzKGKG+8Z0PbXVcSz91V4CX1uoPUPOxcMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:12:fa:1f:ac:04:db:32:a4:cf:76:f8:02:1d:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Nov 11 04:01:00 2025 GMT
Not After : Nov 12 04:01:00 2025 GMT
Subject: CN=efe1908b897ad45a44ff105fbcce5342bc683839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:01:8f:c8:a5:39:ee:96:d4:34:47:a9:3b:8c:
11:87:37:fa:f9:09:5c:16:79:09:ac:38:df:af:e7:
fc:16:65:a5:e4:d9:4c:2a:6e:b9:0b:28:bb:eb:af:
9c:e9:9b:a5:92:fb:5d:a9:80:de:6e:0b:4d:6c:50:
74:27:e9:1b:b4:e5:fd:5d:2a:65:2e:f3:d3:0a:e2:
62:88:b2:61:1a:b1:5a:4c:a3:58:f4:ad:d5:38:da:
47:b8:63:0e:8b:f3:9f:49:e1:59:8e:db:6f:5e:fe:
7c:5b:23:0a:ea:cf:5f:21:5d:64:02:57:71:59:4f:
ec:3a:c0:d1:bb:15:97:33:14:e4:24:2e:6f:dc:a5:
73:75:c6:bd:7f:34:9c:73:d3:3d:40:a5:d4:c0:0a:
26:4c:79:74:f8:6b:8d:92:ee:cc:c9:bf:33:0d:37:
7e:54:42:a9:51:59:a6:12:01:b8:77:b0:12:94:2f:
11:19:ab:0a:48:bc:8a:19:9d:df:89:05:83:25:b2:
ff:5d:fe:11:60:a1:42:5c:c5:0c:1f:8e:c5:2a:a6:
a6:5f:8c:16:f6:c4:7a:36:7c:01:53:8b:64:3b:f2:
de:15:80:9b:61:e6:8b:d7:3d:45:2e:31:ab:0d:85:
e0:d3:6e:5b:58:91:e8:21:de:37:44:09:b4:b2:0f:
86:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E1:90:8B:89:7A:D4:5A:44:FF:10:5F:BC:CE:53:42:BC:68:38:39
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:21:4a:07:6e:7a:84:0d:71:f8:b5:88:b7:51:f2:21:ad:88:
a1:dc:a8:72:42:dc:68:be:0b:33:b7:09:23:13:e6:f2:3b:69:
eb:95:91:02:3b:8e:90:6f:df:c9:ad:e7:ab:a4:fc:42:78:d4:
0f:0a:8f:5e:6a:cb:28:c2:91:91:c9:e6:66:0a:32:c9:ab:0b:
77:7f:b2:c6:cc:bc:fe:29:2a:53:64:ab:44:8e:07:dc:3d:9c:
ea:19:cb:99:22:17:ce:12:03:97:bb:d7:5f:6c:79:72:c6:35:
4b:92:48:81:fc:9a:73:0d:6d:9e:ab:6c:70:47:5b:02:eb:6a:
3a:1b:06:58:22:8c:67:35:36:b0:41:bc:7f:7f:b8:66:19:35:
a0:ba:78:5b:67:4a:3e:00:c2:6f:21:ac:83:45:5a:3c:bd:8b:
ad:13:d0:1c:7a:38:be:e7:3d:e5:ec:7e:34:ab:e6:e2:19:25:
d2:08:55:e5:c1:3d:96:b5:e4:c2:93:28:e5:3d:67:a9:83:94:
17:88:f5:ae:07:8e:9f:c5:33:b0:78:65:d5:dc:b7:c8:15:58:
b1:57:99:b5:c1:de:c5:e4:4f:95:19:10:16:07:5c:eb:d5:c6:
22:04:73:71:a7:f9:4f:5e:24:f4:a4:84:b0:62:11:78:2f:49:
35:14:f0:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:35 2025 by rpki-client