Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier: EooR2fl+BB/V52Cx7FKa8Gg0po0oaPqw7EdGLMly2rI=
Subject key identifier: 51:35:AD:7F:85:3C:5C:E7:0C:7E:27:59:B4:BA:10:20:EE:B2:E3:6A
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019A0524057F823DB9294A22256B9E7F3AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number: 118A
Signing time: Tue 21 Oct 2025 05:00:37 +0000
Manifest this update: Tue 21 Oct 2025 05:00:37 +0000
Manifest next update: Wed 22 Oct 2025 05:00:37 +0000
Files and hashes: 1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: zvvgNOq2EIloRkML+e7y8CVCxyg3TJaLxK6iZBu4GaM=)
2: 8VHFK74OMKQnD381WiG3ZZR7ozs.roa (hash: B7p/Hrvwz47SgwLmobk1ZKXWoI4oqfm1r3I4SkLnjp4=)
3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=)
4: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:24:05:7f:82:3d:b9:29:4a:22:25:6b:9e:7f:3a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Oct 21 05:00:37 2025 GMT
Not After : Oct 22 05:00:37 2025 GMT
Subject: CN=5135ad7f853c5ce70c7e2759b4ba1020eeb2e36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:54:a5:b8:52:d9:a3:0d:e1:98:48:c8:01:
80:25:75:81:97:3d:33:98:11:9e:65:5e:ac:c7:3e:
ed:40:7a:08:65:c3:c3:f3:70:ae:4f:3f:7f:77:19:
cb:bd:54:6d:a1:1d:62:f8:ee:bf:db:f8:22:67:96:
cf:c6:37:39:29:3d:c5:d4:6d:66:08:83:bb:d9:f1:
e7:a2:20:18:b2:67:0b:5c:28:e1:33:b2:05:9a:8b:
0c:62:57:0c:a4:d5:86:29:67:00:fe:6e:70:27:13:
84:a3:f6:e5:0e:32:3d:16:c5:c8:f9:fb:45:1f:05:
8b:36:cf:a6:6b:64:ad:ad:08:a4:1a:26:c5:bf:ac:
cb:19:2b:1a:b2:8e:46:a9:39:25:69:5d:ec:cb:2c:
c7:01:0a:d0:03:84:d6:78:0e:82:13:4d:ab:ff:25:
1c:fd:f7:75:76:83:63:6c:a2:73:09:00:f6:ec:24:
70:b7:88:42:2d:05:a3:90:c3:71:ac:fe:71:f8:df:
6f:70:94:64:90:28:26:e0:22:7c:40:db:9a:3d:0e:
96:a8:d2:e4:3e:4a:30:88:3f:a4:f1:3c:5b:a0:a4:
fd:6f:0c:65:97:f2:6f:b0:4e:c5:8f:16:ea:d5:1f:
95:7c:aa:db:1b:72:2d:b7:5e:e5:5f:4a:74:60:21:
23:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:35:AD:7F:85:3C:5C:E7:0C:7E:27:59:B4:BA:10:20:EE:B2:E3:6A
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:10:46:bc:87:fc:6e:4e:1e:42:5a:3c:8f:c4:67:fb:c7:5b:
f1:4c:f6:92:b3:7f:69:68:1e:c3:a6:a6:25:2c:ce:20:fa:b7:
30:c1:fb:9d:98:86:1d:af:ce:29:89:ad:0b:cf:ac:ec:fe:47:
c0:e9:90:13:9a:ae:a5:92:83:11:49:8c:3a:27:19:60:be:ca:
50:9d:74:e6:44:c9:3e:dc:cc:38:93:35:90:ee:be:d5:58:99:
63:a8:0c:fb:b8:03:65:96:ba:e0:94:1a:e4:b1:3a:96:36:00:
5e:22:02:28:95:91:61:b1:43:98:bf:14:c1:fd:77:52:e7:02:
86:ed:0c:15:77:fa:4d:b8:91:49:bd:c2:20:f4:57:48:ae:36:
53:e2:2d:2f:65:de:f9:02:57:ad:2f:a3:a1:76:2f:49:76:b9:
b4:cd:44:aa:c4:21:97:f9:bc:ef:58:18:38:9c:78:e3:09:8b:
33:08:b9:6b:d8:b9:c4:19:83:6f:ed:5f:4d:b9:b8:f2:a8:0f:
4f:bd:44:d5:df:52:b3:b6:bb:a3:2d:86:d6:d4:1f:07:40:03:
4b:ca:f1:c7:e6:d9:65:f2:69:3d:a5:b2:ae:09:e0:4d:84:c7:
64:ed:eb:48:da:60:e0:06:eb:ba:24:49:2e:f5:fd:93:b0:f5:
26:c0:b8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 07:48:12 2025 by rpki-client