Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
File: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft (raw, json)
Hash identifier: E8Ev+gg7q1nQRyI7VzamfU3sfY7TEbn+KrBMNMLHiyQ=
Subject key identifier: E9:FA:70:21:93:2A:16:CA:E4:4E:FB:A7:C8:06:C2:3C:FA:CF:6B:63
Authority key identifier: E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
Certificate issuer: /CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Certificate serial: 019A7225818806B5C4A31AA44BF732077086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
Manifest number: 1199
Signing time: Tue 11 Nov 2025 09:00:51 +0000
Manifest this update: Tue 11 Nov 2025 09:00:51 +0000
Manifest next update: Wed 12 Nov 2025 09:00:51 +0000
Files and hashes: 1: 4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl (hash: Bv5XZvEe1K6Ybm6edivrkK9pM0sGAAiNDAIMcLZ9V6o=)
2: EIPXP4SEmPbV8aQA2-5L0Ta_OhQ.roa (hash: YwImDgJjuNmka436Jqvx4IjnyNxYmhqYhI9Yd1gMUo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:81:88:06:b5:c4:a3:1a:a4:4b:f7:32:07:70:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d3c9af6cf52b8a390b58f00b14a88710336944
Validity
Not Before: Nov 11 09:00:51 2025 GMT
Not After : Nov 12 09:00:51 2025 GMT
Subject: CN=e9fa7021932a16cae44efba7c806c23cfacf6b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:77:7f:1e:9a:fc:b5:e0:86:5e:65:ed:06:
3b:12:36:80:c5:e0:75:7c:ec:92:e7:2b:71:2f:3d:
93:e3:94:a2:7e:b0:c6:df:b8:51:9e:47:aa:6d:84:
89:c7:cd:48:78:57:c5:23:cd:9b:a1:80:a1:be:10:
c3:d8:ad:8e:bd:d8:7a:01:c8:44:a0:2c:49:37:d3:
6c:da:52:4f:b6:8f:a6:c2:d8:19:5f:6e:f6:d3:3f:
a8:c4:56:75:99:99:9a:12:de:80:a1:35:f3:65:6b:
40:21:b5:28:b5:db:e3:0f:6b:f6:92:35:cd:bb:62:
24:3c:c1:e2:da:6c:9c:af:4b:38:78:22:11:1d:44:
d4:43:3e:b5:bf:36:c4:0c:ac:92:64:7c:b6:00:47:
fe:a1:31:b4:cf:21:8e:a4:68:28:c1:70:e1:ee:5b:
4d:e1:89:03:86:f4:ff:e6:a2:a2:a2:9f:55:3c:65:
04:91:b2:5e:38:38:4a:9d:83:f0:5b:bf:62:47:28:
02:f6:16:53:fa:65:5e:eb:3e:7c:56:1a:1e:bd:9d:
c5:21:b7:ea:54:9e:7e:08:8f:8b:6e:6e:76:eb:9a:
b7:5c:1b:d4:54:a1:c9:51:60:63:94:58:81:af:02:
cb:15:cf:18:70:c3:64:a2:20:3d:af:94:36:f5:24:
66:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FA:70:21:93:2A:16:CA:E4:4E:FB:A7:C8:06:C2:3C:FA:CF:6B:63
X509v3 Authority Key Identifier:
keyid:E1:D3:C9:AF:6C:F5:2B:8A:39:0B:58:F0:0B:14:A8:87:10:33:69:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dPJr2z1K4o5C1jwCxSohxAzaUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2c0dcd-8e47-442c-b0f4-cc7679f1802f/1/4dPJr2z1K4o5C1jwCxSohxAzaUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:fb:e6:25:d0:84:8f:5b:d3:fc:23:80:34:30:ea:9c:24:03:
c8:2a:fb:ce:80:9a:4a:60:86:9a:86:8a:e4:92:52:cb:97:4e:
10:95:bc:8f:8f:c4:96:9a:0c:c6:be:3c:12:df:9c:19:81:d8:
0e:e5:a5:8c:ad:ea:2d:0a:13:2d:92:21:9a:c8:54:bd:d5:4a:
e1:1e:49:f5:0e:ae:a8:9a:79:26:03:e0:8b:29:d4:36:40:59:
81:ba:70:60:75:2d:a3:15:d0:06:1f:b6:b7:34:30:ae:57:88:
ea:16:a4:fe:38:31:62:76:96:65:8c:37:d0:f8:c3:49:e3:5c:
27:58:54:cb:f7:fd:c7:f8:06:24:b8:74:36:2e:c7:0e:40:9d:
d7:ec:b8:66:54:76:44:2a:a0:17:ed:5f:19:59:d6:ec:7f:00:
a2:16:8c:e8:65:c8:b7:21:ad:d4:0d:76:93:14:83:29:f8:e5:
1b:55:b5:d9:73:a3:3f:a0:51:19:33:6d:23:8d:47:3c:27:42:
ad:81:56:50:3e:57:67:19:b0:57:11:45:35:56:ef:84:91:28:
c3:69:ee:b7:7a:4d:59:56:52:73:95:5b:ee:91:2c:c6:49:0e:
69:5e:a8:77:1a:2f:9a:76:bd:d5:07:e7:c7:fc:2c:ae:8a:57:
42:81:77:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:48:55 2025 by rpki-client