Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: TbuhS5D148VECqu2Fr71OH2DY23164YRNiaS4SzEkLk=
Subject key identifier: 00:B0:D6:36:87:FD:C5:76:ED:BF:1D:7B:C0:A6:E1:8C:9F:1F:01:A5
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019A25C1B132716F93A61CD93467EAE59E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 15C9
Signing time: Mon 27 Oct 2025 13:00:42 +0000
Manifest this update: Mon 27 Oct 2025 13:00:42 +0000
Manifest next update: Tue 28 Oct 2025 13:00:42 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: IWNsg+cDRK5RmVPnADuQJyIkTNdL0lKem1Kkmk5j53g=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:b1:32:71:6f:93:a6:1c:d9:34:67:ea:e5:9e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Oct 27 13:00:42 2025 GMT
Not After : Oct 28 13:00:42 2025 GMT
Subject: CN=00b0d63687fdc576edbf1d7bc0a6e18c9f1f01a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:0c:7b:31:d1:71:6c:ac:e4:1b:d2:87:40:
16:7c:e6:0e:b3:06:77:49:dd:55:7c:83:44:c7:0a:
dc:f5:df:16:9a:01:94:56:bc:48:67:72:c2:3e:d6:
e4:13:29:2c:24:7a:af:55:02:ab:29:a6:81:89:e6:
3c:0e:78:b5:c4:60:13:f0:31:c7:f6:f6:62:aa:d0:
2b:00:0d:13:f5:8c:da:47:17:12:b2:d8:a4:4d:4d:
8b:18:02:7b:0b:a9:1d:73:c8:8a:50:ab:9b:4f:97:
02:37:af:0c:c5:9b:91:52:b8:db:71:0a:48:ff:a3:
1a:ad:3c:e6:74:71:34:2a:90:22:22:b9:49:98:c2:
26:7c:46:81:84:04:69:b2:6f:bf:05:02:8d:41:0a:
f9:60:d6:47:81:7b:7e:71:03:bd:6f:20:99:d4:67:
15:82:c8:7d:fa:a1:9c:c7:93:b5:9d:ed:d0:aa:72:
53:b9:9e:ae:71:c3:f2:8b:65:6a:4e:69:6f:e9:f8:
69:03:81:96:a9:92:44:61:7a:08:20:24:06:8b:f3:
0f:77:56:68:59:38:8d:5c:40:dd:12:6e:a3:09:98:
74:4e:ce:17:5d:dd:5a:ba:05:5c:94:38:8e:38:5f:
30:69:f2:c9:05:41:7e:7d:2f:20:58:db:c1:1c:4c:
fb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:D6:36:87:FD:C5:76:ED:BF:1D:7B:C0:A6:E1:8C:9F:1F:01:A5
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:e1:bf:52:37:e8:ce:1b:79:33:12:fe:95:de:07:26:c3:a7:
8d:bd:a2:52:b9:8c:bf:5f:27:59:0d:92:90:e2:66:fd:5c:a7:
fa:e9:7d:b5:5d:21:bf:e7:13:49:fb:86:c2:42:23:45:80:0b:
28:c1:e4:00:4b:66:45:7e:bc:98:5e:bb:79:e6:46:df:e4:97:
d5:8e:e1:c7:9a:6e:55:64:11:15:9e:82:a8:2e:4c:4b:bc:c0:
6c:53:0f:ef:2f:99:df:c8:29:e6:fa:01:ce:fb:c6:95:1c:dc:
7f:fc:fb:b5:1f:10:ca:b9:8a:3a:95:63:b5:2e:5a:b3:10:9a:
c8:e5:cb:26:07:f0:41:74:ce:fe:46:ee:91:05:f6:3c:a3:32:
01:70:f0:ef:e3:8f:01:e5:20:90:01:8a:da:50:f4:fb:22:03:
cd:89:a5:76:d8:16:2d:b6:d5:80:00:e7:4e:e3:13:f1:8c:2e:
72:1c:cb:52:00:24:f8:30:4f:94:de:23:5c:69:74:4a:8c:5a:
0f:95:c0:7f:80:89:45:61:3b:59:76:2d:0c:e6:6d:47:cd:22:
45:be:3a:25:ac:28:6a:11:68:9f:a8:11:c0:de:43:f3:37:fe:
13:92:97:03:db:0a:61:4a:e2:8d:17:1a:63:84:48:e8:92:b9:
ce:9d:3a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 17:44:23 2025 by rpki-client