Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
File: 4BtODyogHPQwBI4kgWSzLt30Pa4.mft (raw, json)
Hash identifier: XjpzBW5k/GYgzvW8Nh3kKapodL/qBQxZavj85vl+CRk=
Subject key identifier: 94:B4:9B:81:4F:B9:BD:77:3F:C0:5A:B1:A9:45:6E:B2:A4:D3:60:F0
Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
Certificate issuer: /CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Certificate serial: 019A7226084E66B0DB0DC986A88D089368F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
Manifest number: 01C4
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: 4BtODyogHPQwBI4kgWSzLt30Pa4.crl (hash: hjwsXTlk9AccJOETvTIxoE/S30cm2PHnNbOOFu1cuEo=)
2: KJS8V64pslKuMWFI7cvlulnThJM.roa (hash: TuhgricsSHQzRyANiX5wlopuZuXjn8vfdfEA+WHjVoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:08:4e:66:b0:db:0d:c9:86:a8:8d:08:93:68:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=94b49b814fb9bd773fc05ab1a9456eb2a4d360f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3c:cd:f0:ef:f4:d1:e4:55:c0:c2:89:dc:20:
f7:16:ee:57:56:8a:2e:c1:13:6c:79:05:39:d2:4b:
da:aa:5a:3b:1c:d5:d7:79:3f:3a:08:93:f7:8b:87:
86:fb:52:c3:81:72:23:cb:a8:c7:17:88:da:12:22:
e9:90:d2:84:4f:04:9d:02:14:e7:e8:c5:68:96:f7:
56:94:0d:c9:17:3d:ed:03:79:e3:26:ad:6e:54:44:
10:73:10:a3:a7:4f:9f:f9:0d:b5:3f:f7:3c:f7:5d:
b8:fb:fc:8e:95:aa:01:c1:e7:b5:a3:07:57:80:b0:
73:a3:dd:7a:f7:77:40:79:26:dc:56:30:71:9c:3b:
1f:ab:50:c7:98:37:69:39:8a:5d:35:3c:9d:da:a9:
04:85:d2:ce:36:13:7f:bb:00:58:ff:80:dd:57:c9:
01:e8:8b:83:f2:62:ed:64:94:a5:b9:68:44:2d:68:
ff:e7:d1:47:b0:c3:f5:09:c9:d8:73:36:9f:6e:bb:
a7:f0:3f:24:e4:1f:f8:05:83:a2:ba:6b:27:f3:e7:
3b:d6:fc:02:f7:59:fd:ba:21:77:7e:a8:30:3b:bd:
7d:b9:07:a8:bb:a0:d0:86:c2:af:1a:c2:17:29:87:
3e:79:15:58:df:9c:7f:bc:4c:4f:5e:00:d0:26:5c:
eb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B4:9B:81:4F:B9:BD:77:3F:C0:5A:B1:A9:45:6E:B2:A4:D3:60:F0
X509v3 Authority Key Identifier:
keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:49:d9:76:e2:7f:72:c6:17:73:99:a4:fe:98:de:be:ba:de:
34:13:63:42:85:19:50:68:6a:00:1c:bc:3b:bf:8b:71:5a:a3:
98:82:78:69:af:c4:4a:77:3a:bc:3f:bd:41:e7:da:13:d0:a1:
79:66:0c:b6:fc:26:b7:09:e4:eb:73:34:12:2c:7d:49:c3:60:
b6:31:b0:4b:7c:61:66:33:27:57:ab:a2:4f:e5:2e:fa:7c:f2:
23:8f:94:6f:5c:09:3c:fd:db:e7:31:65:c4:7a:b2:7b:df:ec:
47:6d:4e:1a:d3:9e:24:bb:da:49:2e:e0:06:c5:23:58:80:1c:
f8:53:ad:3c:85:90:94:16:bb:af:d1:8c:1e:b6:5f:c7:47:ff:
3f:73:e6:73:dd:6c:2a:73:fa:64:a4:72:c1:77:25:69:ae:3e:
92:33:32:b0:8c:63:ac:c1:60:16:b3:78:b4:af:d8:c5:8e:dd:
38:27:ba:63:24:95:f1:01:5d:d9:f2:cc:67:6c:b0:30:17:17:
dc:ed:29:50:5c:bc:69:75:53:21:84:9d:bf:db:04:39:f0:d0:
74:81:56:c7:e0:a4:de:02:e3:82:94:de:5c:9e:ba:bd:a9:a2:
6c:cd:d9:fe:fb:cc:78:12:6c:c0:f3:02:3e:5e:5d:88:be:f0:
e3:bc:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:20 2025 by rpki-client