Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: HjmMLTZSYxNpskPWBXSDtkszHsev65xeBs11fjkQV0c=
Subject key identifier: 8A:F4:A5:EA:4A:58:BE:17:B8:C7:DE:BC:D7:00:C6:82:C8:D5:B1:7D
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 019A71B8F9C816BA2A2934E46023572BABB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 07:02:19 +0000
Manifest this update: Tue 11 Nov 2025 07:02:19 +0000
Manifest next update: Wed 12 Nov 2025 07:02:19 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: OPxfd66Xjhbct8j2svLZQoVRDk23YPewSLVR/Jr9+c8=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:f9:c8:16:ba:2a:29:34:e4:60:23:57:2b:ab:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Nov 11 07:02:19 2025 GMT
Not After : Nov 12 07:02:19 2025 GMT
Subject: CN=8af4a5ea4a58be17b8c7debcd700c682c8d5b17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:7a:b2:34:60:03:03:25:6d:77:32:6b:1c:8e:
90:3d:10:ca:a9:d1:4e:e0:b4:b5:0f:bf:d7:54:d4:
5a:c2:c6:92:b6:85:7a:3c:ed:1e:36:e2:fc:19:7e:
fb:6a:d7:6a:03:8e:1e:8f:f6:2d:3e:fb:e6:d0:72:
21:00:2c:0b:53:45:54:6e:5f:3a:13:b1:d9:21:23:
85:4b:5b:46:bf:e8:f5:06:80:c4:fb:34:26:8a:0e:
42:25:ac:dd:67:3e:22:2c:3e:30:4b:da:b6:01:91:
4c:0b:c4:24:67:38:2e:db:d5:dc:4b:45:82:ce:4f:
85:3b:bd:01:13:a3:51:eb:64:e4:89:e2:fb:a5:a4:
60:e3:f4:42:30:1d:54:ea:47:ed:c2:dc:2c:80:f9:
91:83:fd:92:1c:4c:11:3e:fe:8e:02:0a:4a:78:0d:
dc:cd:ce:d4:55:2e:f5:35:df:92:7f:44:61:8e:4b:
27:93:35:47:09:3f:45:c5:93:68:a1:bf:ec:58:be:
55:7f:2e:ed:8d:4b:ae:9b:b3:85:32:a0:aa:fb:c9:
99:86:1f:a0:19:cd:96:46:c2:7f:ed:88:e2:95:56:
80:a0:29:b8:6a:be:1b:63:ec:f3:1a:97:84:e4:15:
59:2c:8e:56:c2:e8:21:de:32:1a:f2:38:40:79:9f:
20:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F4:A5:EA:4A:58:BE:17:B8:C7:DE:BC:D7:00:C6:82:C8:D5:B1:7D
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d6:f3:d6:e9:71:3c:ec:ed:bc:c9:be:b7:99:f4:da:8f:b1:
2d:d8:24:3c:69:24:1c:16:e7:0d:9c:b1:fb:9d:f6:8a:d0:bb:
38:35:07:04:c9:5f:77:83:8a:28:39:ab:b5:2b:cd:02:10:c1:
21:1c:23:13:ff:e8:58:3e:cd:b4:d6:0b:47:50:84:11:74:fd:
78:7d:3b:4d:85:01:1f:6c:09:4a:7c:58:43:d0:e9:fc:19:e4:
3c:f4:da:fc:0c:ed:90:ad:f4:63:1d:12:f9:e5:65:7c:3c:3d:
b2:c7:d4:3a:40:07:b7:da:65:b1:0a:8e:fb:19:ea:8e:38:a4:
37:19:8f:ea:2f:89:00:9b:12:3e:ae:0d:e7:0d:5d:59:ca:53:
f6:6d:40:c9:2f:95:3e:42:54:00:33:ae:e9:9a:af:93:65:09:
2b:d2:d0:0c:10:37:64:b0:98:bb:0f:f5:99:de:5c:bd:a3:f6:
2c:60:a8:af:f0:02:7f:ca:6d:f7:86:56:bb:dc:79:bf:ab:0f:
8f:01:d3:71:a1:de:b8:c4:b9:7f:d6:42:7b:4b:19:dc:da:5a:
a8:20:e0:b5:7b:29:0c:6f:63:fe:ff:53:68:18:7e:e7:f1:d8:
09:e9:77:1a:22:bd:91:37:34:1d:cc:c8:91:4d:a0:62:67:f8:
9d:2d:41:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:42:56 2025 by rpki-client