Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: PCF0zmT7kELs5mxCJZ2GJj6HofGBmZnuTgDUoQrWjW4=
Subject key identifier: C9:05:83:78:9E:6B:35:E2:3C:A2:1D:56:7B:BC:76:6C:18:B7:9E:90
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019A71136EC0EBDBBF398FD8B897CE1D96E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 0547
Signing time: Tue 11 Nov 2025 04:01:30 +0000
Manifest this update: Tue 11 Nov 2025 04:01:30 +0000
Manifest next update: Wed 12 Nov 2025 04:01:30 +0000
Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: gF9g5i/E5SmD7L2CHgRqc5Weadaz48Tk/oVyJuppkTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6e:c0:eb:db:bf:39:8f:d8:b8:97:ce:1d:96:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Nov 11 04:01:30 2025 GMT
Not After : Nov 12 04:01:30 2025 GMT
Subject: CN=c90583789e6b35e23ca21d567bbc766c18b79e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:14:39:64:0b:8c:6f:58:16:ff:9b:4b:11:
85:16:b2:77:37:09:1b:45:14:dd:30:51:e3:a7:fd:
b4:cf:71:05:33:d4:d9:01:69:ba:65:7d:54:51:05:
cb:d0:a6:00:8a:8c:21:b0:b5:57:00:f6:5a:af:b3:
82:a3:3e:77:1c:04:44:b5:4e:71:b5:5c:a5:20:9b:
33:21:77:69:25:93:90:5a:04:24:4c:a7:26:65:7a:
05:a2:47:99:a3:6f:f3:33:8d:8e:c0:f0:60:43:90:
12:d3:f0:ae:3d:e1:4e:cd:de:57:60:b3:55:1b:53:
f5:57:de:7c:52:23:6c:25:a9:7d:b4:58:91:37:a9:
34:f8:52:6c:1e:8c:50:ca:27:9a:17:74:51:b8:5f:
52:06:1d:01:f9:73:23:15:8b:f0:b6:e7:df:5f:43:
d5:b9:e6:2d:88:36:50:57:5f:ce:f5:c2:dd:c3:05:
42:43:4f:6a:c6:61:8b:a1:a3:79:23:55:bf:de:ae:
32:e0:b4:99:81:50:54:21:d4:ca:f0:5d:b2:cc:44:
14:c5:e0:8b:24:49:45:f3:9c:48:3c:ea:8b:9a:77:
f1:20:2e:f3:83:61:f8:2c:11:92:10:1c:db:12:28:
00:40:28:c2:18:6f:94:8c:24:a3:9a:da:6b:bc:6d:
70:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:05:83:78:9E:6B:35:E2:3C:A2:1D:56:7B:BC:76:6C:18:B7:9E:90
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c6:d3:cb:fb:81:7f:0e:16:89:c7:8e:2b:cf:69:ca:6c:f8:
42:38:46:4b:bd:37:45:c4:c2:9e:9a:55:8d:c6:b4:ba:db:48:
95:49:27:4a:5c:d0:19:73:89:ab:d6:70:db:e2:fa:f9:b3:d9:
80:da:93:ff:b6:79:92:9e:39:ac:7c:38:a4:33:78:a0:2a:b1:
02:15:df:ec:1f:cd:b7:55:9e:62:25:27:d1:83:c7:52:f4:98:
66:f2:0a:b8:c3:81:19:43:77:83:84:7c:0f:5c:9e:a1:75:cf:
f3:b9:63:4c:78:ab:6d:c3:44:2b:09:9a:03:18:a1:68:12:fc:
58:fd:c2:55:c1:f4:45:ee:b3:2c:a1:46:41:d3:d3:94:97:0e:
8a:30:90:76:f0:5b:98:3d:f2:89:1f:5d:c5:cf:8a:55:95:6a:
fd:82:bc:ab:7c:ab:06:81:b9:ac:46:89:40:d0:67:b6:e1:d0:
7d:9b:dc:56:fa:c9:9a:c8:43:3f:66:26:db:e9:da:ed:da:d3:
dc:64:be:b6:95:0b:7e:22:d9:94:c0:c7:ee:1f:8a:e3:be:74:
54:41:a1:e1:79:c3:0a:4f:14:56:89:c1:20:a3:ca:7c:46:a8:
b9:0e:a5:6a:7b:0b:b5:a0:0c:e8:a8:57:1b:3f:51:80:5c:b7:
23:18:1d:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:46 2025 by rpki-client