Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: Z98wwxcKMKVskAqTsnp6ZP23jB7IUpyl2VSZOS7xXUU=
Subject key identifier: C5:EA:27:4B:9C:E0:42:DC:58:D3:55:5A:DD:4B:60:D9:B6:80:F9:E4
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 019A7293FA532947D3DF9D8E4597D3C2BB80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 11:01:31 +0000
Manifest this update: Tue 11 Nov 2025 11:01:31 +0000
Manifest next update: Wed 12 Nov 2025 11:01:31 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: LVdJ8bOoWO54iKESGosNKBd7Uzo74TK0Sks2czp0SKY=)
2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:fa:53:29:47:d3:df:9d:8e:45:97:d3:c2:bb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Nov 11 11:01:31 2025 GMT
Not After : Nov 12 11:01:31 2025 GMT
Subject: CN=c5ea274b9ce042dc58d3555add4b60d9b680f9e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:81:49:fa:e5:6e:2d:98:64:1b:ae:83:51:69:
c9:52:1e:2a:c6:f5:41:6f:c1:1b:a2:99:52:67:c3:
c7:85:03:62:de:b8:15:81:52:44:1b:ee:71:a4:82:
13:81:d3:e3:3a:be:6c:4e:8e:1a:99:fc:74:c1:f4:
c6:91:07:6c:3e:6b:7a:f7:83:ba:24:63:b9:36:83:
ab:9a:62:75:1e:35:42:fa:74:79:f7:f9:de:9f:52:
66:91:00:89:e9:80:cc:0e:67:8f:22:ad:d8:b7:41:
f3:94:7b:b5:3a:d2:98:6f:12:08:07:71:76:47:fe:
d9:86:62:93:97:48:2c:1b:07:e7:9f:9c:36:c3:e1:
af:e4:79:64:8c:17:16:87:fe:b2:11:9f:2d:a7:62:
f1:71:7a:dc:c9:41:0b:f1:d0:14:73:e2:ee:43:be:
32:80:60:c4:e5:7d:50:c0:b6:d6:0e:97:3b:9e:13:
26:6c:28:c6:a2:b5:36:f9:79:0f:33:33:d5:dd:33:
1b:8a:51:0e:36:3e:f9:eb:40:22:7c:46:3b:c8:fd:
0b:60:ea:d9:64:0b:87:24:de:70:63:8d:83:9e:44:
9f:27:84:90:6b:d0:2d:10:5d:c2:c1:d7:df:ab:cd:
9c:45:5c:8e:e0:52:37:4c:aa:2a:b2:82:65:a7:20:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:27:4B:9C:E0:42:DC:58:D3:55:5A:DD:4B:60:D9:B6:80:F9:E4
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:73:c3:03:c0:f7:01:ff:cf:16:57:6d:03:b5:34:2c:bd:d2:
99:4d:3d:0f:d5:b5:97:41:ef:8a:c1:dc:16:0d:f4:fe:32:6c:
ba:0a:54:73:21:0f:ff:7d:0e:28:14:7d:52:58:79:08:07:81:
ed:7b:a3:8b:3a:ba:bc:5c:bd:01:cc:0e:f1:e7:1d:c4:1e:0f:
0b:01:94:1f:2b:01:9a:70:77:1f:5d:e0:1a:25:eb:e5:7f:8f:
56:98:54:5c:91:df:e6:8e:8f:ba:96:a7:b7:ef:bf:93:92:a5:
b2:4b:35:ef:77:a9:62:62:88:82:ae:e3:53:d3:12:47:a6:85:
6f:7b:76:fe:7c:9c:57:a0:65:ce:73:af:38:f6:07:be:24:47:
ef:3c:98:c2:5f:3e:b3:71:ec:48:c7:0a:c6:be:43:1a:cc:84:
2c:55:f2:76:9d:1f:38:df:31:9c:34:eb:54:ca:78:54:16:e4:
03:65:de:d9:bb:0d:f5:20:e0:d6:64:27:09:24:79:6b:8b:01:
a4:4b:61:63:bd:e3:f0:83:e5:6c:6f:66:93:e5:87:f4:fe:37:
f6:87:11:61:f8:b3:42:19:b7:b0:25:e6:94:fe:94:00:6d:97:
a0:5d:0d:02:a1:a9:1c:74:95:95:60:81:e1:08:57:f7:a4:5c:
83:70:1a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:10:46 2025 by rpki-client