Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: K2DPkPsS/5PoDB0QXOPsecUk6CGdTTyf4a1nac8kBO4=
Subject key identifier: 8B:55:47:D8:9B:44:87:70:BB:0F:2F:9E:C6:3E:3C:BD:08:4D:79:63
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 019A24AF191C48ECA71F1AD3E0B508888955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0B9A
Signing time: Mon 27 Oct 2025 08:00:46 +0000
Manifest this update: Mon 27 Oct 2025 08:00:46 +0000
Manifest next update: Tue 28 Oct 2025 08:00:46 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: 67++1KDZmMlH5ZoDfDUg7RI7CxnMuHvXe1+I2gR9IfA=)
2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:af:19:1c:48:ec:a7:1f:1a:d3:e0:b5:08:88:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Oct 27 08:00:46 2025 GMT
Not After : Oct 28 08:00:46 2025 GMT
Subject: CN=8b5547d89b448770bb0f2f9ec63e3cbd084d7963
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:56:48:dd:1c:79:82:bf:ed:e4:b4:a6:43:
12:9c:4f:5c:09:87:98:f3:f3:4d:42:50:17:c3:e5:
7c:22:58:aa:45:e8:3b:e9:87:5a:9c:08:23:96:15:
b9:f0:5a:35:62:3e:d7:3f:78:45:80:ae:96:16:cc:
44:8f:b7:eb:8f:cc:56:f0:e9:97:3d:3f:e8:fa:56:
be:30:f6:16:25:e3:30:9a:5d:3e:26:e8:3b:10:6c:
70:cc:ff:79:78:2c:4a:14:73:5b:22:a9:89:64:4d:
2d:69:c3:b2:a9:47:c7:0c:c6:90:93:ae:4a:ad:56:
0a:2b:9f:7c:62:e0:e1:ea:35:c8:7b:0a:a9:cd:82:
8d:34:4b:1d:d7:97:03:3b:fa:90:40:5a:b7:d1:75:
8b:88:c7:d3:ec:3e:0f:4c:5f:6f:e9:aa:57:b2:fb:
c0:7f:cf:00:d3:7b:d1:79:97:2e:1b:16:63:9f:5d:
e2:d2:22:db:13:e0:3d:2d:9e:b8:63:85:a2:dc:31:
93:51:f5:f7:5f:c4:14:73:ad:f6:e2:00:08:91:76:
d0:ed:22:70:6a:48:45:7a:92:62:59:3f:8d:eb:67:
b2:88:ea:90:45:22:b6:25:8a:b9:3d:cf:fd:f6:58:
3c:2c:34:a0:1a:3c:c1:16:de:89:14:5b:d9:6a:69:
dd:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:55:47:D8:9B:44:87:70:BB:0F:2F:9E:C6:3E:3C:BD:08:4D:79:63
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:62:80:3b:b5:72:3d:d9:b2:12:1a:4e:56:0d:a0:ee:bb:c1:
53:ef:71:81:87:ba:15:c8:8e:23:49:3e:d9:2c:91:ec:7a:b7:
9a:51:e3:58:75:8a:25:53:32:84:1e:c8:67:30:be:da:ca:96:
7c:56:10:0b:4e:95:5b:db:f1:ba:7e:3a:32:80:ba:f6:ca:6d:
e9:b1:d9:12:04:ad:3e:17:0d:d1:1c:0b:cd:b9:e3:b0:bc:96:
a7:4c:ce:26:59:15:35:86:8c:de:7c:50:2d:a6:8d:86:3f:2f:
c6:85:8e:22:53:e0:3d:51:48:db:cf:6c:21:2b:34:35:41:b0:
9f:1d:c3:ce:24:50:09:01:cf:01:70:3e:6a:5e:d5:2c:bb:db:
ee:06:14:cb:89:65:b4:c0:2a:44:a3:a5:66:22:90:21:6c:88:
e3:b3:b6:11:98:2c:4b:1a:76:13:90:5b:f2:bf:67:18:e7:ae:
5d:2f:14:e4:54:ee:6b:78:a9:88:36:2b:ff:e1:3d:63:53:91:
46:bf:be:a0:2c:5b:6e:97:44:5c:af:50:6f:8d:40:95:5c:1f:
06:20:9a:30:df:a8:4c:88:26:89:b0:48:d1:59:ba:f5:fe:d6:
f1:7b:0a:f6:ff:55:79:1d:8b:ea:8f:1e:64:7c:36:ba:63:69:
74:7a:b4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:07:13 2025 by rpki-client