Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: 4Hyr6OStaM5VmdepqQ0KsO8z5MlhxBILG8fEkA/eHRk=
Subject key identifier: 3F:B2:AA:F7:6A:53:0B:61:0C:0B:AE:1F:20:4E:57:81:3B:56:F4:E5
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019A4F2B7BDB3BD0E62CD3600A102CFFCF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 06C8
Signing time: Tue 04 Nov 2025 14:00:41 +0000
Manifest this update: Tue 04 Nov 2025 14:00:41 +0000
Manifest next update: Wed 05 Nov 2025 14:00:41 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: spLkdNnUVDwPtaI256/GNYt9st90Lj+sIkjpZ2MeGIs=)
2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:7b:db:3b:d0:e6:2c:d3:60:0a:10:2c:ff:cf:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Nov 4 14:00:41 2025 GMT
Not After : Nov 5 14:00:41 2025 GMT
Subject: CN=3fb2aaf76a530b610c0bae1f204e57813b56f4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:44:21:37:d7:55:80:10:63:b3:52:ec:50:
ab:3e:f7:18:44:f9:26:9a:10:80:33:9a:30:19:bb:
3a:5e:f6:dc:05:b1:8b:6f:f8:8c:91:1a:c5:98:71:
66:d3:50:84:ca:c3:f7:0b:b9:23:ae:5f:b6:59:93:
e0:cc:a8:41:aa:60:a2:c6:08:c2:ce:e5:51:93:85:
49:c2:00:ff:48:29:71:97:e7:29:98:27:cb:69:b1:
a6:87:ee:8d:f6:02:38:62:93:7c:3a:10:fe:84:b8:
eb:4e:15:b7:c4:8f:d2:bf:1f:20:09:5d:31:34:e0:
bc:bf:e0:12:92:7c:41:3a:f5:27:fa:21:24:7c:1e:
12:e5:9c:26:86:0c:cd:e7:5b:e2:07:fe:df:92:93:
45:0b:b6:fb:5e:72:ed:98:b0:11:ea:a5:f5:5a:36:
c0:5a:75:c5:b3:5f:80:10:eb:02:f6:d3:d0:b4:4d:
94:73:4b:17:e8:5c:90:1c:32:b2:55:a9:a0:c7:07:
f2:bf:4e:91:0a:77:5e:7c:20:15:72:4c:09:ad:5d:
ca:c3:7a:9c:ef:00:b8:ee:0e:26:3e:3f:80:7c:f3:
b1:5c:9f:38:fc:5e:61:7e:a2:d1:8b:75:ec:35:9c:
9a:fe:13:f1:6f:b0:9f:56:0f:f7:8f:10:98:28:89:
d6:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B2:AA:F7:6A:53:0B:61:0C:0B:AE:1F:20:4E:57:81:3B:56:F4:E5
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:69:cf:86:95:3a:61:41:14:49:69:76:05:d3:97:01:cd:4b:
42:b8:58:10:5a:d8:fa:f4:17:5a:97:11:92:49:60:25:06:96:
5f:61:3e:7b:27:c4:58:c0:f2:97:11:83:a0:a2:5a:13:af:4a:
02:c7:21:2a:05:ef:0d:1d:03:ec:a2:ac:bd:be:52:a5:e1:f0:
00:8e:b6:dd:9f:3d:cf:0e:af:c6:f8:b7:7a:ba:bb:52:c8:ab:
d1:d2:97:a8:ff:74:5a:a1:21:77:29:77:f9:6c:29:f0:7e:3c:
78:1a:b3:a5:d0:b0:02:3e:ac:a7:7e:32:32:c2:92:ef:7e:6e:
9c:65:b8:03:39:23:b0:90:65:c2:79:f9:38:5a:e7:31:44:b0:
3e:b0:a1:b9:ee:f0:e3:d7:b8:3f:93:cc:0a:60:53:33:65:6f:
f8:67:0b:7b:45:15:84:4e:b3:9e:61:bf:49:12:5a:33:4f:90:
ed:74:f8:19:eb:93:aa:11:fa:29:be:4f:b0:4d:0f:94:d6:f9:
f9:fe:fb:da:6a:a9:b6:9c:cb:83:0d:38:7c:45:3d:0c:7e:00:
5a:e7:19:8f:31:ec:2f:35:ed:74:d5:dc:44:4a:90:90:62:f6:
7c:98:82:b1:23:01:ad:b7:10:0d:ca:50:12:92:3c:3c:86:83:
93:0b:a8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:02:11 2025 by rpki-client