Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
File: 4FotrPXdTpv6LS2bLTw_lnh0WEE.mft (raw, json)
Hash identifier: ywjgX+n0JPyILAdopU8YpxZL9yhrnlz7HY/4U5+PVcM=
Subject key identifier: 57:72:37:13:A6:BB:8D:B0:43:35:7A:D8:94:A8:33:64:39:4C:EE:54
Authority key identifier: E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
Certificate issuer: /CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Certificate serial: 019A526365BAEE6F867C85D863178E7D5D77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 05:00:37 +0000
Manifest this update: Wed 05 Nov 2025 05:00:37 +0000
Manifest next update: Thu 06 Nov 2025 05:00:37 +0000
Files and hashes: 1: 4FotrPXdTpv6LS2bLTw_lnh0WEE.crl (hash: N1Pd8MUXflG5hiv+GPr30naBCvCjZwm977UEYO+EHyY=)
2: BS790JJGQ7DZlNZUL_em5Su64B4.roa (hash: VVqWBTRMk3+7j4zbJrp8La5lSHjcZGiKvxZueV8Sl7A=)
3: UJGm2ryO8HuvxtqrnMckm6HvQuw.roa (hash: LmIHTI0l7Czq42uu144MFysAfpmWgQRM3SWHkhVtvVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:65:ba:ee:6f:86:7c:85:d8:63:17:8e:7d:5d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05a2dacf5dd4e9bfa2d2d9b2d3c3f9678745841
Validity
Not Before: Nov 5 05:00:37 2025 GMT
Not After : Nov 6 05:00:37 2025 GMT
Subject: CN=57723713a6bb8db043357ad894a83364394cee54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:ad:02:31:4c:83:3d:c6:a0:cb:71:7d:9f:33:
ac:65:2f:b6:16:31:8d:c2:db:87:f1:d2:b0:a9:52:
89:99:c0:8c:42:7e:25:c0:d9:57:2c:2e:b2:66:e5:
83:c4:f2:5a:03:d0:47:2c:b5:ac:5f:e8:6b:58:73:
70:08:4b:67:c4:21:d3:c2:f4:17:9a:2e:56:4c:64:
08:cb:b1:ea:ef:21:3d:41:0b:d4:10:d5:b8:f1:b4:
4e:61:27:b8:55:ae:21:f4:21:30:9e:ee:d9:a0:3f:
e2:0c:9f:52:92:20:8a:b6:63:00:e5:1b:b1:79:e3:
13:84:b7:9e:0e:dc:b2:e3:95:6a:da:86:1d:ab:0e:
3b:8f:a6:71:c3:12:42:83:20:e9:17:01:5f:23:e7:
b2:91:3a:93:e5:69:cb:13:b0:46:3c:50:85:2c:3c:
31:c9:f2:c7:14:97:a3:53:7a:4b:f7:b3:8c:2c:ea:
dc:9b:7d:6e:89:c0:c8:24:a9:39:51:f8:f6:eb:14:
a6:7d:3b:fb:3f:f9:3d:4a:fa:e2:17:91:0e:bd:6f:
bf:cb:46:94:94:9d:7b:0d:c9:2d:0a:c2:c9:47:1a:
fe:fb:b1:01:24:cd:aa:26:86:2b:ce:be:11:7b:76:
b1:92:f7:ce:2f:dd:28:3f:36:62:00:7b:dc:16:3e:
0e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:72:37:13:A6:BB:8D:B0:43:35:7A:D8:94:A8:33:64:39:4C:EE:54
X509v3 Authority Key Identifier:
keyid:E0:5A:2D:AC:F5:DD:4E:9B:FA:2D:2D:9B:2D:3C:3F:96:78:74:58:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FotrPXdTpv6LS2bLTw_lnh0WEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/01000b-aa96-4bc6-8cc1-af07a9e87fc0/1/4FotrPXdTpv6LS2bLTw_lnh0WEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:cc:47:d6:5b:0a:47:7a:fa:08:9e:a2:a0:f1:89:b5:6a:56:
25:89:2e:a0:15:bb:8c:74:d4:12:09:cb:25:73:e8:a0:a4:0d:
95:c1:e5:79:c8:de:e2:0c:16:d5:01:ea:8f:70:64:ce:98:87:
0f:90:f0:1c:69:48:45:14:5e:e3:35:fa:61:ee:fd:7c:73:a3:
fd:54:cc:4d:46:a7:1e:12:cf:f8:be:1a:da:76:6d:ee:9a:98:
25:55:d4:eb:02:4e:5f:0b:35:2d:62:3e:f2:19:ef:16:ae:d9:
47:48:35:50:4b:f9:f2:9c:44:a2:a1:da:10:05:92:02:34:7a:
dd:dc:66:f5:53:c4:ee:67:80:1f:64:69:c6:50:40:98:15:46:
3f:a7:18:b9:32:8c:84:0d:95:3f:8f:4a:da:84:c2:95:a4:73:
17:bd:46:0d:38:2d:12:0c:48:5e:87:6f:00:65:23:8d:3a:e9:
40:17:0b:7d:9c:45:d4:bf:06:c9:71:03:79:09:de:3f:27:a7:
c4:83:ab:60:cd:05:d9:27:54:69:b8:d3:91:46:54:6d:42:57:
a1:bf:9f:81:e8:c7:84:87:d9:bd:55:c5:d4:d4:e2:a0:44:7a:
a8:27:8f:fc:c9:e7:54:d1:81:73:29:e7:f0:27:61:e6:a8:bf:
9c:8d:31:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:50:11 2025 by rpki-client