Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: BBHst0lIYsfWKbdhRdh4JuaUk302YUQRZI9iJVRA3mQ=
Subject key identifier: 95:BB:A0:65:3D:1A:83:1B:20:5E:FA:78:1D:4B:14:7B:BF:7D:F4:37
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 019A4D73D689662979FD06DCB6A33A153E63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 1196
Signing time: Tue 04 Nov 2025 06:00:28 +0000
Manifest this update: Tue 04 Nov 2025 06:00:28 +0000
Manifest next update: Wed 05 Nov 2025 06:00:28 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: qH/Ld+LJ8Sa7K6K7hSqcbHEMdB9MELz0GC+p45uWScE=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:d6:89:66:29:79:fd:06:dc:b6:a3:3a:15:3e:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Nov 4 06:00:28 2025 GMT
Not After : Nov 5 06:00:28 2025 GMT
Subject: CN=95bba0653d1a831b205efa781d4b147bbf7df437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:ff:d5:ae:12:55:c8:a6:22:0f:39:b8:fa:
14:2b:d6:5f:66:77:10:56:91:a2:60:b6:cc:56:3e:
87:f7:28:5c:08:af:79:dc:4d:d5:d6:67:68:c1:63:
61:d9:4c:93:5a:91:e2:07:11:74:2d:b7:d8:8a:9b:
e8:27:37:4c:a8:b6:92:83:04:6f:23:b5:0b:1e:de:
81:5c:4a:d5:0a:03:77:79:1f:ca:d0:71:bd:ea:a2:
bb:0d:47:86:24:28:39:ba:96:1d:da:13:48:e2:16:
96:a3:db:d3:ee:fe:8b:8a:9e:e0:42:59:e4:f0:b2:
af:0a:fc:c0:3d:97:0f:20:1c:bf:f5:2c:18:cc:98:
f6:ff:d8:ee:30:7c:71:ba:63:ef:f8:0d:3a:cf:b2:
9e:fc:c1:ef:28:dc:7d:e5:27:b5:2e:de:b0:e6:d5:
df:3b:0f:90:14:2a:26:a8:dc:49:d9:da:83:92:4b:
1f:b0:c9:1b:1b:44:a4:de:8b:04:c4:e4:8d:36:cc:
8d:6d:b3:ed:e2:c0:06:b3:a8:fa:02:42:d0:60:08:
9d:78:62:05:27:76:13:1e:4a:a3:ce:e6:8f:a0:0c:
4f:84:30:99:78:1b:05:d7:98:ac:25:16:48:9e:ca:
f8:07:bd:1c:38:7d:47:ef:c8:e3:60:ef:44:0f:73:
e5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:A0:65:3D:1A:83:1B:20:5E:FA:78:1D:4B:14:7B:BF:7D:F4:37
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:34:d5:09:41:bf:a2:96:6d:20:88:d1:94:10:fa:7e:06:1e:
32:21:f6:84:0b:4e:79:44:65:ae:bb:d5:f7:1d:87:a3:54:d0:
9e:e9:1a:d0:e7:ac:35:dc:6f:af:2a:30:af:8a:4d:53:7c:35:
a8:b4:86:25:8d:19:16:37:8f:1e:ee:39:fd:07:27:4d:71:e6:
81:50:ec:43:28:20:34:48:58:ab:5e:ff:98:bf:84:4b:43:34:
0d:30:e3:6e:d4:d9:b0:e1:b7:6d:3f:39:cf:bb:ae:d5:06:3e:
9b:23:c2:41:bb:74:ee:34:bd:70:0c:dd:d8:aa:84:3d:a0:d3:
0f:42:fd:ca:1f:1d:f8:a0:26:35:83:24:5f:19:01:1d:b6:4e:
1f:25:33:b7:bc:38:80:56:cd:52:9b:1f:b4:3a:e7:d8:55:ab:
6c:0c:c3:2e:cf:1a:00:fd:2d:c3:57:9d:29:49:20:65:6d:42:
20:96:7c:2b:41:63:db:e8:f4:92:f3:30:f3:5d:d3:d0:ed:9e:
18:3f:35:8b:64:25:56:0c:d0:34:ce:08:9e:66:01:2e:4d:f3:
5c:b2:0e:7d:41:eb:b5:70:ef:5f:9e:3a:20:b9:36:0c:c7:f1:
f7:72:aa:01:53:8f:71:46:52:51:94:ce:dc:87:cf:2b:43:58:
78:21:1f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:20 2025 by rpki-client