Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: iWAbu5ffqyMdQIwOOrik2bOynRjfxXbJjJl8vvOmgY4=
Subject key identifier: 1B:7A:CE:04:DD:6A:49:5F:C9:B2:9B:77:68:99:E0:EE:1F:08:94:27
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 019A4E86642EC9B424F530D02B30929D3C1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 094B
Signing time: Tue 04 Nov 2025 11:00:21 +0000
Manifest this update: Tue 04 Nov 2025 11:00:21 +0000
Manifest next update: Wed 05 Nov 2025 11:00:21 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: QP9EHid33F6GrDscER7kOY6fMl5NE5hGMAMMsaJN2Vo=)
2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:64:2e:c9:b4:24:f5:30:d0:2b:30:92:9d:3c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Nov 4 11:00:21 2025 GMT
Not After : Nov 5 11:00:21 2025 GMT
Subject: CN=1b7ace04dd6a495fc9b29b776899e0ee1f089427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c6:62:43:27:42:4f:e6:f3:9e:12:48:75:aa:
d9:c7:32:25:48:db:c7:1d:25:fd:81:3c:ec:4d:e2:
75:1e:60:c6:07:6e:ff:78:a9:e5:b4:e1:4e:0d:c7:
e7:1e:2d:b5:0c:25:98:20:e5:f7:7a:de:3b:fd:e9:
25:bb:6b:0a:13:fa:ad:b7:8d:56:62:43:c7:77:1f:
04:29:c1:23:a9:36:ac:6b:d6:08:4c:62:d7:a0:71:
b9:05:b4:10:d8:02:07:0f:f7:ec:f2:2a:4f:37:34:
f3:50:5a:a0:67:9b:3d:0f:bf:0c:32:ca:c9:54:90:
48:c7:36:c1:c0:f3:45:f0:e0:97:91:3c:46:7d:19:
ce:bd:a2:c9:cf:2f:ae:32:69:da:c0:4c:49:e9:c7:
dc:aa:f4:b7:30:31:29:78:0d:d1:9b:92:3c:8c:e5:
f6:6b:85:cc:5c:ab:e4:fb:ae:2f:f7:66:3b:b9:1d:
50:41:83:2b:4d:fd:fd:fb:8a:a9:95:eb:19:14:3d:
6f:d4:63:e6:3a:f6:da:d0:34:08:a0:b0:11:3b:7f:
b4:73:94:0b:c2:02:c7:ba:be:13:ed:de:68:6b:27:
21:1c:d9:d9:cd:83:1d:ba:a6:bb:e3:05:10:29:91:
58:49:43:d7:ec:e8:a8:92:45:d0:e6:3e:92:39:22:
d2:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:7A:CE:04:DD:6A:49:5F:C9:B2:9B:77:68:99:E0:EE:1F:08:94:27
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:dd:f3:c8:9e:4d:46:cb:c1:74:85:cb:fc:76:7d:cd:fb:79:
4f:db:4f:0c:98:f5:d8:f7:4e:45:6c:a7:58:92:85:83:94:30:
b6:ae:f6:21:a1:a8:c3:fb:f7:97:15:52:f6:b7:f9:ef:e8:6f:
98:a0:53:37:c1:ae:22:2e:a4:40:5f:72:e0:a3:b5:93:54:1a:
a6:42:26:da:9d:5b:a3:80:b0:a4:94:92:6f:45:c8:0a:a2:12:
8d:3e:e4:f0:9c:d4:1c:1a:c8:a7:20:9b:a5:19:36:1d:bb:b0:
67:d9:cb:cf:77:e2:c3:2f:2f:ec:3d:2c:77:01:c4:78:1b:4c:
74:dc:af:d9:b0:7e:c6:a5:ab:32:83:c6:75:6f:f5:d6:e1:e6:
2d:96:f8:62:df:a7:cb:63:17:30:37:7e:43:0a:5d:ff:13:f9:
6c:1c:e0:32:ea:51:20:46:62:e5:1b:7f:c5:95:19:77:3b:6f:
c6:87:6f:84:11:e8:a5:26:5e:e9:c4:22:63:d7:78:e6:1f:61:
64:ff:af:7c:bc:03:69:fe:de:18:e3:89:a4:9e:7b:67:0d:70:
af:bb:1d:e3:e9:2a:e8:69:90:2d:5f:ca:8c:12:a8:01:4e:4f:
ca:f9:62:af:27:61:98:13:48:45:3a:60:39:44:2a:81:cf:94:
de:4e:b8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:01 2025 by rpki-client