Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: ofCcJs5KGn0KCqmMs7HIj9iAzKNL533oJjCGQxYqaSY=
Subject key identifier: 0A:04:FB:39:7A:D1:60:A5:5E:85:67:13:E1:37:54:9F:D4:0B:E3:32
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 019A52D18C36BC64149423F8CF46DBEC0B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 16A2
Signing time: Wed 05 Nov 2025 07:00:55 +0000
Manifest this update: Wed 05 Nov 2025 07:00:55 +0000
Manifest next update: Thu 06 Nov 2025 07:00:55 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: ebKA04D4uNjwD8Yi0fsXfWYwNWNLdBTuFojKnPF0sLY=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:8c:36:bc:64:14:94:23:f8:cf:46:db:ec:0b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Nov 5 07:00:55 2025 GMT
Not After : Nov 6 07:00:55 2025 GMT
Subject: CN=0a04fb397ad160a55e856713e137549fd40be332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6b:cf:2e:0e:6f:aa:24:83:17:82:94:bd:fc:
97:81:23:b9:5c:00:5b:73:f9:67:80:cd:d9:31:ac:
e1:9a:3c:ff:ba:b0:16:9f:b9:50:91:f4:12:b0:ab:
3e:1f:14:44:a7:7c:a8:a6:ff:97:2f:3f:b4:40:b7:
81:bb:89:b6:72:bd:7e:c6:ad:ec:ff:a2:ac:01:fc:
2d:38:61:3a:49:12:e9:fb:cd:8d:b5:68:f2:e9:d5:
17:97:75:21:d2:36:68:da:2e:d2:26:d1:d2:c1:f4:
67:f9:fd:a9:2e:4c:c4:f9:8a:d5:a4:6a:bc:0f:c7:
0d:af:18:1f:c2:f1:ef:34:29:a2:82:d0:fd:77:bf:
0f:f8:bc:6a:74:4e:f0:b6:20:f7:bb:47:f1:2a:a3:
ba:29:ce:31:7b:b6:34:32:77:bb:e3:6d:d5:5c:fc:
d7:be:78:fe:fe:c6:f7:0b:07:d7:a0:2c:4a:8f:0f:
87:04:da:b2:c2:2c:1c:2f:7a:8a:09:37:2f:ee:c6:
e7:88:c5:40:02:a9:b2:74:22:67:c2:5c:64:32:60:
8f:9e:0b:f0:ad:89:3d:2c:6c:68:e2:f6:ac:a0:4c:
f8:04:af:50:29:98:95:cb:13:14:10:2e:15:68:1e:
cc:8d:2e:24:5b:4d:49:93:14:74:cb:c1:81:c7:ca:
e5:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:04:FB:39:7A:D1:60:A5:5E:85:67:13:E1:37:54:9F:D4:0B:E3:32
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9a:2e:58:95:ba:fd:07:9d:ab:71:67:38:20:2b:6d:26:c0:
a5:01:e0:46:87:54:69:85:77:84:b6:fb:5e:7f:c3:f2:db:71:
7e:4e:43:3a:af:84:99:b1:a0:d9:fc:ee:ca:49:a7:0c:f1:e4:
bf:35:e8:13:60:d6:20:bf:97:c4:48:89:45:cf:a1:ea:11:51:
5f:af:c0:29:47:2a:9d:0f:c8:8f:cb:d6:8a:a9:fa:c2:95:e2:
2f:e1:5e:97:53:87:0a:1f:f7:e3:aa:2b:8f:a0:f3:59:bc:58:
81:06:ea:97:6d:d5:67:7f:25:45:fd:70:51:62:2b:5c:70:a5:
ec:89:4b:0d:48:44:67:90:ac:ec:37:2f:72:7b:74:e0:57:24:
76:2e:fe:35:10:62:2e:81:1d:70:51:13:1f:90:ed:42:e9:66:
56:c8:98:f7:3b:32:ce:46:dd:b8:84:48:9f:be:bb:8e:26:d3:
a4:5e:08:11:bb:d3:5b:28:90:f9:83:8d:b9:63:8d:ee:34:8c:
f3:75:41:5a:79:6f:8d:22:f7:89:bc:4b:69:7a:97:4b:9f:09:
a1:0b:e9:ad:35:cf:22:ff:ca:c5:22:a6:50:15:c9:d5:2d:78:
b6:d8:7e:59:27:57:da:bd:33:1e:45:e1:52:e5:97:b3:b3:ab:
ba:a5:af:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:48:13 2025 by rpki-client