Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: /scLW6WAmF0fgw8oHbg5e6ZH8uSowoDiOfGjI5BJI6w=
Subject key identifier: C5:71:19:5D:7C:C2:D1:D6:9F:47:7D:02:53:4E:82:14:EA:AC:84:91
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 019A50E43830D29833C253D272FD1C66189E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0F7E
Signing time: Tue 04 Nov 2025 22:02:04 +0000
Manifest this update: Tue 04 Nov 2025 22:02:04 +0000
Manifest next update: Wed 05 Nov 2025 22:02:04 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: ivCVb36eJHlPQ28v4Jtbx4KUDAjkh0MdctLjD+QL/AI=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:38:30:d2:98:33:c2:53:d2:72:fd:1c:66:18:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Nov 4 22:02:04 2025 GMT
Not After : Nov 5 22:02:04 2025 GMT
Subject: CN=c571195d7cc2d1d69f477d02534e8214eaac8491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8b:f4:b0:74:15:e4:bd:f9:3a:2f:1a:ec:2c:
76:a9:b9:cd:c0:f9:55:e6:e9:93:89:b4:ea:55:b3:
ca:71:c9:90:b3:4a:c8:17:bf:45:75:51:2e:8b:4d:
4b:f3:19:f6:b4:18:ca:0e:4d:11:5a:68:76:ed:bd:
63:b9:1b:e5:2f:11:c0:9f:3f:96:73:ac:14:3c:3a:
58:5f:65:d9:51:88:b2:a8:ba:de:be:07:bd:45:2f:
4c:f7:17:c2:3a:75:40:6d:d0:5b:b4:4e:ac:01:ed:
64:37:b3:48:4b:65:e7:d5:90:e8:7e:e7:00:dd:d9:
c7:6b:f1:52:cf:03:c4:13:d3:90:27:17:d3:61:65:
46:5c:b8:b6:19:ce:8c:9f:51:6f:00:ad:c7:de:8a:
2b:c1:28:89:50:15:01:32:a4:4b:bc:aa:17:7d:0a:
41:79:29:7b:06:6e:82:b6:c1:00:be:de:86:0c:48:
6d:d9:59:0d:ea:f4:9a:a1:a6:0c:02:7c:f2:02:8c:
56:54:16:48:74:71:67:f1:47:48:fa:57:ea:ad:a3:
c0:5d:c6:0b:fd:3a:56:2d:a2:f8:aa:b6:ba:ff:27:
9a:2f:91:ea:bf:67:bb:c6:7a:f1:77:24:82:dd:e3:
5d:64:71:24:cf:51:ff:2a:9a:5c:85:58:72:7e:7a:
b9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:71:19:5D:7C:C2:D1:D6:9F:47:7D:02:53:4E:82:14:EA:AC:84:91
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:55:ae:ce:15:88:95:4d:fc:53:07:74:b1:3f:16:2b:2d:69:
ee:72:67:a5:f0:b3:eb:c6:10:5c:1e:c5:cd:bc:c5:5b:7a:1c:
07:0f:16:dd:34:fd:e9:70:ca:e2:8a:dd:03:f6:58:b7:b2:9d:
cf:65:14:f2:d0:ee:91:6a:d8:16:f2:3d:19:f6:d4:2d:29:3f:
47:ad:61:30:96:31:44:e2:0c:70:27:53:98:ba:e0:79:25:14:
7b:c0:1e:cd:39:d9:98:1a:1e:2c:c7:3f:d1:da:6e:45:b7:ef:
a7:46:3a:09:18:72:7a:94:66:57:fa:0c:05:76:aa:d2:84:22:
fd:d8:8d:ea:91:6c:00:73:38:b1:2e:21:1e:54:bc:ca:c0:93:
c8:95:f9:f7:c5:9a:ac:4e:af:72:d1:2e:b7:f0:9d:1b:54:40:
eb:19:b4:e0:d1:4e:1d:6b:95:92:a4:c5:6b:61:f1:96:3b:c6:
ff:9d:a3:33:e8:cb:81:9d:34:ed:1c:21:f6:ad:b2:cd:18:78:
30:b6:29:65:f9:6b:26:26:bc:6b:18:ca:d4:e2:d3:61:19:fd:
1f:41:db:a6:6b:d3:93:fb:4f:e4:a8:df:79:5c:00:21:6d:32:
ee:47:ab:22:b8:d7:30:c9:1b:0c:9f:57:05:2e:ae:94:56:b3:
46:49:5b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:07:39 2025 by rpki-client