Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: Ls82+vpXrC+CgwRvHB3Otw4hsP10Wu2Q3xQWLiY0hp8=
Subject key identifier: A3:00:A3:FB:2F:77:7E:1E:41:A7:9A:EF:C7:95:80:87:7B:20:35:E4
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 019A4E8677A8912E21F64D66EE62B817AD69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 1345
Signing time: Tue 04 Nov 2025 11:00:26 +0000
Manifest this update: Tue 04 Nov 2025 11:00:26 +0000
Manifest next update: Wed 05 Nov 2025 11:00:26 +0000
Files and hashes: 1: 1yffeEAlkHpCSPofwopCAZ2rRWc.roa (hash: oLYYyh0+bRIg5caImko3WBrhuFPOBEoNn3gpu+iT4Rs=)
2: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: ILj/UJ8xN8k7Aw2UYgd5cwNEV5zQv5CeHN9U51aBz8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:77:a8:91:2e:21:f6:4d:66:ee:62:b8:17:ad:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Nov 4 11:00:26 2025 GMT
Not After : Nov 5 11:00:26 2025 GMT
Subject: CN=a300a3fb2f777e1e41a79aefc79580877b2035e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b9:8a:57:18:e7:78:66:65:23:ec:53:ec:0e:
81:c0:f0:85:d5:e0:67:b2:23:ad:f5:0d:61:a5:af:
84:db:ee:41:8c:33:80:81:8a:56:6f:99:9c:da:88:
4d:f9:aa:41:be:cc:3d:6e:d7:b0:9b:18:da:dd:4d:
d9:e8:0f:81:ab:06:94:19:4a:68:61:54:db:18:7d:
ba:c2:08:e6:6f:0b:ed:cf:62:c9:d7:ba:8b:da:34:
00:11:c4:d1:9a:20:ba:65:6b:f9:0a:b5:6b:fa:72:
d5:7c:32:6f:f5:e4:f2:6d:00:66:4c:98:64:41:a5:
12:b4:b1:b7:14:05:15:b0:6c:5b:92:11:17:fb:a5:
9e:cc:87:c0:36:8a:83:60:4b:de:63:11:7a:4d:a1:
71:e9:d8:19:91:0b:0a:eb:d1:da:8f:0d:40:2e:55:
aa:65:5a:1f:d0:a8:1b:4f:95:b6:91:65:8c:7e:4f:
1d:d9:c5:58:5c:2f:e0:01:4b:ba:0e:8b:db:f9:f0:
5d:00:0d:91:d0:6a:28:64:99:d1:df:24:de:1a:84:
b8:bf:5f:78:d4:d4:24:02:f9:9c:09:aa:06:77:b9:
99:ea:05:ec:0c:02:5d:e5:38:d8:38:43:7d:26:62:
2f:c7:b8:b1:7f:16:27:9e:cd:56:21:8b:7e:94:b3:
a9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:00:A3:FB:2F:77:7E:1E:41:A7:9A:EF:C7:95:80:87:7B:20:35:E4
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:1b:aa:4b:44:5f:d2:8d:d5:09:59:4f:fb:9b:40:31:42:4a:
3a:e4:c1:b9:80:1e:08:12:58:4d:6d:46:06:27:3a:d8:b2:03:
ac:f6:6e:77:45:59:8f:a2:2c:e9:fd:07:b6:10:ec:25:3b:ea:
0c:0c:70:de:57:44:9b:53:09:0b:ec:6e:83:e9:95:7b:69:f0:
68:69:f0:6c:3c:8b:0f:57:96:b1:b8:4f:bc:68:33:6f:0c:6e:
1f:7d:7a:93:29:78:bc:dd:a7:bc:36:db:fe:ab:01:3f:ee:a7:
01:61:71:f0:7f:a7:40:75:83:3e:d5:52:d4:50:69:3e:64:4c:
bf:03:6b:7d:28:ff:f0:37:71:1c:c2:e0:44:22:ff:ef:c7:09:
13:4e:00:4a:b8:a1:55:a9:e3:37:e8:cc:03:52:ba:2d:43:06:
b7:ab:72:68:84:cc:93:fd:7e:45:c3:e8:43:83:20:1e:d5:e5:
93:cc:11:c0:c5:87:0e:20:47:69:4c:cb:51:1b:2f:00:7a:66:
74:37:80:b4:ba:65:a9:68:e5:ff:aa:b7:16:21:c8:4b:7b:e4:
13:e2:f6:39:d6:c3:34:c0:0b:90:1e:d6:8e:37:8a:4e:be:a1:
4a:bf:ac:d4:89:cc:39:4f:7b:65:23:01:b0:1f:df:bc:8a:d2:
9b:50:2e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:34 2025 by rpki-client