Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: vdbdp9LmHOHAvw/UxRfBAlawei2DjuIJGasuU1y8UIc=
Subject key identifier: 0C:E5:18:60:34:5C:17:53:1E:FE:84:53:0C:FF:40:88:1F:2F:89:09
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019A50E398DD96E8BC5E6BDA83DBAE1DAC8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 0774
Signing time: Tue 04 Nov 2025 22:01:24 +0000
Manifest this update: Tue 04 Nov 2025 22:01:24 +0000
Manifest next update: Wed 05 Nov 2025 22:01:24 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: fEfIoxQ1hPeq85FWKNy87N199CwcXS7mY/BVGhTyTZU=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:98:dd:96:e8:bc:5e:6b:da:83:db:ae:1d:ac:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Nov 4 22:01:24 2025 GMT
Not After : Nov 5 22:01:24 2025 GMT
Subject: CN=0ce51860345c17531efe84530cff40881f2f8909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ed:44:c4:95:fb:b6:64:9f:7a:c5:16:06:2d:
ed:40:cb:ce:3f:20:79:db:5c:ab:16:9c:0b:1b:43:
2a:d5:97:d8:2f:f9:bc:c1:2f:8c:79:8e:67:86:45:
0c:39:cd:3c:6b:8c:2e:03:9a:61:20:e9:01:7f:e1:
50:3e:3b:f3:24:62:96:f5:c6:e7:51:41:22:b4:ec:
29:97:a5:67:d2:5d:c2:43:de:e3:aa:37:8a:e2:3c:
2e:65:ed:d8:e5:f8:44:12:7c:be:6f:5a:35:9c:20:
cf:9f:59:72:88:4f:ba:59:b2:f3:a6:b4:c0:f2:4c:
9a:0f:b3:7f:47:54:ac:41:4c:ca:95:c1:a3:36:6e:
42:3b:78:e4:c1:b0:e3:13:a7:4d:e0:a5:91:50:d5:
a1:da:2c:4b:91:89:3b:5e:e7:e8:3d:a1:ea:c1:10:
85:6b:c6:03:6e:f0:19:30:33:a1:c0:5d:bf:01:2f:
2c:52:a2:75:7f:e0:a3:e2:3f:a5:fa:e0:e4:ab:62:
4f:f3:5d:7b:df:64:b4:56:c3:3e:6a:0a:62:07:0d:
06:74:47:31:55:a8:f5:c4:43:5a:e3:e7:fe:ed:be:
df:97:70:55:fe:94:ee:25:81:f5:82:0b:4c:73:ee:
e6:fe:f5:ee:7d:a9:a4:8e:ad:1c:4d:58:70:fa:d3:
4a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E5:18:60:34:5C:17:53:1E:FE:84:53:0C:FF:40:88:1F:2F:89:09
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:24:b2:67:0e:64:9f:ae:d6:aa:1b:ba:57:ae:c4:6f:9d:a7:
99:c1:2d:ef:65:e1:7b:ae:be:72:c8:9a:9e:a5:ef:49:64:c3:
ab:06:ed:e7:bd:7a:1d:ff:f0:31:63:f7:1c:44:45:ca:14:eb:
a0:f9:4a:22:73:e5:4a:09:a2:dc:db:5c:67:f1:f0:6d:21:cb:
90:b0:f6:61:0a:b2:d9:06:01:88:73:47:1d:86:8e:d4:6d:5d:
47:22:29:d5:4c:6d:38:fc:6a:ea:fb:d0:7f:bb:3d:ce:fb:ca:
d1:74:da:f1:c7:8a:f6:19:75:a4:ee:68:77:73:6e:d4:2d:4a:
23:f1:a6:8c:0f:d0:af:a9:49:69:df:a8:80:d2:0e:2b:6c:5d:
29:b8:2c:1a:8c:de:8f:8d:71:63:8f:6e:f0:bb:46:a9:04:da:
34:9a:15:24:04:60:df:45:8a:fb:13:e2:ee:a0:ae:fe:62:91:
b0:e6:46:41:7b:77:c9:df:6e:21:52:47:bf:4b:cb:80:80:f1:
24:b9:8e:ab:e4:0f:1a:35:f4:05:3f:f6:ca:2d:6d:f4:a5:e3:
33:b4:14:b2:46:b9:58:1f:ec:73:4d:fe:e8:27:7a:ed:00:c5:
80:16:a9:64:6e:33:54:d0:4a:9d:bd:5e:75:f2:cf:e3:22:3f:
9d:2c:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:30:36 2025 by rpki-client