Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
File: 4GyK0oU47eC0x-GnHpypianwPxA.mft (raw, json)
Hash identifier: WhYzhD10gfshRxAfDnfTkyWP2YPOvoAAE83F+qxtmd4=
Subject key identifier: 25:84:CA:92:62:BF:27:46:45:EC:F8:83:3C:A2:D0:C1:99:85:23:8A
Authority key identifier: E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
Certificate issuer: /CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Certificate serial: 019A51F55D6EABCA072FFA8A4A3DB27666B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
Manifest number: 083B
Signing time: Wed 05 Nov 2025 03:00:25 +0000
Manifest this update: Wed 05 Nov 2025 03:00:25 +0000
Manifest next update: Thu 06 Nov 2025 03:00:25 +0000
Files and hashes: 1: 4GyK0oU47eC0x-GnHpypianwPxA.crl (hash: sYXlACoLuL/t/J/MMxs73ejgmeWZTZeGO+V0qPFqcH4=)
2: Y17oOJ4cy2XAOGSF7cV-mvshqNg.roa (hash: WzuVM00RV4G9sz/56LZ6o+LxunxTuItSjJs5x2gRuZA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:5d:6e:ab:ca:07:2f:fa:8a:4a:3d:b2:76:66:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e06c8ad28538ede0b4c7e1a71e9ca989a9f03f10
Validity
Not Before: Nov 5 03:00:25 2025 GMT
Not After : Nov 6 03:00:25 2025 GMT
Subject: CN=2584ca9262bf274645ecf8833ca2d0c19985238a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3c:5d:4e:30:8d:79:f4:89:44:f0:b4:ac:c8:
aa:70:9e:3f:c1:42:b3:ab:f3:3d:d7:be:b6:bc:35:
4b:a2:e0:fd:e5:8f:79:94:05:fd:00:30:9d:71:05:
17:12:de:46:48:80:09:9a:82:39:78:59:83:de:e3:
f7:43:ae:df:eb:ab:0f:b6:4b:06:4f:95:16:b5:bb:
77:af:e0:0d:7e:c1:5e:66:bc:87:ac:73:a1:5e:cd:
62:fa:ec:61:cb:14:4a:ab:1e:26:4e:fe:f3:3a:d4:
40:3f:42:95:26:69:05:8a:33:cd:e3:3a:85:9d:b2:
c1:4d:39:b4:f7:57:30:24:88:89:d3:34:55:02:4a:
a0:3c:15:1a:57:49:40:15:85:e7:9f:f1:3e:ca:9e:
d4:03:f1:a5:3b:44:82:0c:7c:4e:1e:93:76:2e:19:
e8:11:1a:ee:09:f3:47:0c:2b:41:ea:c3:e7:3f:50:
21:b4:27:be:ce:76:aa:3c:f6:75:ee:83:b5:ca:af:
65:18:83:e6:89:0e:20:3e:c5:8d:1c:6e:a0:88:32:
fa:2b:77:d5:7f:a7:7c:66:5e:f7:4a:11:2d:dd:db:
07:8e:9a:7c:29:12:2d:8a:b9:c2:26:9c:7c:af:d6:
b0:de:e1:47:ce:22:9a:b4:89:4d:19:90:f5:98:8b:
b9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:84:CA:92:62:BF:27:46:45:EC:F8:83:3C:A2:D0:C1:99:85:23:8A
X509v3 Authority Key Identifier:
keyid:E0:6C:8A:D2:85:38:ED:E0:B4:C7:E1:A7:1E:9C:A9:89:A9:F0:3F:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GyK0oU47eC0x-GnHpypianwPxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/f0006f-5670-42a6-85a9-31b2c666b2dc/1/4GyK0oU47eC0x-GnHpypianwPxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ad:10:d0:c5:c2:7a:42:bc:cf:5c:ad:b8:3c:c2:31:18:35:
ac:76:9d:89:81:06:8e:fc:22:38:4f:64:c7:39:a9:3a:7f:58:
92:59:af:e8:fd:7e:2e:b9:53:58:e0:fb:c1:ec:b6:85:8f:0a:
c7:9d:b9:17:e6:1a:64:e5:89:94:cf:7d:8c:ad:f8:a5:6a:74:
63:7f:9b:6b:49:cc:e9:f4:2b:ce:91:9b:05:c4:7b:12:b8:31:
61:0b:a3:e3:c0:8a:a5:60:23:69:3f:d4:a0:ee:b9:16:60:d7:
a6:15:91:65:ec:bb:53:db:ef:8e:ea:96:33:4a:00:05:1e:27:
48:6a:4f:89:33:88:f7:1d:fb:08:db:eb:94:3e:20:d0:71:31:
78:91:3e:09:98:2f:af:fe:2d:da:6d:0d:9a:e8:a1:c1:47:e2:
b4:a2:c6:d8:f2:16:0d:bf:60:ba:c2:3c:3e:d0:ee:10:66:22:
ea:9f:7f:bc:f3:71:97:d3:da:b8:dd:bc:91:32:06:38:4a:68:
c1:dc:96:bc:c3:48:54:c7:52:cd:81:83:73:f1:b2:c7:22:c0:
02:ee:be:8d:e3:4a:11:5b:72:98:c8:9f:7f:52:4f:1a:ee:5b:
9f:d5:b5:2d:3b:88:d0:ed:27:c6:46:f6:b8:e0:44:04:8b:ea:
01:26:f7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:13 2025 by rpki-client