Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
File: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft (raw, json)
Hash identifier: MqStOWZaHeZ7WGXpMVp82VrIU3tpiZt9LgNDX8jCzjc=
Subject key identifier: AC:06:72:18:C6:61:D9:C3:EB:3E:7A:55:E9:32:47:E3:27:8A:74:0B
Authority key identifier: E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
Certificate issuer: /CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Certificate serial: 019A4DE201103B28A92571D564EA9460F99B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
Manifest number: 15A0
Signing time: Tue 04 Nov 2025 08:00:48 +0000
Manifest this update: Tue 04 Nov 2025 08:00:48 +0000
Manifest next update: Wed 05 Nov 2025 08:00:48 +0000
Files and hashes: 1: 4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl (hash: /5LOoDyK6JxQUDYXsSFP5vDl2bMa1+J6x+ImXAOwjY4=)
2: YKk_IxXaH7sfK7_gRS3093UyRYo.roa (hash: COs47LOLhU2xn+3tfczoJAT+wVHUvoY7/hZnsmTjtwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:01:10:3b:28:a9:25:71:d5:64:ea:94:60:f9:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3154adb5a2ed999cf1db9c1271b2209dad3449e
Validity
Not Before: Nov 4 08:00:48 2025 GMT
Not After : Nov 5 08:00:48 2025 GMT
Subject: CN=ac067218c661d9c3eb3e7a55e93247e3278a740b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:3d:e8:15:d3:ab:00:03:eb:76:9f:da:b3:
b5:00:9b:5e:d2:fe:30:16:23:6c:c2:bc:c3:32:85:
b2:a0:0f:47:3d:30:65:0f:bf:c0:2e:5c:96:81:3d:
13:c6:4a:60:da:0a:94:10:d1:5a:4b:3d:2a:6f:4f:
18:aa:e9:83:7c:21:fc:4d:52:51:90:32:cd:ad:8d:
76:b1:1a:49:f5:0e:66:82:3f:8b:eb:2f:3a:c6:87:
b8:0c:ff:b5:0c:72:6a:d1:1e:9b:89:77:21:42:f1:
bf:25:96:c1:b4:fb:70:f9:95:0d:a3:f6:c6:4d:1e:
f1:74:02:a7:79:dc:10:07:69:0e:11:dc:ad:b5:5c:
90:ff:68:bb:37:e3:a7:2e:ef:55:88:24:ae:15:81:
9c:1f:60:db:8f:dc:f9:96:23:95:e5:98:8e:22:a8:
a6:6a:52:54:c4:85:41:a0:14:db:cf:1c:68:2d:8b:
20:bf:a6:f0:be:9d:22:c3:88:c6:96:f3:96:70:4b:
3b:2c:c2:d6:44:f0:6d:16:73:84:e5:c3:7f:4d:c1:
08:38:b3:3e:43:a0:2d:c3:67:ff:cb:fc:19:52:1a:
09:10:da:99:b8:66:c2:4f:64:68:b7:29:ff:28:42:
48:d3:1c:8d:58:5e:2b:27:c7:eb:97:08:bf:34:54:
4f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:06:72:18:C6:61:D9:C3:EB:3E:7A:55:E9:32:47:E3:27:8A:74:0B
X509v3 Authority Key Identifier:
keyid:E3:15:4A:DB:5A:2E:D9:99:CF:1D:B9:C1:27:1B:22:09:DA:D3:44:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/0167eb-0d16-4cc1-8047-142fcacd7a49/1/4xVK21ou2ZnPHbnBJxsiCdrTRJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9e:2d:1b:31:be:06:45:45:f7:2b:5d:7c:23:a5:68:98:c6:
4b:51:11:07:9f:96:0e:71:bd:03:2a:75:5d:4e:8b:3e:05:36:
c5:81:f3:08:89:c5:36:53:58:86:7a:73:1d:0a:da:5e:21:8e:
76:89:69:1b:9a:c7:07:2c:3b:2d:04:be:d4:19:e3:d8:7f:24:
93:0b:3b:4a:a2:5a:d3:37:b0:5f:78:f9:6f:38:be:ca:05:b4:
8d:8c:ff:0c:c3:ed:32:88:88:b3:ba:16:9e:9e:07:08:77:4e:
39:58:2f:b4:0f:31:1e:f7:80:9d:78:87:53:4d:c6:4f:51:eb:
41:1d:15:01:5f:11:30:93:75:27:1b:38:1d:ed:bf:f1:ac:d8:
97:d6:72:dc:5c:b7:ff:d4:38:fe:bd:47:eb:11:1d:f6:28:3e:
ee:99:37:47:f3:fe:b0:53:6d:b1:da:4d:d3:2a:46:fa:25:4d:
bf:4c:d0:2d:55:3c:b4:7a:35:c1:8d:70:41:f8:59:be:4b:b2:
f7:81:8f:2d:92:57:a8:ed:10:c3:f1:16:66:02:09:fc:1f:77:
11:e0:c7:84:aa:91:0b:26:37:fe:e5:02:58:bf:cb:c9:86:b0:
51:4a:be:17:15:3a:f8:81:62:7b:da:42:ae:c6:c7:db:fc:fb:
fa:ca:05:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:18 2025 by rpki-client