Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: O+HSrmiM1U0OsktLspTixz1qryYtSzOBiEQ/fAxhVI0=
Subject key identifier: 51:C2:36:18:12:D6:04:CA:BD:C6:E0:7B:57:A9:C6:CC:D6:E1:D2:F6
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 019A57527DDB319B287523CBC7550CC85366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 05DD
Signing time: Thu 06 Nov 2025 04:00:15 +0000
Manifest this update: Thu 06 Nov 2025 04:00:15 +0000
Manifest next update: Fri 07 Nov 2025 04:00:15 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: flq4szUOJzCDEuSxexuVlhqRrIZ66SUZytFwxQjxXMo=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:52:7d:db:31:9b:28:75:23:cb:c7:55:0c:c8:53:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Nov 6 04:00:15 2025 GMT
Not After : Nov 7 04:00:15 2025 GMT
Subject: CN=51c2361812d604cabdc6e07b57a9c6ccd6e1d2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b5:7f:8a:01:5c:c5:4b:a1:9c:15:99:13:e3:
29:0e:16:c1:a3:e6:cd:7b:66:eb:fe:76:a4:31:0b:
6b:aa:c3:0d:37:29:7e:28:cd:74:40:aa:92:04:9f:
ed:81:a1:c7:7c:10:54:7d:c6:8a:74:c6:f2:78:82:
d3:fb:48:2d:46:a4:b7:78:ad:87:6b:af:6e:1b:d6:
fc:5a:b3:72:ea:92:cd:6b:40:04:fa:94:50:33:8f:
25:5b:64:70:b4:06:8b:56:cb:61:cc:4e:eb:81:6b:
6d:70:b8:bd:44:f1:11:70:37:7c:cc:72:dc:04:bc:
52:09:7d:99:39:78:71:5f:bc:5a:84:e6:65:35:89:
8a:11:bc:55:da:6d:3d:17:43:a2:78:da:28:d4:ad:
ce:50:aa:68:12:cb:6a:03:70:d9:43:32:d2:7e:41:
11:de:f2:1f:67:5b:37:a7:64:ba:3b:ce:44:47:61:
93:3d:1b:fb:77:89:97:95:96:c1:d4:ae:9f:9d:d2:
c0:90:3c:44:b1:79:4f:99:9d:41:6f:fd:c6:25:b0:
87:bb:9f:a3:e5:58:4d:1f:96:9b:2b:33:c2:13:58:
00:19:ff:3a:cd:45:38:83:f6:52:e4:98:b2:74:21:
d3:e5:73:05:86:ad:50:d0:a7:8e:f0:ba:68:91:f8:
7e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C2:36:18:12:D6:04:CA:BD:C6:E0:7B:57:A9:C6:CC:D6:E1:D2:F6
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:79:bd:1b:4c:b5:57:36:86:71:21:34:b3:13:29:06:11:cf:
f8:16:87:61:4f:a5:5f:d8:88:b7:4f:4f:64:75:31:6f:52:04:
ae:f8:b9:6a:03:73:0a:a3:e5:b1:7c:60:5a:e4:d5:4e:7c:80:
c7:09:9b:63:9d:8c:05:08:d1:6f:60:10:12:41:c7:0a:6b:1d:
03:8a:ee:4c:e6:87:69:a1:80:83:83:63:63:a8:63:9e:95:29:
26:75:f5:97:8d:69:c1:b4:9f:48:3a:5a:17:cb:25:c8:48:84:
09:b8:a9:ad:38:7f:88:59:8f:e5:3b:4d:8e:fa:06:89:f4:a6:
5e:57:b2:00:16:92:41:e8:48:ad:5b:fd:83:8d:32:c3:ef:96:
ab:ca:30:85:08:0b:52:4a:48:13:aa:42:a1:8e:cc:e0:49:a8:
9e:fd:0f:61:8c:70:1a:64:c9:a9:e8:5f:07:82:31:7d:1f:e2:
ae:7e:b2:f1:61:ab:4a:84:f1:73:85:1a:cc:b5:ba:0e:84:3e:
55:e9:40:c5:49:d4:c3:26:38:b3:96:ad:a6:ab:72:e5:aa:a5:
7c:54:c2:41:c2:da:08:e6:ce:79:d4:b7:ac:59:36:81:85:0d:
20:77:25:5f:60:6a:0b:9c:43:96:c5:b1:11:2d:96:e0:d2:82:
14:00:a5:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:44 2025 by rpki-client