Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: MsfrRenHJR2UuWG8yfCvYhISQkxtNpmEA6BeQojqNsc=
Subject key identifier: 8C:61:EC:7D:B7:15:55:91:4B:85:9A:9A:85:BC:11:B8:17:58:62:91
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 019A4F63000D5272EBFEC05713DCC7B74063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 11D0
Signing time: Tue 04 Nov 2025 15:01:19 +0000
Manifest this update: Tue 04 Nov 2025 15:01:19 +0000
Manifest next update: Wed 05 Nov 2025 15:01:19 +0000
Files and hashes: 1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: 6rbqe23zS9BYS1HOkwBRq//t3cBlTHKAhHpir3XX9iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:63:00:0d:52:72:eb:fe:c0:57:13:dc:c7:b7:40:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Nov 4 15:01:19 2025 GMT
Not After : Nov 5 15:01:19 2025 GMT
Subject: CN=8c61ec7db71555914b859a9a85bc11b817586291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:4b:10:73:9d:37:d3:b5:6f:9b:93:aa:75:1d:
15:c3:05:9a:2d:d0:cc:da:b9:58:e2:aa:b3:bc:a3:
79:21:40:d1:5e:ea:e8:52:65:35:c7:51:44:c4:27:
c5:15:6a:ee:99:29:94:03:7b:e7:72:1b:d6:22:27:
af:23:45:a9:a1:f7:d3:d7:8c:89:2b:fe:2a:31:0d:
ed:75:cd:3d:ef:e5:1f:7f:8b:af:91:d0:a9:9b:50:
7f:92:76:99:34:b5:ef:ec:95:82:84:b3:b1:3e:ca:
0f:7d:c8:7c:c1:6c:b7:d0:bb:37:b5:e4:f1:82:9d:
be:04:e0:0e:dd:30:e4:be:80:d1:45:d6:57:19:a5:
56:b1:e9:f7:ec:85:25:70:7e:d1:dd:44:a8:9c:eb:
bf:c8:b8:5d:89:3d:29:58:29:b4:ac:85:d1:10:72:
7a:4e:eb:6f:e7:28:86:90:54:b5:9b:c2:27:fa:19:
76:2b:61:ea:d9:be:3e:12:12:ce:56:bb:30:54:99:
80:4d:ed:e9:91:50:48:15:0b:c0:db:ab:79:0b:bf:
85:b6:6b:c4:7d:1b:3c:c9:29:ed:a4:75:05:08:81:
2a:a9:c2:6b:71:a9:18:03:27:11:0f:87:1e:f2:c0:
e2:26:db:38:82:ad:70:65:9f:23:06:0a:88:b3:0e:
e7:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:61:EC:7D:B7:15:55:91:4B:85:9A:9A:85:BC:11:B8:17:58:62:91
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:8a:c9:4b:8f:61:ed:08:8c:fd:78:eb:0c:0a:9f:b3:8d:c4:
74:77:2c:68:71:c8:ed:d9:89:4b:2a:a5:68:c1:d7:fd:f4:cd:
69:1e:e9:f1:a2:d8:79:5f:9a:14:10:51:9c:96:4b:13:d6:2d:
51:7e:6c:fc:ee:98:96:43:56:05:0f:e5:a6:63:98:76:41:4c:
9d:64:86:e7:18:f4:8c:63:53:01:2e:85:1a:ca:ee:e2:38:e0:
39:15:64:7a:6a:d2:f9:2b:83:3c:02:70:ff:de:68:59:48:28:
84:c4:12:12:0c:00:dd:48:b5:be:15:af:09:e0:e1:c8:ae:2d:
c3:4c:5e:20:19:71:76:11:46:1c:1e:f5:4c:29:f2:c1:05:f9:
9e:ac:4a:97:c6:e7:d6:8f:31:89:8a:97:b0:15:07:ad:be:95:
32:f8:b0:f4:86:39:4b:4c:53:96:6d:54:da:46:99:5e:fc:d8:
87:6c:6e:7b:3c:96:01:96:36:e6:ce:c1:b7:79:11:42:4f:de:
3a:bb:13:56:61:d9:99:0f:ab:39:4d:de:1b:8c:66:19:19:5d:
5b:3d:0d:ba:50:db:29:0c:b3:27:05:97:9c:34:a5:06:69:0c:
3c:fc:6c:23:61:92:a0:80:0b:cf:bd:e7:a8:82:87:7b:7e:4b:
da:4c:39:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:46:25 2025 by rpki-client