Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
File: 4njEqqAhvti5JuNZH99QyN9rwXI.mft (raw, json)
Hash identifier: 5L2cytmMRb4w0i5uP6/SQS7SoSdStQLXLb96lphOFlA=
Subject key identifier: 55:04:9B:D1:DA:A2:F6:87:09:88:F0:1E:BA:D1:7B:C9:53:82:58:75
Authority key identifier: E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
Certificate issuer: /CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Certificate serial: 019A4F2B4B36791F043277E660FA1D9298FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
Manifest number: 0982
Signing time: Tue 04 Nov 2025 14:00:28 +0000
Manifest this update: Tue 04 Nov 2025 14:00:28 +0000
Manifest next update: Wed 05 Nov 2025 14:00:28 +0000
Files and hashes: 1: 1ypxGUz02dU-GrVHnawwOGAtbp8.roa (hash: s/FzoESG6FigLmQ9qVLEYvChgXRxC5KQ8IrkGKlYCxY=)
2: 4njEqqAhvti5JuNZH99QyN9rwXI.crl (hash: kTwW6zyPCgf0G7KtC+rbwpgTOcZRKRldPAwEdHj/sR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:4b:36:79:1f:04:32:77:e6:60:fa:1d:92:98:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e278c4aaa021bed8b926e3591fdf50c8df6bc172
Validity
Not Before: Nov 4 14:00:28 2025 GMT
Not After : Nov 5 14:00:28 2025 GMT
Subject: CN=55049bd1daa2f6870988f01ebad17bc953825875
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:11:71:4d:9e:7c:fd:8a:5b:e3:7d:89:5e:64:
9a:d9:11:84:a5:0f:6b:0d:38:f6:94:83:38:29:f5:
4d:0a:56:a5:cf:9a:b3:d8:0d:02:b1:40:30:e1:df:
66:af:cb:7d:04:e4:18:e8:24:9c:63:79:1d:6b:03:
b2:5c:15:d4:46:c5:2f:9c:15:2d:a7:2d:e7:56:e5:
14:40:30:7f:75:e9:7a:c1:ea:bb:a0:92:1b:3c:1d:
b3:7d:4d:37:09:c1:1e:1c:70:b1:d1:8a:30:82:62:
8e:ec:44:7b:63:b5:7d:39:15:43:ce:f7:cd:b8:f4:
c4:db:aa:15:95:d9:25:73:9c:78:8c:dc:5c:7c:50:
d1:0c:f3:6c:63:bb:13:75:2b:88:11:81:94:ae:a1:
59:bd:3f:7a:ba:db:c7:4b:9b:f7:a4:c2:4b:48:e3:
6c:b6:d3:9f:72:cc:1d:b5:64:92:3d:68:db:8f:0c:
cc:c6:dd:d1:c2:6f:75:6c:33:20:5e:f4:f3:ca:18:
a0:64:0c:ee:79:2f:f9:ee:b4:43:91:49:33:c2:d8:
a1:b6:08:9b:4e:9b:aa:d4:41:d6:06:2f:a7:ef:4d:
aa:35:13:78:46:82:b6:2f:12:1a:ce:29:67:17:39:
1d:ac:f8:8f:b3:64:f6:59:84:d2:ca:28:c9:d7:8d:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:04:9B:D1:DA:A2:F6:87:09:88:F0:1E:BA:D1:7B:C9:53:82:58:75
X509v3 Authority Key Identifier:
keyid:E2:78:C4:AA:A0:21:BE:D8:B9:26:E3:59:1F:DF:50:C8:DF:6B:C1:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4njEqqAhvti5JuNZH99QyN9rwXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c06937-93b3-442e-8676-fc43391988f7/1/4njEqqAhvti5JuNZH99QyN9rwXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:ca:6e:85:37:56:f9:3f:92:a3:44:15:34:c7:97:5f:55:4e:
2a:4e:50:27:ae:08:9e:85:7d:b5:02:a9:3a:b6:59:cd:c4:4f:
02:5d:58:27:99:42:c4:33:96:0f:34:9a:a6:a0:5b:ab:51:db:
06:7b:40:8a:7a:43:40:8a:4d:6c:31:c8:e8:38:9c:e8:39:5b:
20:13:4c:79:df:78:d2:a9:e5:ce:94:4f:0d:e3:6f:78:a4:45:
49:61:bd:c6:fd:b7:3f:46:8c:09:1a:49:50:14:91:ba:8b:cb:
2e:87:06:1a:79:af:b1:0a:bf:cf:7c:37:bc:12:2c:c8:22:b3:
05:67:1d:c2:0e:ef:d5:1c:73:8d:c2:a5:39:26:55:d5:66:fe:
5f:07:46:7c:44:e3:9c:c6:8d:e1:6b:32:a2:3a:40:15:95:ca:
68:8f:83:ac:e6:d4:68:78:f2:d4:67:4b:f5:4a:48:ec:5b:d7:
1f:4d:04:c7:79:10:3a:31:2f:99:a9:d8:ea:1a:85:2d:af:26:
a5:54:8d:61:24:73:c3:31:a7:dd:d4:07:aa:24:30:18:e4:a5:
da:37:96:b6:6c:ba:0d:60:66:8d:5a:e0:8d:fb:d5:81:32:27:
07:48:bf:fc:1f:a3:d4:2a:10:3d:2c:88:fb:b3:ac:42:80:f8:
bb:76:d3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:04 2025 by rpki-client