Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
File: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft (raw, json)
Hash identifier: RqOr61DILUPWId7FiHsr2LAAMkg91yEgy1NEer2au1s=
Subject key identifier: 41:8E:4D:D9:14:93:9F:26:E0:EB:CC:21:AE:62:96:52:AF:1E:49:26
Authority key identifier: E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
Certificate issuer: /CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Certificate serial: 019A5451B411440594CDC7BC1A959802D063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
Manifest number: 02A5
Signing time: Wed 05 Nov 2025 14:00:31 +0000
Manifest this update: Wed 05 Nov 2025 14:00:31 +0000
Manifest next update: Thu 06 Nov 2025 14:00:31 +0000
Files and hashes: 1: 4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl (hash: qGLhHEuG7SCIvrSZy5en3Y2wzP+iSgFiX/D6VsX9Pd4=)
2: U8sue3gZLueOLUNHI3zh7NTbaBA.roa (hash: aGzdRWMTM0/YLdPvutTc1s3WsmhuwZtks1XpZ/1ew6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:51:b4:11:44:05:94:cd:c7:bc:1a:95:98:02:d0:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0776b0838fa0e1da1be4edccf8924bd413b1db7
Validity
Not Before: Nov 5 14:00:31 2025 GMT
Not After : Nov 6 14:00:31 2025 GMT
Subject: CN=418e4dd914939f26e0ebcc21ae629652af1e4926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:53:1a:b4:15:8f:0e:e3:5a:2e:d1:0d:5d:ea:
a9:ac:ca:b6:fb:22:ba:4a:31:d7:b9:c5:1d:14:e6:
8d:7a:bb:6f:18:f2:59:9a:8d:e3:11:1d:42:51:ba:
6d:fa:2e:f2:2a:db:f0:97:a9:6b:4d:aa:72:ac:ff:
d7:7a:cd:b9:e4:1b:2e:c3:86:8f:a9:8e:c9:03:1b:
08:da:24:04:ed:6a:84:8a:f4:77:33:7f:72:b4:e6:
e6:99:0c:2b:dd:d9:a4:1e:db:21:91:66:81:25:54:
9a:66:2e:39:5c:5a:a0:e5:c8:14:cc:2d:83:50:5f:
0c:84:1c:59:54:d4:a5:61:fe:18:cc:4a:f7:3e:a7:
94:77:ae:c9:bd:3a:0d:f5:72:1a:8d:04:ab:50:1d:
e8:49:7d:ea:33:8c:05:18:ef:79:b9:55:05:7e:41:
ee:86:a9:cb:73:dc:df:10:b3:7b:83:4f:ff:17:0d:
46:c9:88:ad:2e:69:27:53:bc:3f:22:12:be:91:a1:
50:a3:4f:1d:f3:99:26:4e:0b:04:ec:c3:88:5a:53:
cf:66:55:bf:dd:9e:7a:6b:f3:2c:92:a2:06:79:ec:
2a:d6:65:7e:da:38:0e:60:83:df:15:5e:73:ae:24:
ae:45:81:27:88:13:73:89:00:36:04:b1:2c:9a:b6:
f5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8E:4D:D9:14:93:9F:26:E0:EB:CC:21:AE:62:96:52:AF:1E:49:26
X509v3 Authority Key Identifier:
keyid:E0:77:6B:08:38:FA:0E:1D:A1:BE:4E:DC:CF:89:24:BD:41:3B:1D:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/be9dab-5f27-43ce-ab22-739a91c620ac/1/4HdrCDj6Dh2hvk7cz4kkvUE7Hbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ae:cb:22:7c:36:fa:01:bb:2e:dc:77:3b:e9:c6:78:d3:f6:
ad:ea:fe:da:8b:9f:28:2c:b1:4a:07:17:09:9a:e7:1e:64:6b:
0b:05:ab:a4:85:1a:c4:99:5f:52:85:e4:4c:d8:21:ee:c5:58:
30:25:36:6a:1a:12:88:b1:e4:fe:69:95:e0:d2:6d:0c:69:b3:
53:fd:e8:3a:e0:61:12:76:3b:11:7d:4e:0e:ac:cc:0c:db:47:
fb:8d:3f:e0:d3:82:cb:2c:51:dc:bc:23:b2:d1:f7:07:17:2e:
af:06:a5:6d:63:0e:82:03:19:5b:d4:31:49:a3:43:88:8a:41:
f8:b1:67:c4:e2:67:fe:1f:c5:c4:f6:69:19:08:41:55:f0:a6:
5c:78:c6:3d:0c:a0:ef:d9:8e:f4:dc:e0:d0:10:3a:2f:dc:b2:
e4:d2:cc:ad:2e:0b:ed:0a:33:04:bc:39:cd:92:5a:01:e0:bf:
ed:6e:68:72:0e:45:39:a4:67:9b:9b:58:09:c6:de:07:1d:4f:
19:a4:50:9c:ac:81:ee:e8:57:f3:6a:1e:a2:a9:d4:1a:31:9c:
4f:5f:a4:b7:5c:55:d4:9b:43:1f:d7:38:7b:b6:42:db:0b:e1:
69:f9:fe:39:8c:50:0e:a6:54:38:09:43:ac:4e:de:88:7f:44:
d2:3f:2d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:19:35 2025 by rpki-client