Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
File: 4-dxd2XkvMcZGyXRpOZtOIycU9k.mft (raw, json)
Hash identifier: eQNnKL6SgPmmUKwPGmvemeo6Xonm+nN6wNisSU09Jyk=
Subject key identifier: C1:40:76:80:F9:73:DF:F7:AD:D6:2F:F1:41:54:AE:B1:AE:28:46:BF
Authority key identifier: E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
Certificate issuer: /CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Certificate serial: 019A4D7481BD714075A57DCE4DE10539E234
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
Manifest number: 0891
Signing time: Tue 04 Nov 2025 06:01:12 +0000
Manifest this update: Tue 04 Nov 2025 06:01:12 +0000
Manifest next update: Wed 05 Nov 2025 06:01:12 +0000
Files and hashes: 1: 4-dxd2XkvMcZGyXRpOZtOIycU9k.crl (hash: 1MENwRZ6zpjICA5dvWOQ0eyAKtzL1brAiVx37/JkoZc=)
2: NNXpk59D8TzuvrFY-C-H2t3-Azg.roa (hash: blHgWyvU6BLEqGgFxNZ3azxZxMbkiPWVvdBh5N+A+CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:81:bd:71:40:75:a5:7d:ce:4d:e1:05:39:e2:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e7717765e4bcc7191b25d1a4e66d388c9c53d9
Validity
Not Before: Nov 4 06:01:12 2025 GMT
Not After : Nov 5 06:01:12 2025 GMT
Subject: CN=c1407680f973dff7add62ff14154aeb1ae2846bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:31:bb:68:cb:67:70:90:f4:c4:e7:e2:ed:14:
f7:d0:c6:4e:5a:de:7d:fc:2e:9a:1c:f4:f9:2f:62:
25:69:f7:3a:11:b7:52:3b:a4:a8:73:c9:c2:0a:ad:
75:89:8c:a5:de:b8:bf:d3:ca:60:2f:2a:e5:8e:6d:
54:ce:aa:36:b0:ec:63:09:03:8c:2f:31:c7:47:40:
21:db:f4:32:a0:b1:00:07:42:10:46:a2:bc:b6:07:
4c:66:88:b3:95:cc:86:c7:dc:70:6f:68:26:d3:ae:
19:0b:18:9d:fa:b3:9b:43:85:51:12:73:ad:51:6a:
19:89:ba:37:8e:57:58:ed:74:cd:c1:eb:7d:d3:76:
72:7f:06:c0:3e:88:5e:cd:0b:19:0a:8c:39:6d:fb:
12:3b:93:a5:6f:9d:1a:eb:2b:44:c2:de:a4:6d:f6:
6a:21:dd:18:74:d2:09:4b:23:27:e5:04:e4:89:1f:
44:05:7a:97:53:16:a3:cf:f0:94:12:39:15:1c:3b:
7b:1b:fa:51:7d:a4:dc:14:43:c6:19:34:86:8a:8e:
6c:9e:19:fa:1d:74:72:fc:78:c4:29:22:27:16:70:
da:5a:22:88:18:3e:c0:6e:70:c7:0e:46:aa:98:8c:
c0:2a:f2:bc:be:9d:e1:8b:f4:52:b5:47:f0:23:bc:
9f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:40:76:80:F9:73:DF:F7:AD:D6:2F:F1:41:54:AE:B1:AE:28:46:BF
X509v3 Authority Key Identifier:
keyid:E3:E7:71:77:65:E4:BC:C7:19:1B:25:D1:A4:E6:6D:38:8C:9C:53:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-dxd2XkvMcZGyXRpOZtOIycU9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/39604e-9748-4c7d-ad5d-563d47a7ab61/1/4-dxd2XkvMcZGyXRpOZtOIycU9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ff:3e:84:d2:e8:f4:b5:fe:bb:a7:59:36:e3:4a:e1:73:fa:
46:43:13:50:23:f3:45:37:dd:89:9f:01:22:cd:5e:a3:22:16:
d5:88:05:53:a3:14:59:4a:f2:ed:bf:43:12:e6:d4:d8:e8:35:
dc:d9:de:f6:d5:88:4b:d1:61:5f:08:c3:7d:aa:35:38:b4:fa:
92:4c:2b:a5:ba:36:82:7d:4e:54:63:03:36:59:6e:89:98:35:
aa:ac:82:d9:dd:e6:fe:e8:04:04:87:94:3a:60:20:dc:3f:00:
cd:f6:67:21:2c:34:eb:6b:52:dd:54:da:d4:c0:6c:18:b5:3f:
4e:62:3c:d9:04:52:eb:c5:d2:d7:e0:96:48:6c:8e:9e:18:23:
bd:f2:bb:f2:91:d7:02:ce:c9:60:71:1f:4a:46:3e:d2:09:1d:
50:34:6b:fb:1f:31:fb:cc:00:ff:a1:21:92:08:da:9b:b9:9f:
f6:72:5b:1d:26:7f:31:f0:8a:e5:bc:d9:5a:74:cc:b0:ca:36:
93:ac:54:31:91:d7:d8:41:33:c0:66:64:86:27:d5:ed:6f:4e:
28:50:9f:3e:34:5e:67:a9:95:13:54:4e:23:d7:3f:8f:f5:75:
b5:a1:f2:ad:1a:8f:6d:d2:cf:3a:88:99:94:17:42:17:61:d6:
72:1b:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:12 2025 by rpki-client