Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: Bu27kmDkKuQnTDDWx4zVOS5btdN509X5bFNr41EmI/s=
Subject key identifier: C0:E3:7C:47:C7:AF:25:2F:8B:53:60:D1:07:EB:C8:3D:D1:07:A6:74
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 019A4E8634D4C4DBEF74E941C1BEE328F10C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0D00
Signing time: Tue 04 Nov 2025 11:00:09 +0000
Manifest this update: Tue 04 Nov 2025 11:00:09 +0000
Manifest next update: Wed 05 Nov 2025 11:00:09 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: +ykE4ZwKUgdJOvFxYd3XU4kshv7n9GBelQltTtn2DHA=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:34:d4:c4:db:ef:74:e9:41:c1:be:e3:28:f1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Nov 4 11:00:09 2025 GMT
Not After : Nov 5 11:00:09 2025 GMT
Subject: CN=c0e37c47c7af252f8b5360d107ebc83dd107a674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:46:34:2d:d9:ef:00:72:84:e5:ab:eb:a1:3f:
97:f9:83:0e:65:58:3b:16:5b:ab:fa:bf:0e:5c:c4:
68:68:1e:68:72:06:88:cf:08:4e:d8:c9:a8:91:d4:
e8:20:c5:1d:92:7a:0b:b3:fd:76:73:86:03:6e:77:
bf:f5:1f:4a:61:07:c2:3f:fd:13:5c:10:ed:c8:84:
7f:a7:92:f5:8e:16:af:90:a2:35:5d:da:22:73:27:
3c:21:a3:d5:d8:a3:77:12:38:76:79:14:a5:46:c2:
04:45:0d:c1:85:06:1a:81:cc:07:52:36:a8:8d:83:
c4:da:b2:04:33:d3:d6:87:77:c5:54:19:75:59:a8:
55:73:7c:e8:b1:55:6c:58:f4:a7:97:5b:ce:68:19:
12:1d:3e:cf:f7:90:1d:31:a5:62:f5:c8:8d:bc:5d:
c3:c8:e0:1c:71:21:50:b1:4f:30:9b:9c:d1:c8:5f:
bb:0b:55:f3:71:13:91:de:60:e4:08:ee:f5:43:da:
8b:a0:e6:b6:fd:8a:70:60:17:ce:69:65:dc:94:0c:
2a:8f:74:de:52:34:54:35:8d:36:e5:91:80:47:4c:
8c:f6:23:06:85:90:29:58:b3:2b:11:8c:9e:e2:3c:
55:85:9a:9a:de:6d:70:44:d9:69:c7:4e:98:cd:fb:
18:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E3:7C:47:C7:AF:25:2F:8B:53:60:D1:07:EB:C8:3D:D1:07:A6:74
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4a:7d:22:24:8e:d1:2f:20:fb:58:e9:44:0f:65:c8:1e:81:
3b:e0:54:5b:bf:92:95:46:43:1c:3e:c5:f4:fe:fc:e6:e1:a5:
d3:57:ab:f7:7c:f9:3b:b1:f5:ec:62:51:58:1f:b3:ad:9b:dc:
21:e3:78:d2:05:ca:a8:f6:c1:1a:81:01:94:0b:ed:ac:f5:5f:
ea:19:6f:0d:07:dd:4d:2e:32:f0:b8:08:f8:5e:b3:4e:61:48:
aa:b6:f2:b4:54:8b:92:c1:6a:ab:80:e7:09:d0:81:05:3d:02:
e6:dc:31:1b:ec:9e:fe:2c:5c:76:24:c4:8e:ca:8c:18:87:65:
b3:ce:29:7b:b2:e5:30:18:b2:d1:1e:65:c6:44:61:dc:86:e7:
d2:29:ba:cd:80:0c:71:cd:ff:fe:cd:20:ca:1f:eb:4d:38:a4:
da:37:be:99:1d:0a:8a:b2:15:0b:c3:54:9f:e4:68:85:7e:17:
f4:10:af:cd:7c:39:f4:59:73:7c:16:e1:f8:a4:e3:c6:10:37:
96:c7:85:7f:5f:f9:5c:ed:2e:6d:33:6f:25:f9:0c:b9:fa:94:
62:44:93:9b:c4:01:eb:55:b3:52:28:b7:a5:7b:43:8c:2e:b0:
42:68:5d:6c:b4:62:76:27:7c:cd:29:c2:a8:6a:a6:0a:f4:45:
e7:37:0c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:41:51 2025 by rpki-client