Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
File: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft (raw, json)
Hash identifier: sj3GYVm6WAbHiqsCgY6FwRvUh2Qe4Phb56vx2bn3eYM=
Subject key identifier: E1:99:53:3C:6B:88:03:12:80:AA:79:C3:8C:0F:B1:E1:65:84:65:4A
Authority key identifier: E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
Certificate issuer: /CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Certificate serial: 019A522CB248861BD04525C2BE6314C63086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
Manifest number: 141C
Signing time: Wed 05 Nov 2025 04:00:52 +0000
Manifest this update: Wed 05 Nov 2025 04:00:52 +0000
Manifest next update: Thu 06 Nov 2025 04:00:52 +0000
Files and hashes: 1: 0vfqJp8CAa8Wb2tMkMFK4NfB1iI.roa (hash: Fq32OdyGPsi3kvuTM0d8dbHXJU1ZVYcji5eWBETIXTQ=)
2: 4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl (hash: ILgcB1d0x1ctBNNWpBJTPnA54+Qz/Sj0Y51zK86nsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:b2:48:86:1b:d0:45:25:c2:be:63:14:c6:30:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00c7ac56b11e104abb167bb1ab3792b3fa7c3d3
Validity
Not Before: Nov 5 04:00:52 2025 GMT
Not After : Nov 6 04:00:52 2025 GMT
Subject: CN=e199533c6b88031280aa79c38c0fb1e16584654a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:00:da:45:a7:d7:26:81:fd:4f:bb:38:d1:16:
92:dc:16:9a:35:27:d5:18:a6:2b:d0:d7:ae:fb:6c:
77:80:a6:a7:60:05:9f:dd:0e:9e:c0:cc:b5:ba:85:
07:59:b8:4b:32:71:91:3b:21:15:08:ff:4f:c9:3e:
93:5f:93:c0:ef:77:be:9d:57:0c:fd:b4:01:58:06:
35:22:13:8f:ef:f1:55:de:c4:a0:fc:88:77:b9:c6:
15:46:07:5e:c0:cb:b5:b6:cd:34:3a:7e:b4:2b:86:
85:6b:50:91:1b:bc:34:64:b2:5b:1c:49:8d:53:7f:
3c:2b:b6:de:a5:01:0c:f2:4c:be:70:83:c8:b1:eb:
93:26:00:5c:72:08:96:33:89:11:e8:9e:ce:55:7e:
9d:ed:65:4c:84:22:a1:13:47:39:b8:60:e6:e9:0c:
64:e1:0a:95:ef:e9:53:36:e9:d9:03:74:db:8b:58:
2b:a0:c6:ef:cf:97:e8:a5:bd:6b:be:1a:9d:7f:82:
10:d8:53:14:50:c6:db:97:68:f8:cc:ad:9b:98:42:
6d:04:44:58:e6:61:a8:48:5a:bc:07:d1:0b:f5:9a:
79:58:ee:20:78:fc:01:e0:d8:0f:9e:94:5d:8f:65:
5b:38:da:47:ab:5e:43:e8:a2:11:f8:05:6d:9d:cc:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:99:53:3C:6B:88:03:12:80:AA:79:C3:8C:0F:B1:E1:65:84:65:4A
X509v3 Authority Key Identifier:
keyid:E0:0C:7A:C5:6B:11:E1:04:AB:B1:67:BB:1A:B3:79:2B:3F:A7:C3:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/f20071-22a1-461d-b6bf-4fd0e1b9c12f/1/4Ax6xWsR4QSrsWe7GrN5Kz-nw9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:40:6b:b7:3a:0d:b2:94:59:fb:ee:e3:93:80:e5:4e:bf:84:
78:ec:a4:aa:d9:e4:34:0c:22:96:bc:d3:e9:56:1e:28:ab:f7:
5c:77:f8:e2:7b:fb:08:e3:a7:10:47:aa:07:63:10:be:b6:46:
f3:f6:cd:ed:b6:01:f8:98:9d:67:86:fa:d6:62:bd:2f:54:7b:
8d:6b:1b:24:fe:18:85:74:b1:ad:ce:62:66:8e:cc:4a:c9:92:
25:98:e2:72:43:35:ca:66:30:01:a8:50:46:96:ed:34:04:8d:
aa:69:f6:18:d0:5c:fc:3c:31:b3:ad:a9:33:24:2b:83:45:e0:
b7:0a:ca:92:72:dd:5d:46:0b:f4:0b:1c:ab:d2:ad:af:64:81:
7b:5b:da:e7:92:b3:9a:c9:8d:53:9d:92:90:b1:88:da:4f:90:
97:eb:a3:2e:c4:58:ab:60:19:d8:6f:48:67:74:f3:38:fe:d2:
5c:0e:b8:42:ce:57:6d:4a:e9:3c:25:ef:2a:d8:4d:51:69:40:
ab:36:8b:27:6f:e4:6f:1b:78:bd:13:9e:cc:1c:83:ac:64:b2:
7a:cb:56:3e:93:8d:37:cd:d4:23:a5:85:33:33:33:bd:9d:9c:
49:c9:8e:25:bc:bb:e3:38:5b:7c:da:e0:35:27:af:13:fc:83:
24:3c:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:59:41 2025 by rpki-client