Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: GkdtEb6ech8aSXPgXhtnFv89x/Wtu2r6Tb1kMhNFUCA=
Subject key identifier: 91:6C:46:D9:D2:84:A4:9D:FD:12:83:8C:28:A8:29:D3:9A:49:D1:E4
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 019A53084646EE9F524077A540A0F63D7175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: C2
Signing time: Wed 05 Nov 2025 08:00:42 +0000
Manifest this update: Wed 05 Nov 2025 08:00:42 +0000
Manifest next update: Thu 06 Nov 2025 08:00:42 +0000
Files and hashes: 1: 2l62dAKm04WNCR-je-bPkSJnLtk.roa (hash: nr1ofanqNDye36o5ymwo4drebXuJubRmduTbD4ErXCA=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: k06WtSOCq2mf8OcW1Wk84yujZWSv9hUuwFuDplWtQWs=)
3: KZbQxsiRHs5YN9o-TB41tup8grs.roa (hash: lbxZF46nVuZIlOO3tq5CMkFz19fAyL6hszjHRAwWgM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:46:46:ee:9f:52:40:77:a5:40:a0:f6:3d:71:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Nov 5 08:00:42 2025 GMT
Not After : Nov 6 08:00:42 2025 GMT
Subject: CN=916c46d9d284a49dfd12838c28a829d39a49d1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8a:5b:59:e7:2e:d0:1e:92:8b:7c:ea:5a:e9:
0b:1b:97:74:77:49:83:b1:65:f2:2b:88:7e:35:0b:
86:a0:56:38:09:80:86:12:b7:fd:c3:54:0b:1a:82:
18:4b:8f:79:21:bc:e5:23:59:64:d0:5a:be:1c:32:
01:98:6b:9a:1a:c1:a4:5e:ba:76:f8:7e:c0:1c:6f:
7b:1a:df:29:01:b8:67:12:35:7d:aa:ce:e0:4d:41:
36:96:fa:23:24:48:1e:4d:5e:de:44:3a:d2:4a:9b:
d8:45:68:52:22:36:63:d3:7a:70:ca:45:c5:4f:d1:
63:12:8b:0e:fc:c5:0f:30:e8:e9:86:7f:13:5c:0d:
ab:f0:db:64:e4:fb:fe:65:c0:6c:58:80:46:44:59:
54:93:f9:cc:17:54:c9:f1:6a:f6:8d:8d:96:e5:a1:
74:06:df:02:c9:f0:05:4b:e3:83:5f:5a:88:d6:cc:
76:87:00:d7:59:92:d1:f8:47:9c:f7:a0:61:a6:9e:
6d:99:dd:ab:20:1d:c0:b0:e9:c6:f0:86:64:f7:90:
08:07:77:8c:0c:73:e3:8b:dc:30:f3:dc:49:8f:70:
ea:72:b6:4f:43:56:f0:92:13:25:b7:9e:8f:ce:81:
7a:48:92:0f:4e:3c:b1:02:88:48:2e:ff:90:7e:6b:
c7:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:6C:46:D9:D2:84:A4:9D:FD:12:83:8C:28:A8:29:D3:9A:49:D1:E4
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:eb:16:a0:68:7b:d6:2f:0e:0d:3b:b9:82:4a:29:67:2d:3a:
9a:8f:cc:38:70:22:b4:5f:13:e2:3d:c5:56:31:63:1a:af:2f:
d1:3e:4f:c9:f2:bf:82:74:df:cf:d9:1b:e1:92:63:6a:d9:1a:
99:2a:5b:f1:95:01:6d:dc:ff:54:7d:61:36:b9:64:9f:62:bd:
99:58:4b:24:f9:28:11:37:d3:2a:8c:f3:75:2e:6b:77:2e:8a:
b7:81:89:96:39:91:7e:a4:22:6d:87:27:ac:fa:80:9f:e9:33:
a5:a1:f2:8b:8b:c8:58:17:ed:81:3d:ba:d9:38:f0:45:3b:9a:
d8:da:56:62:59:6c:fc:86:1a:9d:05:94:b6:5f:e4:11:a0:61:
1f:ad:bc:2a:90:f4:6c:5a:17:bb:97:87:93:1b:f5:64:61:68:
2e:07:7c:4c:8a:56:5c:e3:30:42:46:3b:69:e8:21:e7:30:19:
d6:1a:aa:e8:f3:21:3a:23:3e:03:d7:14:d5:74:38:67:02:80:
b3:0a:5c:54:2f:41:b4:29:0a:75:a7:81:d1:5a:c8:75:7a:3d:
58:1f:e2:eb:fe:16:a8:0d:72:1e:92:db:ae:b4:08:8c:15:b3:
8b:c5:52:40:1f:2e:93:11:83:49:da:0d:9b:64:bf:37:c7:1f:
50:46:46:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:59:18 2025 by rpki-client