Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
File: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft (raw, json)
Hash identifier: T0uPcoZsI60T/HsMEk2a7U5e+FpmpL+71pQSluZ9Gd4=
Subject key identifier: A4:E0:E7:5F:D9:4A:7D:2B:43:69:A4:4D:E2:D4:9B:00:DA:D8:ED:64
Authority key identifier: 0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
Certificate issuer: /CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Certificate serial: 019A56AF404D6BAFCD2773AE23AD25D28185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
Manifest number: 0DE0
Signing time: Thu 06 Nov 2025 01:01:57 +0000
Manifest this update: Thu 06 Nov 2025 01:01:57 +0000
Manifest next update: Fri 07 Nov 2025 01:01:57 +0000
Files and hashes: 1: 6soF94B982IoR0MOFM1SH9uV6Tg.roa (hash: 7pQjtbHBxvyD21W+9nIDqr4CT80Xm33u4f484yzhbsM=)
2: C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl (hash: 17G2tBLrcxcUUhOPWDu2vG4Gh0NexCUJhfAk11+L6rI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:af:40:4d:6b:af:cd:27:73:ae:23:ad:25:d2:81:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b80e7bcb42bccb8092ae28a41aed928eea4d635
Validity
Not Before: Nov 6 01:01:57 2025 GMT
Not After : Nov 7 01:01:57 2025 GMT
Subject: CN=a4e0e75fd94a7d2b4369a44de2d49b00dad8ed64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:87:a2:8e:d9:a6:48:c4:4d:f7:12:62:35:4e:
37:15:c7:1e:77:1f:f5:09:ba:96:4e:64:95:4c:6f:
8e:a6:f3:ae:1b:b3:1f:b3:06:57:d5:30:4b:de:7a:
40:f1:15:13:00:60:9e:cd:f2:8b:a7:9c:0e:e5:3e:
df:47:a6:f7:51:b2:30:e4:84:47:72:33:96:44:59:
5d:98:00:e7:17:b1:fd:8c:f3:33:12:98:21:02:47:
9c:e9:dd:12:d5:34:38:26:02:5b:29:39:b8:32:07:
2c:30:21:a9:71:b1:99:40:84:f4:4f:42:44:b2:7b:
e3:ce:5d:74:35:45:6c:0c:dc:0a:d3:2c:1a:ea:6d:
fe:c5:ce:ee:d4:83:4a:21:c8:c6:c8:b8:05:4c:d8:
20:3a:5c:26:e4:31:23:07:a1:87:31:55:7a:08:eb:
40:bf:aa:f2:82:4c:31:ea:eb:a3:0e:19:ab:e4:4d:
89:1b:8e:99:17:a3:4c:0d:02:e5:4b:77:80:f0:78:
d5:df:a6:cb:97:f4:3e:d4:46:be:cd:80:9e:fc:7a:
85:db:18:f2:85:1e:46:19:02:8c:bb:10:fe:67:71:
99:b1:ed:d0:aa:63:fb:8a:82:22:cb:d7:18:5e:30:
6d:f1:1c:0f:56:5d:b3:d3:cc:fe:3c:d1:a1:6b:f6:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E0:E7:5F:D9:4A:7D:2B:43:69:A4:4D:E2:D4:9B:00:DA:D8:ED:64
X509v3 Authority Key Identifier:
keyid:0B:80:E7:BC:B4:2B:CC:B8:09:2A:E2:8A:41:AE:D9:28:EE:A4:D6:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/954653-267e-4313-b906-fc0148119638/1/C4DnvLQrzLgJKuKKQa7ZKO6k1jU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:e6:28:07:94:a5:17:8f:8c:f0:18:f1:85:f8:89:86:0f:8b:
0c:05:86:94:0d:c8:39:06:37:63:78:c6:94:e4:c4:c8:ea:16:
3a:8c:e2:12:39:01:f8:16:02:72:f9:d7:51:aa:cd:9c:58:82:
18:6a:74:81:7d:a6:60:a4:7c:96:46:6d:71:08:8e:e1:8d:ef:
c1:ab:d6:ff:ed:a7:fe:dd:66:7e:66:bb:52:5e:ca:2f:3e:90:
4e:99:73:81:e5:b0:3f:b3:ed:4c:7f:58:95:2e:9b:58:fc:06:
91:65:5c:de:37:32:08:8c:45:fa:c2:bf:4e:96:0d:4f:d8:b8:
5c:34:62:cc:d0:9c:ba:da:64:06:48:12:74:bb:5a:0b:67:b9:
85:9b:17:f9:97:8d:52:77:dd:67:6d:11:ff:c9:70:af:fe:5e:
e4:d4:e3:0c:fe:6e:89:49:54:d7:a4:31:d8:ec:3b:e9:f3:55:
81:eb:27:04:b4:0d:4f:e6:5a:9e:bb:ad:99:a1:e3:7c:49:bc:
89:c7:8f:a9:77:c5:ef:09:0b:0e:36:0d:49:57:23:b3:36:2a:
8f:cf:50:36:9d:aa:f3:6b:7f:f7:d0:25:18:61:c7:53:a0:a9:
18:1f:5c:fb:71:d1:cf:22:70:4e:9c:35:10:a5:12:b3:bd:8e:
c0:39:c0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:55:39 2025 by rpki-client