Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: UNFDV26pibQ+5K67/ZObHlbyk3b1jzJvSlg6bemIRgU=
Subject key identifier: D3:68:52:5C:61:15:E8:A8:CD:32:98:2C:03:9B:E9:15:1B:CA:63:4E
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 019A4DE15FEF24C9C8F14E5A37B1F2B52351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 1660
Signing time: Tue 04 Nov 2025 08:00:06 +0000
Manifest this update: Tue 04 Nov 2025 08:00:06 +0000
Manifest next update: Wed 05 Nov 2025 08:00:06 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: PWW9vHDIH0GIKcmwYkgrTcDD37pZODVK1GEb/JUE1wM=)
2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:5f:ef:24:c9:c8:f1:4e:5a:37:b1:f2:b5:23:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Nov 4 08:00:06 2025 GMT
Not After : Nov 5 08:00:06 2025 GMT
Subject: CN=d368525c6115e8a8cd32982c039be9151bca634e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6c:83:77:1b:5b:67:30:b2:9f:f4:49:73:6e:
7b:63:d8:91:3f:fa:58:5d:ad:b1:df:cc:a5:fa:9f:
ac:b3:1b:57:45:3b:15:bb:1b:09:aa:27:ea:8b:64:
3c:09:4d:be:4d:e9:b7:2b:f5:44:ba:c0:ae:84:6c:
27:3e:9e:1b:cb:59:51:da:32:b0:48:1e:84:c1:46:
d9:7d:81:71:7f:a7:8b:04:48:5d:72:6c:80:ee:71:
4c:5b:06:fe:97:19:69:d7:8c:55:1f:d2:b8:ce:fd:
aa:81:b9:e5:57:bc:10:f8:81:3f:71:c5:98:b0:39:
70:b6:cd:69:6e:0f:ca:f2:5f:03:ff:cf:74:f2:8c:
28:d1:a9:dc:c7:5b:bf:ff:0f:58:93:84:89:92:d2:
7d:1a:70:0c:5a:96:9a:9c:2c:94:1b:64:d9:35:af:
6a:a0:b9:dc:cc:58:1f:aa:07:71:84:41:37:63:54:
f0:cb:3b:ab:d1:48:89:ba:59:c5:7d:63:6b:91:c8:
c0:1a:28:7c:87:bb:70:9b:48:92:2e:e3:fc:52:a9:
42:91:ef:0a:b4:80:a0:4b:11:b3:1a:a6:34:ec:44:
b1:95:db:db:2e:e8:07:40:29:f6:b0:e0:a0:f8:9a:
19:d1:81:8e:9c:dd:a6:db:9b:20:12:48:f9:c0:0e:
e5:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:68:52:5C:61:15:E8:A8:CD:32:98:2C:03:9B:E9:15:1B:CA:63:4E
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a7:0e:ae:1c:69:46:34:bd:93:23:e1:32:0d:c5:33:38:32:
78:84:32:3e:9a:4d:b7:30:6c:06:7b:8e:ac:c7:b5:32:ea:ea:
53:ff:47:98:40:41:b0:cd:3a:f5:86:6d:1e:51:f7:9d:ef:26:
3c:e8:44:a1:2b:dc:05:89:ba:2b:64:10:fc:e0:fb:8b:91:19:
1f:f6:aa:b8:65:cc:0a:ba:f1:25:e2:3a:58:4f:0b:a7:a7:ed:
80:42:4e:b2:46:f4:e3:6e:68:ca:63:5e:3c:2c:c1:89:b9:64:
6b:12:89:af:6a:97:b4:18:ff:3b:54:cd:5e:89:b4:b7:1d:80:
a6:92:32:9e:29:bf:2d:da:46:57:d3:77:9c:ab:11:3d:e4:f3:
cf:32:fc:a1:d7:fb:aa:16:ec:f4:81:eb:93:26:9d:9f:fd:fd:
16:a7:71:e2:ce:e6:65:5f:85:e5:b0:e0:a4:08:de:c1:80:51:
98:09:ae:9e:07:b4:dc:ce:2f:44:2c:40:98:62:e3:c7:de:88:
90:6a:0f:e3:c3:d9:ab:96:6a:ae:66:bf:e0:fb:2c:04:15:52:
54:c9:84:a9:d7:9d:1c:cd:7a:55:37:63:18:63:c9:70:c4:4e:
22:ec:c8:d9:0c:67:8d:b8:21:8c:6d:5a:86:1c:81:b7:b7:cd:
b4:ca:89:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:50:23 2025 by rpki-client