Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
File: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft (raw, json)
Hash identifier: 8tvAUjxnRJF0mJ650nVcEosA8XOcSE9BE6XPtySv2Eg=
Subject key identifier: 7A:2F:35:17:3E:4A:B6:59:8B:F7:7C:1B:51:90:5F:2D:A2:B9:10:97
Authority key identifier: E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
Certificate issuer: /CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Certificate serial: 019A4DE20DEB2DC94F4B33A200F8FA497F67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
Manifest number: 0CBE
Signing time: Tue 04 Nov 2025 08:00:51 +0000
Manifest this update: Tue 04 Nov 2025 08:00:51 +0000
Manifest next update: Wed 05 Nov 2025 08:00:51 +0000
Files and hashes: 1: 4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl (hash: mRNt+j4iMC8UDlkRyEpXtr45iWfeWOY8RrqThdrfSmE=)
2: 8bvtISuekSRpBrLsSpaV6rAQww8.roa (hash: aP0bCcp5CUzuOtRFBu3Cv7XlqsZIi2ySA9u8hp6h1oU=)
3: HbFrbBDigmkbyhupjsQvR2G2rcg.roa (hash: DeaPvaz1CarpC6mp6iOUrw4n3hX9gcQTUiHE5Oraa94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:0d:eb:2d:c9:4f:4b:33:a2:00:f8:fa:49:7f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05d28f149793a3d72e8ef041e9c9e0d9a66b21e
Validity
Not Before: Nov 4 08:00:51 2025 GMT
Not After : Nov 5 08:00:51 2025 GMT
Subject: CN=7a2f35173e4ab6598bf77c1b51905f2da2b91097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7a:60:a8:33:b9:86:1e:d6:e0:3e:d1:02:8b:
ad:fa:91:ef:8a:93:50:de:58:3b:55:c9:ca:8b:92:
1d:59:74:be:ca:57:11:0e:84:8f:9d:5f:43:ee:da:
3c:38:e5:04:95:29:94:5e:5d:49:c6:31:0f:2f:82:
d7:e0:32:8a:45:2f:2e:b5:07:0f:0c:f1:5d:00:0d:
61:56:40:a0:78:58:fc:4e:42:83:3a:c2:98:15:32:
83:e4:bf:a2:e7:e7:fe:a6:6a:16:5f:a6:92:1f:cf:
94:65:0c:12:db:57:54:14:b5:50:68:c7:bc:62:cb:
24:3b:a0:aa:c8:8e:9f:5b:93:4d:ad:5a:2b:3f:5e:
98:05:4f:15:9d:ae:d7:5f:4f:a5:1b:a2:d3:9a:10:
1d:70:61:14:f0:85:cc:ad:10:5e:85:e1:0e:a7:99:
bf:93:9e:de:32:e6:9c:09:55:41:b9:36:f6:65:d1:
90:f0:ef:de:3a:fd:68:4c:74:72:08:68:5a:f3:9e:
81:af:ad:71:6f:63:cc:e8:81:61:df:69:d8:d3:ea:
bc:77:70:53:4f:88:64:2f:4f:33:35:d0:05:9e:3b:
fb:ca:2b:f4:00:ba:d1:95:4c:75:59:77:a5:aa:87:
28:5a:b0:6e:67:54:6c:7d:16:75:b1:a2:79:ae:51:
e7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2F:35:17:3E:4A:B6:59:8B:F7:7C:1B:51:90:5F:2D:A2:B9:10:97
X509v3 Authority Key Identifier:
keyid:E0:5D:28:F1:49:79:3A:3D:72:E8:EF:04:1E:9C:9E:0D:9A:66:B2:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/b4c97b-e005-4cd6-8335-8091ebce3bbf/1/4F0o8Ul5Oj1y6O8EHpyeDZpmsh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:13:37:95:da:2b:3a:91:e3:bd:e0:58:41:b2:87:3b:2b:43:
5d:0a:00:d7:5b:cd:4c:14:d6:88:0d:ad:79:89:4f:a8:dc:45:
a7:06:fc:52:96:87:68:9d:98:28:8e:c6:e6:35:5e:9b:66:b1:
12:1e:b2:10:cf:50:08:f9:e2:0a:7b:fb:8e:91:86:97:6f:80:
80:b7:ea:3c:6a:e4:3a:80:ab:b7:1d:9f:2b:23:8a:b4:43:17:
ff:8d:9e:68:25:23:8c:71:c9:15:9c:cd:44:a9:13:fd:6d:f8:
ef:93:bf:7c:5d:e6:4d:b3:5f:ae:86:d2:4c:80:35:62:8b:cf:
19:b1:9a:40:f1:77:71:72:0b:00:f8:01:71:d2:6f:aa:06:cf:
20:fa:99:af:79:50:cc:70:1f:1b:e0:91:c1:f5:d5:47:74:66:
dd:40:09:68:90:83:b2:75:cf:fb:95:7b:56:84:6f:cf:10:85:
0e:0f:16:0b:b7:49:a3:c5:3a:d3:04:47:0b:47:3e:20:57:8f:
db:0e:0d:34:58:f9:6a:ad:8f:89:9b:ff:d7:d0:49:0d:f7:08:
bd:12:a5:b9:f6:cb:46:ee:b7:76:be:1f:64:31:b9:d0:56:bb:
ab:a6:a6:64:16:40:f4:f2:1e:e8:2b:07:43:fb:b1:c3:ea:55:
25:88:1b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:55:28 2025 by rpki-client