Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: c8OKhGUXbm6/WqZpPUsO4jInqiIWfnWE6pcUAQVJ0qE=
Subject key identifier: EC:88:E7:23:97:4C:E2:99:23:A3:D7:5D:9B:25:2F:FC:D4:9A:BA:9E
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019A533ED987DA6B3CD6A71219AA5F40A0CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 07D5
Signing time: Wed 05 Nov 2025 09:00:18 +0000
Manifest this update: Wed 05 Nov 2025 09:00:18 +0000
Manifest next update: Thu 06 Nov 2025 09:00:18 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: cn8WVHox+cEcBeyYPauGJgRGGdGk8SbNF/vHQUoL4H0=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:d9:87:da:6b:3c:d6:a7:12:19:aa:5f:40:a0:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Nov 5 09:00:18 2025 GMT
Not After : Nov 6 09:00:18 2025 GMT
Subject: CN=ec88e723974ce29923a3d75d9b252ffcd49aba9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:a3:73:6b:b2:ec:a1:f8:0e:90:4a:11:db:
e1:8a:64:36:80:54:b7:03:8e:d1:b5:fe:e1:16:58:
8a:6c:0d:c5:e9:ee:ff:13:18:21:0b:65:2c:b2:84:
b8:63:bf:85:df:00:5c:da:0a:d2:3f:1e:f3:b6:70:
82:a2:dc:47:14:22:8b:1c:16:69:21:ee:b4:b7:3f:
97:06:d3:9d:c2:a2:f6:c7:f4:58:7b:cf:f5:6e:54:
c7:46:a8:37:2a:a3:a7:69:f7:cd:79:33:e7:b2:47:
da:5a:39:ba:fc:6d:8b:1e:45:04:a8:d1:84:a8:52:
c0:42:65:2d:14:e9:de:d3:2b:28:b1:91:0b:88:50:
da:cc:ec:3b:a5:eb:b0:7c:e4:9d:a6:04:e1:7d:3f:
05:ed:07:6a:a6:c2:aa:0d:be:5d:1e:7f:31:49:6c:
f4:c5:00:c5:48:ba:b8:2e:34:c3:34:e3:b7:1f:28:
66:fe:a2:b6:94:a6:68:ab:99:6c:a0:38:02:99:24:
3c:fc:2a:d3:a6:19:9a:7a:54:00:73:78:d5:fd:ea:
de:29:99:01:07:9f:40:94:56:2f:98:df:8f:58:7a:
dd:aa:6a:4c:f4:d5:b2:40:5a:52:2f:e2:c2:60:f8:
0b:2c:77:9c:51:b8:80:4d:a1:63:63:79:7e:aa:60:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:88:E7:23:97:4C:E2:99:23:A3:D7:5D:9B:25:2F:FC:D4:9A:BA:9E
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:b0:c8:98:61:c5:f6:d3:20:a3:d2:fc:2a:c4:d1:36:55:0b:
5b:08:0e:ce:b1:f8:9b:b4:de:c8:6b:04:b5:8c:5b:0d:64:3f:
3c:aa:65:80:6f:86:6c:5d:5c:b3:34:cc:8e:4c:ef:48:3d:ab:
78:d8:17:c6:aa:4b:f9:4a:8d:ca:87:33:e0:61:9f:23:7e:e3:
74:2a:82:20:9e:9d:4e:0f:ed:20:ec:09:84:ba:fd:66:34:f5:
ac:f8:07:16:f1:30:1d:27:c8:b9:f0:a3:bc:a5:b2:85:35:d5:
d1:aa:52:52:19:5d:0b:59:9d:11:38:f8:63:d8:98:a3:f9:81:
0c:b7:43:34:4a:c4:b1:a9:ef:f5:c7:11:d3:83:ad:4c:c2:d0:
cb:e0:6d:c7:d2:73:21:4f:4c:d0:90:d5:1b:13:1c:3d:4c:e3:
a9:3b:f7:62:f5:1d:b5:8c:d5:c6:f1:95:26:c8:60:fb:7b:96:
9f:91:23:86:4c:79:63:13:3c:4b:f4:d6:d2:da:4a:a5:00:b1:
3d:bb:c4:86:31:f4:92:93:80:cb:aa:24:ed:88:0a:0c:a9:dd:
9d:cf:a1:e8:48:a0:82:6e:5e:93:50:ff:bb:60:26:2a:57:13:
0f:a3:ed:11:74:82:83:a3:3d:38:b0:81:98:2e:ef:41:13:d6:
cc:4b:af:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:18:22 2025 by rpki-client