Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
File: 4NQ1eE2owhjg_xB83P4kykVpyUk.mft (raw, json)
Hash identifier: JBJbS435YT/rpcjpVgNwbfCQ+IHFozvnxysnTD2aJ+Y=
Subject key identifier: E8:FE:DF:48:4E:D8:63:33:88:7C:39:7B:47:04:D5:03:E3:FF:6A:83
Authority key identifier: E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
Certificate issuer: /CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Certificate serial: 019A4D739FAA26E9ABF372956CF850AA8B61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:00:14 +0000
Manifest this update: Tue 04 Nov 2025 06:00:14 +0000
Manifest next update: Wed 05 Nov 2025 06:00:14 +0000
Files and hashes: 1: 4NQ1eE2owhjg_xB83P4kykVpyUk.crl (hash: sGuBaFJJZimWolKE5w760mi9rnKBn8w0tik3uPCeOi4=)
2: PCU_z8etHMahQn2RAV03QXEYQNY.roa (hash: u3wh2VwTq9MZxicFM5jtw2aPgJCWNRgfQ4wq8HW2GwA=)
3: dzbMTYGCieBVBPgENTHt9L5KJ8M.roa (hash: ujry7yejU+h1f7YJVtPloSSU466DjjsHF906b9LbjBg=)
4: iFRT7pIErYyjSrvBoxfFD5pxtGQ.roa (hash: 5ByeZ/21OPrr4ys4yOkH+9BugOf167l7MKLoGEfw+nA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:9f:aa:26:e9:ab:f3:72:95:6c:f8:50:aa:8b:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d435784da8c218e0ff107cdcfe24ca4569c949
Validity
Not Before: Nov 4 06:00:14 2025 GMT
Not After : Nov 5 06:00:14 2025 GMT
Subject: CN=e8fedf484ed86333887c397b4704d503e3ff6a83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:92:e3:35:a9:6b:c3:b4:d3:16:43:fb:b3:02:
4d:9f:9b:33:3c:01:b0:db:5c:3e:c0:94:ee:df:78:
ea:cc:30:e0:f4:2f:98:8e:d6:8d:23:74:c8:3c:cc:
6d:aa:f2:71:5d:aa:e4:00:d8:37:64:de:c2:a1:1e:
96:f8:45:65:44:c4:52:1a:d2:98:51:02:6a:d4:3d:
2c:a8:d2:72:20:a7:99:67:12:fa:64:4f:fc:c0:8c:
cd:05:76:df:0e:56:93:be:99:5f:4f:08:f5:38:01:
a1:b6:54:ed:fe:ba:ef:5e:c4:e7:e6:f4:ec:a1:29:
81:d3:07:5f:fd:07:b9:59:7d:f1:a0:20:c6:dc:3f:
e0:d5:ed:16:27:ab:dc:c8:10:a3:dc:36:ff:2b:07:
98:3f:64:c7:27:6a:90:ec:55:5b:b9:14:7e:bf:27:
3f:88:67:28:97:de:d9:23:c2:62:4e:0f:ed:e6:67:
6c:46:ef:ad:2e:77:aa:25:b4:e3:1f:a5:c1:e1:70:
cb:b8:74:e2:ea:89:a7:34:36:50:2f:ff:c9:e8:35:
f1:a7:a4:0b:1f:f5:31:ee:b0:2e:1a:87:e8:47:85:
b0:fe:08:a9:c0:90:27:dc:0c:0d:59:70:99:e1:b6:
fa:bc:6c:5c:7f:35:76:4a:39:7a:57:d7:09:97:f1:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:DF:48:4E:D8:63:33:88:7C:39:7B:47:04:D5:03:E3:FF:6A:83
X509v3 Authority Key Identifier:
keyid:E0:D4:35:78:4D:A8:C2:18:E0:FF:10:7C:DC:FE:24:CA:45:69:C9:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NQ1eE2owhjg_xB83P4kykVpyUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/a05eba-9d85-489b-aec7-ed42d3a625a4/1/4NQ1eE2owhjg_xB83P4kykVpyUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:28:1f:28:33:db:c7:48:4d:26:fd:47:6f:ea:94:fa:90:91:
24:81:5d:6b:81:9b:54:b8:69:6f:52:a6:a7:10:5e:56:9a:f2:
35:1e:48:ab:17:1a:53:14:e0:d3:72:5e:cd:93:9a:97:e1:1f:
ee:6f:4e:86:c2:29:8e:92:d5:87:a9:4c:96:e6:3c:3f:9d:3c:
a4:a9:bd:a0:1a:01:e1:c2:76:11:25:92:25:f6:11:90:47:f8:
5b:0f:0f:68:bc:5c:ae:10:d6:b4:40:e3:ee:df:06:15:69:3a:
43:fa:32:9c:3d:b8:4d:34:8c:74:f4:f6:b1:0f:e9:d8:e1:34:
c8:ca:e7:45:b3:fd:be:29:80:86:40:1e:e2:ed:7a:e3:89:c7:
57:79:a1:c6:5d:f7:93:ef:ad:fc:ea:d6:00:dd:d0:91:e7:18:
f6:d2:05:f6:49:fb:3a:03:3c:b4:93:56:fd:10:c1:64:ab:fc:
71:d4:e7:82:14:81:19:91:9c:be:ab:c5:f8:d9:fa:93:e5:03:
34:38:b4:33:a0:42:da:76:5f:a0:98:e8:bf:d2:b9:fb:df:19:
b2:2c:05:c8:93:20:b7:74:0b:20:17:24:66:80:2d:58:ef:99:
92:1b:1d:5f:81:a6:30:cb:1a:b2:2f:14:73:6d:69:2c:9b:b8:
fc:9f:5c:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:30 2025 by rpki-client