Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
File: 4COOIod_cwOWQAfOPjQG9frZSWI.mft (raw, json)
Hash identifier: cVPD2i9lPQVGpKYvrbQ0TU358OY8VyHnZBUBpSxQUVk=
Subject key identifier: 80:E3:07:BF:AE:F1:17:7C:77:A7:A5:B3:38:82:52:0E:F4:6D:9F:65
Authority key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Certificate issuer: /CN=e0238e22877f7303964007ce3e3406f5fad94962
Certificate serial: 019A4EF53E7AFAD392C78F7BB6AA70F45CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 13:01:26 +0000
Manifest this update: Tue 04 Nov 2025 13:01:26 +0000
Manifest next update: Wed 05 Nov 2025 13:01:26 +0000
Files and hashes: 1: 4COOIod_cwOWQAfOPjQG9frZSWI.crl (hash: apBph5hn/PyvEoNoqYz44NiOrbFOEAAeo7K0FbUkERw=)
2: VBkUSdd8HhC9ylebW4iiyCK4E-Q.roa (hash: /Z8ymu6jIj7elvCMahyZD4nXriuKXl4fYbvc0S8rJdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:3e:7a:fa:d3:92:c7:8f:7b:b6:aa:70:f4:5c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0238e22877f7303964007ce3e3406f5fad94962
Validity
Not Before: Nov 4 13:01:26 2025 GMT
Not After : Nov 5 13:01:26 2025 GMT
Subject: CN=80e307bfaef1177c77a7a5b33882520ef46d9f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:54:91:c0:45:0d:61:6b:cf:18:67:6e:7a:2c:
fe:ba:3a:b3:2b:11:22:75:8e:ed:df:f7:ac:3f:fc:
46:c1:37:d9:97:ea:d8:60:b3:a1:84:78:08:a9:8c:
26:25:25:91:6f:4f:27:9a:5f:e8:c7:37:f9:99:ae:
7d:f3:32:56:a2:72:ca:11:19:aa:1a:4d:af:dc:65:
b5:f1:0f:e3:a5:93:f4:24:f0:97:c1:c9:03:78:c7:
82:f9:22:b9:77:44:f2:be:b4:96:50:61:ed:cb:66:
a2:b9:e5:9e:5d:43:65:01:f9:19:82:2e:54:63:3a:
c0:c3:31:92:89:84:a0:83:a7:fd:77:c5:15:bd:03:
84:fe:79:cb:36:3c:d1:22:83:7b:f5:e3:89:e9:78:
bf:1b:b1:68:3b:22:a8:b5:bf:7b:53:01:51:29:f8:
a6:89:59:f8:bc:f3:af:99:30:f0:2b:8b:0f:17:61:
5d:63:85:32:8c:f2:d6:e3:fa:bf:f8:67:94:78:de:
ae:56:2e:23:97:49:77:9c:6e:9a:b6:8d:fb:2a:a2:
4b:3e:eb:b8:10:33:ee:1d:0d:c8:a0:de:b5:7a:6b:
23:41:9f:67:22:a3:33:b0:d3:44:bb:2f:66:e1:19:
c9:bc:fe:03:8d:f8:a9:7c:1b:86:1b:5f:de:c0:c3:
f2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E3:07:BF:AE:F1:17:7C:77:A7:A5:B3:38:82:52:0E:F4:6D:9F:65
X509v3 Authority Key Identifier:
keyid:E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6b:93:78:6f:9e:75:67:d2:37:bc:a7:01:86:cd:31:5d:1c:
13:49:7e:ef:39:30:39:61:a0:da:fa:4d:6b:ed:0b:88:4a:21:
ee:19:a2:00:78:86:a2:7c:ff:db:21:18:60:1a:5e:49:4b:f3:
0d:53:22:81:22:3e:5d:99:40:b6:7f:14:c5:2b:75:2c:67:e5:
f1:2e:24:a8:66:4b:fb:33:53:e0:71:73:85:48:27:9d:47:9d:
92:30:2d:ee:0e:e1:78:5c:bf:a3:0f:6e:7b:20:5f:d2:0a:d1:
52:de:fd:eb:7b:b6:f8:a8:11:b0:81:88:0e:83:ac:54:22:87:
87:09:e0:c5:47:5d:3a:3d:3f:46:62:9f:f5:84:c6:79:31:22:
91:5f:7a:17:41:2c:a3:77:d5:b5:8e:28:74:2e:d0:8a:28:c9:
a7:12:6c:03:c1:c8:6c:f6:1f:03:87:8b:4c:77:c0:2d:e6:bc:
4b:65:d5:8e:a2:70:b7:a3:a9:2d:1e:e8:44:45:7d:96:87:5e:
38:cf:12:a5:23:fe:fb:fd:25:4a:37:64:cf:fe:93:a7:7f:6f:
ab:b3:01:8a:22:23:43:37:08:1d:3e:d5:b2:0b:ee:7c:e8:21:
32:e7:36:09:67:af:d1:54:8d:f7:ec:b1:2d:38:c3:91:5a:89:
d6:61:62:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:59:06 2025 by rpki-client