Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File: 4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier: oI7yXYx4O3e7hL/vgPSq9mtuaOEtwsOd3knrGwQzUvs=
Subject key identifier: 52:93:0C:7A:5F:E2:B2:81:A0:60:71:88:86:8B:38:04:B1:6B:88:D5
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019A53E42BEAD6DDF6628A0653FD58BF1199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number: 1756
Signing time: Wed 05 Nov 2025 12:00:53 +0000
Manifest this update: Wed 05 Nov 2025 12:00:53 +0000
Manifest next update: Thu 06 Nov 2025 12:00:53 +0000
Files and hashes: 1: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: iYfegyXcwfpHlSRKIqYAqqpzYoumKzuT9RQM13zvb3Q=)
2: 4peSVxTbY4zslmn56rvjicgQc7I.roa (hash: +nu5P8vI7PFQXwbJ6t2Zz3coXWOy63zFOw3M4zv4uDY=)
3: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=)
4: SlPSzJLSqLldpHANrLpV_AWe7pQ.roa (hash: d6qRFjDfiO2ypdJTYqM1meZYiyL4RuK2vrauyRg7dG8=)
5: Z_3Sd3D3RdwmwjVhN9NqfA7BzpY.roa (hash: Sg8kImSh1cuIQfozfNlnqJy3ut54w54Xyh4htMBXe1s=)
6: muJ6BoKN6UJKjXIiMD_vSPffAQs.roa (hash: Trtl5skBlLwn8vYaSomOWXsELEFXr89fuz0Ec3SlFmU=)
7: mxAMRSbkDznTEbPF5N19qenDsU8.roa (hash: ur7W44S4TLVAof77kuSb6v12hJqMvOyziCVMGbKEYDc=)
8: y1KiIU2GhHjjuvfOR3lz8y0STtE.roa (hash: 6zbqLZ+vgcUQ2nNaMv7BsXuuqJSs8GQBDDlBE1WD3gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:2b:ea:d6:dd:f6:62:8a:06:53:fd:58:bf:11:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Nov 5 12:00:53 2025 GMT
Not After : Nov 6 12:00:53 2025 GMT
Subject: CN=52930c7a5fe2b281a0607188868b3804b16b88d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8d:f5:05:ce:91:13:cf:24:2f:eb:1d:2b:bc:
20:7f:1b:ee:54:8a:22:c2:70:84:5f:0d:f6:21:d8:
85:ab:26:b8:cb:06:35:7e:49:ed:80:df:30:0e:77:
05:72:b6:82:75:c2:ca:cb:55:ff:db:71:06:87:ce:
62:01:62:f5:ef:65:51:75:f1:9f:77:da:c8:ef:4a:
65:c8:b6:ef:67:48:ff:b6:5e:fe:85:89:a5:c8:9b:
ad:89:2a:d3:37:a7:32:78:82:ac:a0:0f:71:63:dc:
d3:24:7c:87:ea:fa:42:a6:4c:82:e1:44:7c:e7:b3:
9b:0a:dc:26:d4:31:23:41:14:da:ea:6c:7b:6f:c8:
14:3c:86:33:b6:b5:52:76:96:49:21:7e:1e:fb:5c:
6d:a1:00:a2:6a:b3:01:8f:a8:9a:8e:20:8a:b0:9a:
0f:d6:9c:23:d8:01:29:e9:f9:d9:cd:b4:89:72:d9:
63:1c:92:38:f5:d3:fc:79:e6:c7:ba:05:cb:d0:65:
2d:da:eb:e0:2a:8a:a5:62:3c:8f:6f:6d:02:e9:14:
0c:c4:3f:d6:48:51:47:9f:51:79:c9:79:0f:3c:8e:
11:fc:93:57:df:39:c4:24:74:05:fd:f0:66:2a:d0:
9a:85:f2:99:90:fd:23:a5:f6:ac:14:6e:0b:de:79:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:93:0C:7A:5F:E2:B2:81:A0:60:71:88:86:8B:38:04:B1:6B:88:D5
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:cd:6c:57:a6:3d:37:cb:bb:d6:f6:e3:16:63:ba:12:f9:2f:
a6:90:d0:d4:80:be:d0:87:c1:18:44:d0:eb:9c:38:97:74:05:
5d:4c:7c:c5:b7:d1:5e:f7:7f:d0:03:bb:a5:d2:46:8b:5e:bf:
f4:e6:4c:3e:bd:a3:e6:e8:31:81:cc:79:4f:6f:8b:e0:01:78:
ec:dd:d7:f7:dc:b6:32:03:f4:b6:0a:a6:b9:d4:d4:2a:91:20:
cf:1a:e0:3d:ed:0f:fb:05:b6:ce:7f:d5:b1:4d:37:3b:21:56:
3c:9f:05:64:9d:01:d5:6a:aa:0b:fc:b6:85:a2:4c:ee:1d:40:
1c:83:7a:d4:e2:5c:f6:d8:7f:21:46:5b:30:b2:5b:5c:da:5c:
94:5f:74:1f:a4:c9:21:7d:aa:cf:76:85:d9:87:88:b2:79:09:
59:b9:28:c1:a0:2c:79:b5:7e:2a:7a:b6:99:17:88:cb:80:88:
6b:18:56:80:a6:9a:39:73:f6:30:e3:c3:99:d3:41:1b:22:ed:
d8:1c:e3:98:2b:9a:48:73:23:f0:0d:16:8d:95:bf:bf:bb:d9:
b6:21:2d:a1:53:54:e0:82:23:2d:78:4f:3d:f9:ab:68:de:17:
02:7d:83:0d:6e:f5:65:dd:5b:df:f0:bd:d9:0c:b2:44:57:37:
77:62:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:12:54 2025 by rpki-client