Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: QPlqUo5V3BtjvnGrogG0r+oJ6vzIE76w9Cvo9+rMR6w=
Subject key identifier: 34:83:D0:84:B6:4B:22:31:06:40:B2:5C:CC:07:AB:B0:14:63:DA:25
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 019A51874735557CC1B4A4959C2A6C08623A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0A84
Signing time: Wed 05 Nov 2025 01:00:11 +0000
Manifest this update: Wed 05 Nov 2025 01:00:11 +0000
Manifest next update: Thu 06 Nov 2025 01:00:11 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: 9mfSaJ4Wy8ti0H8fGHFvVzdeYY/dMkPeYvDtpz6uOTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:47:35:55:7c:c1:b4:a4:95:9c:2a:6c:08:62:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Nov 5 01:00:11 2025 GMT
Not After : Nov 6 01:00:11 2025 GMT
Subject: CN=3483d084b64b22310640b25ccc07abb01463da25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:ea:49:1a:d5:f9:70:12:96:a5:b4:5f:3a:
43:6e:1c:26:2c:25:cf:a2:d7:c5:fd:3d:52:bc:96:
49:1a:47:46:ab:6f:3f:6a:07:3f:1a:33:d1:b5:a2:
ec:fa:84:9d:b2:d7:3c:cc:41:de:01:a8:a0:f1:a2:
2f:85:fc:33:ea:4d:30:25:ff:02:d5:6d:46:64:6b:
0f:bb:0a:0e:9a:3a:be:2d:df:3b:fe:4c:ce:6a:4e:
47:bd:0f:37:7b:97:2a:13:4f:a3:e3:3f:30:1f:5b:
26:77:39:e4:39:c8:e7:34:1f:f4:6c:a4:3c:fe:90:
8b:5c:4c:6c:56:bc:66:74:b0:12:10:94:6c:9a:6c:
b6:78:c4:a5:d5:b8:59:a3:c9:39:d3:8e:89:f6:66:
93:2e:7a:fc:6a:58:59:3e:64:cb:12:e0:ea:0c:c6:
3e:7b:d4:44:c3:12:de:c1:fd:c3:a3:bd:e6:2e:8b:
f5:f3:05:2b:98:38:21:d0:39:3d:ce:10:ca:13:81:
04:9c:4d:a4:df:86:ad:e4:27:bf:d6:c2:f2:52:e0:
19:86:a6:d8:9d:11:a1:88:88:65:9b:28:95:95:0e:
08:12:86:68:61:7d:95:57:73:b2:ea:2f:df:dd:6d:
ed:65:d6:ca:87:f3:80:56:88:33:80:ad:2a:04:04:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:D0:84:B6:4B:22:31:06:40:B2:5C:CC:07:AB:B0:14:63:DA:25
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:62:9c:07:09:62:cd:3a:9d:55:6a:96:8c:fd:15:71:67:50:
f8:82:d6:89:75:78:e5:4d:93:92:89:ca:dd:c6:78:0a:4e:ba:
64:6f:f3:ed:2f:d0:7b:b6:15:fb:4b:7b:a0:09:c9:ad:a5:43:
f6:2f:1a:8d:da:e4:4c:25:bd:7e:5a:de:e3:17:98:30:c7:26:
68:1d:64:53:cb:ae:15:b4:6d:7d:bd:20:84:c2:9e:c5:89:6a:
63:57:ab:8e:c8:49:13:de:30:50:80:0f:f9:41:dd:15:e2:22:
a1:2e:b1:8d:39:74:c3:f9:82:90:ca:bb:fa:13:b0:bf:b7:4d:
1d:b5:24:44:0d:67:bf:18:29:3c:9d:91:f2:c2:52:36:40:ff:
79:a8:7b:08:4a:1b:8a:20:c2:b3:d3:e3:1e:2c:da:b8:4d:73:
24:34:26:ae:26:66:f7:72:41:58:9e:cc:5a:b7:ad:56:a5:bc:
e3:ef:35:8a:c6:57:f9:91:ba:c3:a2:73:27:cf:b3:22:70:6a:
ae:89:ee:c4:73:c8:a0:99:f8:ef:06:15:13:d8:f4:80:dc:55:
88:61:25:76:42:ef:7d:90:50:45:f7:9c:aa:90:10:f3:55:0a:
40:8f:8b:b3:e7:d4:1b:e1:0e:cb:73:da:30:94:ba:49:d5:c3:
56:33:fe:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:58:55 2025 by rpki-client