Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: fbxT/pG6Qf4q5NejawW47yixYnSo2ylb8gvuwcyO/AM=
Subject key identifier: 6B:ED:50:D5:16:DA:5B:AC:FE:D0:50:57:2D:5E:52:15:EA:A2:A5:68
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019A5564B2AD2E474DDA6DA8AB0BB93A0A07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0DC8
Signing time: Wed 05 Nov 2025 19:00:53 +0000
Manifest this update: Wed 05 Nov 2025 19:00:53 +0000
Manifest next update: Thu 06 Nov 2025 19:00:53 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: kGUgE+frEUjm7pXSHBX9edzajES6JIelZv2faskOofY=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:64:b2:ad:2e:47:4d:da:6d:a8:ab:0b:b9:3a:0a:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Nov 5 19:00:53 2025 GMT
Not After : Nov 6 19:00:53 2025 GMT
Subject: CN=6bed50d516da5bacfed050572d5e5215eaa2a568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:13:fd:65:08:62:1c:b5:3a:90:a7:36:2b:16:
3d:f7:8c:a7:0e:53:49:93:04:83:d8:cb:d0:bf:1f:
b5:19:91:fe:7c:71:90:d1:79:a9:1e:2c:22:bf:66:
b8:1e:b1:fa:6a:9e:d0:19:9d:3c:f5:f2:68:ba:c9:
02:7f:16:ff:3b:c1:53:33:ea:aa:84:e2:dd:bf:90:
ad:c5:91:a3:f4:e5:4f:57:43:f8:6f:6e:c7:8a:a3:
a5:55:ca:7f:36:f9:38:d0:85:3e:44:ec:c5:56:4c:
9c:12:c6:6b:d6:65:56:03:98:20:2c:92:5c:5c:37:
3b:cc:4e:36:c0:84:59:84:dc:a8:98:8a:4d:b3:53:
e0:ee:d9:f9:14:91:0a:42:ef:bf:fe:ca:15:93:d8:
9e:ca:9e:d7:b6:a0:d7:56:12:28:80:98:a6:23:cf:
cf:6c:6e:86:bc:79:51:88:4b:08:e7:f0:6e:0b:69:
97:d1:11:37:2b:87:f9:c7:08:27:39:55:5a:50:4d:
d3:24:93:88:3f:2b:82:62:77:9b:06:5a:2e:33:3d:
40:4d:01:82:bb:40:11:f3:70:d1:22:0c:74:a4:9b:
13:24:44:e5:27:6d:f4:f1:ec:0b:fb:92:ff:43:4f:
61:32:9e:cb:6c:f2:31:84:8c:4c:11:d1:67:10:20:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:ED:50:D5:16:DA:5B:AC:FE:D0:50:57:2D:5E:52:15:EA:A2:A5:68
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:76:a2:67:06:34:c5:b9:68:05:f2:92:82:14:83:80:67:3a:
f7:16:00:76:92:0e:0a:1c:74:db:59:d3:62:e3:ee:be:7d:5d:
e1:22:7d:09:21:2e:26:48:a5:d4:3d:32:cd:25:f1:d6:e2:8f:
90:4e:33:46:0b:2e:5c:8f:3d:85:a7:38:47:02:19:9a:ce:96:
6c:49:32:db:b8:f7:2e:2d:1c:44:1c:8a:48:69:63:f9:62:37:
8d:6b:3e:68:dd:22:34:a9:b4:c8:b7:c9:0b:3b:04:17:5f:2f:
b6:16:91:07:d8:48:e7:a4:90:d0:f0:25:37:30:2e:ba:27:af:
a8:f2:f6:42:ba:78:c8:af:d5:3a:2d:fc:4e:51:87:59:db:83:
f4:3b:6f:1f:8f:7a:47:63:20:a1:b5:10:f1:ee:2d:c5:ae:af:
af:60:3b:3d:64:35:91:65:19:e8:ea:1e:c1:12:c1:ef:1c:fb:
2d:9f:5a:89:c5:2a:a1:e1:80:73:ba:42:bc:b8:67:55:7f:e7:
0b:da:79:8c:c2:ea:3d:ed:c0:7d:32:cc:fb:46:03:b7:74:b0:
42:5e:75:9b:03:e8:01:3a:75:b4:fe:55:3c:58:bf:1c:80:25:
f0:31:7b:e6:60:a9:3f:05:bf:9d:2c:14:ba:8d:8b:c4:42:f6:
5b:26:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:06:19 2025 by rpki-client