Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: pKzZ4Pkl0uK5rZ25UqMPdxifP864tfHCoRYuYhiS3Yo=
Subject key identifier: A4:00:7E:47:64:D4:D2:42:D2:24:F0:0E:A4:6C:B8:BE:B3:E0:45:BD
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019A54BF70F5DDC37E17A645FABA2ECB5ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 16:00:23 +0000
Manifest this update: Wed 05 Nov 2025 16:00:23 +0000
Manifest next update: Thu 06 Nov 2025 16:00:23 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: IipS6MwHMqWBsKeCMuksSOSNPixzDYQT4GcoL4QS4yc=)
2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:70:f5:dd:c3:7e:17:a6:45:fa:ba:2e:cb:5e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Nov 5 16:00:23 2025 GMT
Not After : Nov 6 16:00:23 2025 GMT
Subject: CN=a4007e4764d4d242d224f00ea46cb8beb3e045bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:66:1e:84:6b:e9:1e:b7:38:20:cc:83:82:68:
43:5e:6e:00:5b:f9:da:0a:2a:40:b0:34:aa:6d:4c:
f1:1f:f3:e6:f8:8c:3a:d5:28:68:d1:67:92:e4:fb:
dc:2c:ed:18:0c:c8:fd:60:51:57:f3:20:be:84:b1:
e8:03:d5:11:f8:05:f0:4f:e3:0d:6a:3d:24:b0:e2:
c0:70:2f:da:c6:0b:f3:2d:5b:d8:91:29:24:8a:df:
01:0a:ab:91:96:75:d8:a0:ea:56:10:f9:20:9b:f2:
79:c7:58:4b:65:9d:87:ba:43:33:eb:f3:ad:a3:20:
40:0d:8e:20:b7:ee:17:1f:ab:2f:d7:74:0d:83:7d:
59:f9:f3:40:c0:98:b2:ba:25:e2:b5:1a:fc:3e:3a:
da:72:71:8f:62:65:f9:5e:ab:f9:98:d2:f3:65:58:
ac:1a:75:6c:a7:4b:56:c1:2b:bf:28:d3:19:92:53:
65:1e:d7:85:26:39:5c:6d:bf:0a:55:bc:ae:e7:40:
dc:90:24:af:d2:d9:65:10:f3:a3:e0:17:62:42:68:
7d:19:1f:56:8a:a2:3d:bd:0b:87:22:a2:28:0a:19:
b8:ec:fe:ba:fd:37:ea:87:fb:94:28:3c:ca:1c:60:
cf:26:62:77:cb:ac:0f:a1:3c:e5:e9:b2:4f:06:08:
ed:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:00:7E:47:64:D4:D2:42:D2:24:F0:0E:A4:6C:B8:BE:B3:E0:45:BD
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:68:d8:5c:c2:3a:23:b7:48:99:99:7b:f6:cc:de:22:17:e2:
31:b6:95:6c:45:62:f5:fa:91:68:5e:b9:ea:ff:3c:94:c9:b9:
f6:8a:aa:d3:4b:a2:72:4c:14:4d:e2:2c:68:19:df:16:4e:5f:
d4:67:90:28:3d:08:89:3c:74:ee:60:40:71:9a:a7:67:b5:29:
c3:7f:d3:eb:71:35:36:3a:15:d3:dc:58:d1:ce:f9:6b:4c:5c:
ec:31:59:fa:ce:83:ee:0f:ef:65:57:92:31:af:d0:3c:d9:83:
c0:79:bb:a3:76:cd:16:17:d4:60:2c:34:f8:c0:ac:f0:ab:37:
17:19:b3:d0:9d:7d:01:ca:be:a8:ab:16:47:92:50:3e:48:93:
dd:29:9c:f5:d9:21:75:e9:e5:ab:99:de:be:90:e5:19:99:27:
6d:fb:e0:ce:4b:6a:eb:ae:1b:2a:79:2d:7e:1a:9b:0a:04:9e:
59:9a:8a:c2:6e:0f:f5:d8:ab:a1:a2:4c:43:b0:84:c5:bb:c2:
9f:f4:73:7b:d4:c6:34:b6:d9:9a:a1:29:34:db:01:7d:f8:f3:
c2:e1:e7:22:02:21:c1:ee:73:a6:b6:36:ed:e0:48:b9:da:03:
fe:21:81:af:cf:d5:a5:ab:1b:e3:02:c7:36:9a:c4:41:2f:7a:
6c:7e:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:44:59 2025 by rpki-client