Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
File: 4tGVYU7uSi27UfWyHmnRbE4UQa8.mft (raw, json)
Hash identifier: xl3qXzHAbBJxLfOVDqtZeGv8rZbFD6xlvKiNlehVhJI=
Subject key identifier: 41:E7:8E:A6:AF:25:FE:3F:C7:8E:B0:40:CF:0D:AA:42:40:AF:DE:8C
Authority key identifier: E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
Certificate issuer: /CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Certificate serial: 019A52D21751C14441A737EAB7D46CC36FB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
Manifest number: 01F4
Signing time: Wed 05 Nov 2025 07:01:31 +0000
Manifest this update: Wed 05 Nov 2025 07:01:31 +0000
Manifest next update: Thu 06 Nov 2025 07:01:31 +0000
Files and hashes: 1: 4tGVYU7uSi27UfWyHmnRbE4UQa8.crl (hash: +TPmHug9H/cHr/6vOnuPaUCxQEbODdrkoyTv7hnZ2Xs=)
2: I6b16o_Ase2s-4OxbTzP2XU7AO8.roa (hash: 6HiWXRxkCGNhrpcrbbFpGCz17IhI/bbEhWJf+70NeCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:17:51:c1:44:41:a7:37:ea:b7:d4:6c:c3:6f:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d195614eee4a2dbb51f5b21e69d16c4e1441af
Validity
Not Before: Nov 5 07:01:31 2025 GMT
Not After : Nov 6 07:01:31 2025 GMT
Subject: CN=41e78ea6af25fe3fc78eb040cf0daa4240afde8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5c:52:1c:63:ef:1c:24:79:d2:79:7b:c6:5a:
30:9c:b3:a0:ac:7c:17:95:de:fa:6a:8b:94:1c:79:
76:a0:61:4a:c0:a8:4a:4a:8d:1f:6e:a3:75:1b:e8:
25:40:e8:cd:fb:4c:fe:92:6d:c5:03:79:67:94:22:
1d:a9:bf:2b:f3:37:8c:de:47:b3:3a:22:77:25:7d:
70:30:5b:25:8c:7f:96:9e:53:3a:96:82:2b:f4:f2:
14:6d:a2:41:6d:5f:98:f3:0d:8a:2e:b3:4c:6d:0d:
84:ce:f4:87:1a:f0:6c:df:ae:99:31:a4:6c:87:ee:
78:aa:17:34:a2:25:01:9c:9f:0b:05:c3:c4:54:fd:
ce:4f:8e:a7:eb:30:89:06:cf:96:6e:1e:0c:8c:2e:
e1:a7:50:51:5a:32:ca:f4:2a:c5:58:fa:37:d9:7b:
94:b3:e3:30:1f:ea:79:4d:5e:65:17:d1:8f:79:79:
c8:da:47:b4:c3:43:f4:6e:f2:c0:11:95:df:de:48:
88:c3:63:cf:b2:81:d5:fb:ae:ed:54:14:8d:da:07:
c7:91:be:03:a5:02:67:b1:e3:82:c0:95:3b:c7:ad:
d9:26:0f:38:17:d1:bb:49:d9:36:a9:19:99:29:6a:
59:07:27:cd:76:09:10:50:d0:3b:a9:b2:91:8c:21:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E7:8E:A6:AF:25:FE:3F:C7:8E:B0:40:CF:0D:AA:42:40:AF:DE:8C
X509v3 Authority Key Identifier:
keyid:E2:D1:95:61:4E:EE:4A:2D:BB:51:F5:B2:1E:69:D1:6C:4E:14:41:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tGVYU7uSi27UfWyHmnRbE4UQa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ceb4cb-2ea7-42d0-bb2a-5dac63784058/1/4tGVYU7uSi27UfWyHmnRbE4UQa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0b:49:51:16:3c:90:c2:42:ce:97:21:e9:9e:3a:8a:c9:ca:
de:8f:60:71:f6:27:27:cf:9d:45:46:59:c8:57:d2:15:21:e9:
11:4c:33:a8:3d:2c:24:74:54:e1:f1:a9:59:95:80:51:60:da:
f1:6e:42:10:76:48:7b:71:b3:21:f7:d9:3a:36:91:66:e0:c2:
9f:28:d9:d1:3b:62:13:e8:63:bc:45:69:c8:d1:db:a7:c6:a7:
11:9b:bb:e9:9c:09:ad:8b:07:8a:8d:8c:7e:a4:54:8c:68:58:
39:7c:31:75:28:32:a4:fe:ed:a3:e7:88:88:b2:c0:1e:5f:12:
ee:df:5b:e8:0e:42:a6:6b:c8:af:09:65:06:4b:ec:59:a1:b4:
2b:3b:17:b3:a6:16:9a:2e:b6:05:81:36:a2:94:35:7b:bb:91:
a3:7e:51:c4:da:32:84:9e:1a:35:58:af:db:9b:c2:7e:ac:be:
a0:f1:31:31:8b:d4:0d:03:b9:eb:09:07:3f:0e:22:f3:95:46:
0d:22:60:7a:5d:63:58:4f:a9:e4:2a:ef:48:3f:73:68:c0:22:
26:2c:8a:b0:ad:d4:9c:6f:58:e6:42:4e:9e:c4:ac:c1:56:5b:
2e:e7:29:e7:08:6c:9d:45:44:7e:a5:95:80:44:a3:b6:3b:01:
a9:0d:36:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:31:01 2025 by rpki-client