Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
File: 4Wjja6V37UfmkocpaRmR5OfyNdo.mft (raw, json)
Hash identifier: HIOBq+68Tse6Hw96HDb9gkVoLxRRdDICgVL41oCeP9s=
Subject key identifier: 78:1D:8B:25:EE:BE:B1:3A:F4:51:92:78:7F:9A:A3:F3:95:03:AB:2C
Authority key identifier: E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
Certificate issuer: /CN=e168e36ba577ed47e6928729691991e4e7f235da
Certificate serial: 019A52D2081124822658EDCAA28FDAB51A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
Manifest number: 0DA5
Signing time: Wed 05 Nov 2025 07:01:27 +0000
Manifest this update: Wed 05 Nov 2025 07:01:27 +0000
Manifest next update: Thu 06 Nov 2025 07:01:27 +0000
Files and hashes: 1: 4Wjja6V37UfmkocpaRmR5OfyNdo.crl (hash: xFBQP/bpY8eXIkvxGfi4FSEwGtGhATQg2pjnTZcfHjo=)
2: AUxf95vk-o1Gt_wrf6UPvy-h7OA.roa (hash: wvFv9nzKIVnXA7Zw/hu/kaD5HOZlQJgT9zV6+OcXJBw=)
3: HKDlTUsL1fmB-oiAZcWxWBPpDcU.roa (hash: PObhBDwRkZyevOSM5huA6knnfjTYj1bgluiflgFLp/c=)
4: vuTwV8s3dn69U4Rqa-5cKrrJqjA.roa (hash: rpsPpW15eqZG/XbbOl1/Yv+x/+71Dg60CplH4I4uv0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d2:08:11:24:82:26:58:ed:ca:a2:8f:da:b5:1a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e168e36ba577ed47e6928729691991e4e7f235da
Validity
Not Before: Nov 5 07:01:27 2025 GMT
Not After : Nov 6 07:01:27 2025 GMT
Subject: CN=781d8b25eebeb13af45192787f9aa3f39503ab2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:95:3a:12:c8:cc:cc:88:27:0f:1a:e7:1e:
0a:c4:09:cb:12:76:f0:42:cd:40:44:4a:7b:5a:22:
c2:e1:d1:f3:e3:d7:96:7b:61:f3:15:0a:57:78:16:
db:71:bc:b1:67:0b:b7:1a:2b:e9:72:99:e1:5f:a2:
4e:7c:e8:88:ef:03:33:ae:66:30:33:b1:0c:31:d7:
9c:de:c0:fa:fb:77:b0:bb:23:4b:eb:15:6f:79:7a:
ba:71:d7:7b:e6:98:99:f8:c8:1c:46:cf:4a:0d:8a:
eb:f6:07:d5:67:6a:72:ff:8c:97:50:7f:77:99:e5:
7e:15:3c:a3:23:ad:8c:3d:9d:72:b1:78:70:ae:62:
01:5f:3b:87:53:54:67:ac:a4:d3:82:c3:be:a6:92:
7f:79:7a:a0:b9:58:ca:0f:78:14:06:59:15:af:b7:
87:f1:98:54:26:a4:d5:bf:50:69:0f:2b:97:16:d6:
dc:26:ab:3e:c0:81:bc:8f:ab:83:3c:bc:01:3f:c6:
9e:d8:62:15:e0:37:17:35:16:aa:0a:2e:b8:26:f2:
c7:35:55:0c:f8:23:83:28:ea:b1:4f:3d:dc:d2:54:
e9:60:c6:29:83:d9:79:77:b9:9d:b4:9c:5b:71:ff:
66:2f:2b:4c:00:5a:58:7b:1f:f9:5b:ba:98:be:7e:
30:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:8B:25:EE:BE:B1:3A:F4:51:92:78:7F:9A:A3:F3:95:03:AB:2C
X509v3 Authority Key Identifier:
keyid:E1:68:E3:6B:A5:77:ED:47:E6:92:87:29:69:19:91:E4:E7:F2:35:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Wjja6V37UfmkocpaRmR5OfyNdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/9a297d-cee5-4c93-b258-cb4babe9dc8f/1/4Wjja6V37UfmkocpaRmR5OfyNdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e1:89:a1:33:6d:38:ab:01:72:25:ee:09:b9:fd:3e:98:06:
6e:41:01:d8:4b:62:9b:7f:c7:85:5b:b9:31:48:de:79:00:95:
67:1c:b1:1a:85:47:05:ad:eb:88:63:c2:a9:ca:87:b4:f2:32:
06:0b:db:26:74:b9:4d:74:95:c2:3f:d4:45:5b:23:af:0d:16:
48:19:cc:a0:44:32:06:40:8c:80:bb:e0:00:35:d8:d1:85:69:
80:d8:80:1b:dc:dc:3d:9f:cf:a7:95:72:2c:87:5a:e1:f6:4d:
09:14:39:42:c1:c4:4b:fc:3d:fd:78:59:a4:be:8e:18:1e:ab:
9c:75:4f:f1:b3:98:7b:08:a9:b7:eb:76:31:cc:6a:2e:0b:1d:
0c:84:8c:ca:8a:d3:e6:2d:03:07:0b:be:0d:3f:06:4d:ec:f9:
6e:d7:40:fa:a5:a5:24:fa:40:f4:3e:fd:7d:bd:72:46:cf:95:
92:2d:d2:6c:59:d6:fa:ed:79:9a:5b:c9:6d:d8:7d:d9:af:55:
f6:de:e6:32:7d:96:75:95:94:af:57:49:ac:84:b1:01:4f:b4:
b9:b5:e0:8d:67:a5:aa:ca:0d:a9:4d:97:22:0b:17:e8:7e:5b:
b1:9b:5e:b5:1c:e0:33:74:b5:e4:ad:2f:b6:69:4d:56:36:0c:
bd:91:15:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 10:02:32 2025 by rpki-client