Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
File: 4saBbgo6L2FsOqd6NrTK96kiQDQ.mft (raw, json)
Hash identifier: EYv5hcB0JEX5EeTq/WzC3vSqcvDlRDCnyNruBhuVLZA=
Subject key identifier: 49:C9:3B:B3:90:B9:5C:97:EE:2F:9A:EF:71:FA:27:51:35:90:45:82
Authority key identifier: E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
Certificate issuer: /CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Certificate serial: 019A4D74692278DAC0CF05ABBD9C5FB9A3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 06:01:05 +0000
Manifest this update: Tue 04 Nov 2025 06:01:05 +0000
Manifest next update: Wed 05 Nov 2025 06:01:05 +0000
Files and hashes: 1: 4saBbgo6L2FsOqd6NrTK96kiQDQ.crl (hash: pbisTEZi7+IaEjWmASMYdiyJJLfaj8mB1T1WFZNHaeE=)
2: ulLbtOc6Qp1yKXQQUOt_f70BmFE.roa (hash: YXCw2FZd5PginHPRvRNBgQK3YOd2UnylrB+hjikSz1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:69:22:78:da:c0:cf:05:ab:bd:9c:5f:b9:a3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c6816e0a3a2f616c3aa77a36b4caf7a9224034
Validity
Not Before: Nov 4 06:01:05 2025 GMT
Not After : Nov 5 06:01:05 2025 GMT
Subject: CN=49c93bb390b95c97ee2f9aef71fa275135904582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e5:7c:14:d7:58:1e:bf:08:74:b6:84:e3:89:
3f:df:16:a9:34:da:7e:42:0f:8f:94:da:c9:b7:4d:
7d:04:56:4b:4b:cb:90:24:02:34:fe:f3:b1:2a:9e:
13:83:01:f2:b6:19:39:15:a8:dc:20:8c:79:94:c8:
4c:6f:86:26:a9:d2:48:1e:9f:55:b7:25:ab:f8:a3:
1d:d7:02:ba:b9:8a:88:be:24:f0:a6:f5:04:3b:2f:
2e:e0:68:51:15:dc:70:50:6b:fa:e9:bd:95:ff:df:
20:75:23:90:9f:d7:8a:18:9a:9b:af:ef:38:fe:b0:
e6:9f:13:34:fd:c5:f5:66:d5:37:38:81:7a:72:c8:
49:02:7e:5c:bf:7a:25:10:90:fa:d8:88:b4:c7:74:
55:b4:eb:91:0f:31:75:2b:13:dd:92:8f:f1:e5:e6:
c8:b0:8f:ab:f4:dc:68:74:68:af:6c:c2:9f:54:28:
fc:c3:b9:55:10:46:e2:97:b5:62:28:f1:ba:12:62:
ab:70:1b:81:10:65:35:c9:4b:61:b4:65:e0:fb:b3:
c9:17:8f:cf:c8:32:53:88:30:ac:16:52:23:54:37:
e9:56:79:1c:bc:3a:c2:2d:25:1e:3b:e5:e6:15:d1:
fd:33:e7:14:bb:ff:43:eb:d4:3b:a5:be:97:89:2d:
f5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C9:3B:B3:90:B9:5C:97:EE:2F:9A:EF:71:FA:27:51:35:90:45:82
X509v3 Authority Key Identifier:
keyid:E2:C6:81:6E:0A:3A:2F:61:6C:3A:A7:7A:36:B4:CA:F7:A9:22:40:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4saBbgo6L2FsOqd6NrTK96kiQDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/3ba7cd-e815-45ce-92e1-202c51720ab7/1/4saBbgo6L2FsOqd6NrTK96kiQDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:fa:96:cd:58:d3:4a:11:ca:6f:4e:2d:82:02:a4:4f:f7:03:
71:02:bf:c7:08:4e:0c:f4:8a:39:db:85:fa:44:c7:d0:b4:93:
7b:87:ad:28:06:f1:11:75:96:4e:12:c2:55:16:a2:4c:36:1b:
45:0f:33:36:0c:53:48:b9:0b:cb:3b:c8:93:4a:e3:4c:6a:23:
05:34:77:65:dc:2c:47:c5:0b:dc:f6:24:24:38:37:8b:34:2e:
51:38:12:ec:9c:ab:49:2c:45:48:91:5f:ee:d2:0f:8e:aa:2a:
dc:7c:00:bb:d3:39:1f:b1:13:a6:6c:c6:2f:7e:65:18:ad:cd:
10:b6:92:ae:53:2a:64:38:33:63:2e:17:ad:7d:f1:9d:88:f3:
25:9c:ac:ac:84:d5:fe:92:2d:1a:1b:b9:6b:dc:ce:18:42:ff:
83:f4:64:05:21:fc:f0:6b:40:ea:a0:3a:4d:64:51:d5:07:f9:
dc:98:87:e1:58:c9:2e:2d:21:da:27:a4:1d:d9:41:c5:d0:3d:
87:10:15:20:14:c4:0e:49:fc:8c:4e:c1:12:a7:39:22:d6:83:
93:e7:98:c6:44:1b:51:9c:72:53:51:b6:09:f8:8c:03:0e:91:
b1:f5:07:00:9f:f3:df:58:c0:b1:0b:db:c4:ff:59:bf:a4:c6:
02:55:84:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:40:54 2025 by rpki-client