Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
File: 4Uk5uDWV4u-2lFa83yOGalB59vU.mft (raw, json)
Hash identifier: PXc+wvXY9NkOhNHQVyyKUM+ZzaHz35hkfW76cTXoUMc=
Subject key identifier: 12:3D:1A:CA:40:F4:CB:9B:C2:69:80:4C:D3:C6:82:F1:31:F3:E5:F9
Authority key identifier: E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
Certificate issuer: /CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Certificate serial: 019A4F99454E4952772AB5E1BE36448565A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 16:00:36 +0000
Manifest this update: Tue 04 Nov 2025 16:00:36 +0000
Manifest next update: Wed 05 Nov 2025 16:00:36 +0000
Files and hashes: 1: 4Uk5uDWV4u-2lFa83yOGalB59vU.crl (hash: hIC+MRZhCVAPyPobzskZJ0Crpvku0eOPI6gKBUM0Wyg=)
2: 9DOz_U29J25pYyeM86YxHr4X6eI.roa (hash: m1/Q7PpupEiNgQObdS35HK/CHkZPlsg/AOIPZ9fZoyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:45:4e:49:52:77:2a:b5:e1:be:36:44:85:65:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14939b83595e2efb69456bcdf23866a5079f6f5
Validity
Not Before: Nov 4 16:00:36 2025 GMT
Not After : Nov 5 16:00:36 2025 GMT
Subject: CN=123d1aca40f4cb9bc269804cd3c682f131f3e5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:60:d9:43:ea:ff:ce:45:e9:16:a1:38:89:
9f:a0:55:e6:7f:8a:cc:95:38:9e:d0:55:b1:db:bc:
01:2b:27:f1:d6:e7:a2:98:68:f7:8e:97:57:78:b9:
3b:0a:ed:3e:a8:44:c5:a2:6b:b3:e9:53:7a:06:98:
36:ca:7d:8f:51:41:1d:af:16:00:78:66:d9:49:67:
a3:36:fc:49:81:85:12:bd:a2:22:9b:15:89:df:66:
99:99:94:e1:0c:0f:a8:2a:14:16:fe:98:e2:72:93:
5f:4c:98:eb:ec:3d:cc:69:15:e8:50:7e:25:4a:6b:
d7:7b:34:e3:2e:bf:7d:49:b8:18:db:37:58:1f:26:
b6:03:60:be:98:1a:c4:20:35:74:ab:20:c7:61:ba:
fb:ae:5d:51:be:98:71:96:97:71:68:44:73:ce:a1:
be:10:54:7d:ee:fd:bb:15:36:36:87:cd:ef:87:03:
77:54:e0:3c:d2:dd:ad:d6:ae:52:04:be:1d:d1:55:
98:21:e5:99:02:32:fb:0b:e5:2e:b6:9c:5b:de:ec:
88:76:99:5b:fb:4f:52:40:51:9d:b5:ed:1a:24:bc:
2c:25:b2:d8:c6:16:cd:13:38:c3:bf:3c:a5:dc:0c:
50:c7:a6:9f:06:e0:eb:1e:9d:2d:f1:e0:49:e9:5d:
85:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3D:1A:CA:40:F4:CB:9B:C2:69:80:4C:D3:C6:82:F1:31:F3:E5:F9
X509v3 Authority Key Identifier:
keyid:E1:49:39:B8:35:95:E2:EF:B6:94:56:BC:DF:23:86:6A:50:79:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Uk5uDWV4u-2lFa83yOGalB59vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/f90fda-034d-44e0-a812-cd630dbc1d18/1/4Uk5uDWV4u-2lFa83yOGalB59vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:61:ce:aa:d9:43:83:2d:95:d0:52:b9:d2:1c:50:82:1f:
35:12:99:6b:a7:30:93:e4:6a:ee:a5:58:67:30:05:f4:c0:3c:
da:88:aa:26:bc:75:ac:79:5d:4a:1f:a1:68:15:9c:88:2f:c9:
f8:ad:c0:cb:af:ba:10:c4:ca:f1:1e:68:e3:2d:56:1c:0b:03:
ad:20:e0:4a:13:b0:5c:90:dc:40:15:14:d7:e4:81:31:9d:b6:
8b:f1:cb:93:8b:2c:00:b1:35:8c:0f:3f:23:4e:02:48:db:57:
bd:c4:39:f2:28:f8:23:35:9f:87:fc:ce:8e:c3:b6:30:ea:06:
7d:6e:f5:51:b2:82:1e:a9:29:bd:f8:3a:a4:0a:ce:0c:a6:43:
39:51:a3:5b:20:26:6e:30:53:0b:fa:5d:17:b6:79:b3:0b:d4:
3e:66:82:07:a9:c6:ed:a3:3f:88:be:00:cb:e1:51:b5:4c:29:
96:de:24:ff:ce:cc:06:4f:d1:73:32:e0:6a:f1:74:a1:64:34:
9a:5b:e6:c1:4a:2b:f1:a3:b8:43:e6:4c:86:fe:f9:5f:cb:93:
a9:5a:10:50:d3:b2:31:12:9a:45:f6:b0:2d:d8:0a:f0:ae:70:
73:c0:a2:26:9e:d0:52:5f:71:af:fb:4d:9c:a0:d1:e1:2b:b2:
4d:66:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:55:10 2025 by rpki-client