Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: dIK2gH+wfek9TcYNq+KdF4N1b5NgplffdEkwvfex3Y8=
Subject key identifier: 04:45:77:20:B2:15:65:AF:6B:36:33:31:4A:AD:00:2E:6B:50:AF:D9
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 019A4F6227E29CA812A5565548024AE8CC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0E1B
Signing time: Tue 04 Nov 2025 15:00:24 +0000
Manifest this update: Tue 04 Nov 2025 15:00:24 +0000
Manifest next update: Wed 05 Nov 2025 15:00:24 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: dCR2UV00KfNmZmEkc71kaElWgq0nHiptkwWr2MwG/Cs=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:27:e2:9c:a8:12:a5:56:55:48:02:4a:e8:cc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Nov 4 15:00:24 2025 GMT
Not After : Nov 5 15:00:24 2025 GMT
Subject: CN=04457720b21565af6b3633314aad002e6b50afd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:19:6d:a8:63:76:b4:f7:0a:ae:40:e9:4d:5f:
1a:48:5d:c6:70:b8:e3:3e:1d:f4:20:ed:f0:de:a3:
ba:8c:db:b6:40:57:ff:64:b8:9a:d2:47:01:3c:69:
8b:ed:78:da:5d:a6:1d:2f:f6:98:8b:c1:0c:e2:79:
9a:e2:1c:b0:fd:0f:f1:81:14:b9:c1:06:2b:29:e3:
ed:f4:5c:a0:ee:be:b5:ac:fd:48:78:15:5a:08:7f:
72:6b:12:00:85:ac:03:6e:85:b4:d9:4d:01:60:b7:
27:56:07:b1:fb:5e:34:05:7b:02:dc:b0:96:15:de:
10:f5:1f:89:39:47:b3:65:36:bd:12:7c:a3:b4:aa:
62:2b:69:ce:52:1b:e1:13:7b:83:f9:dc:8a:37:a0:
22:9c:45:22:c0:d6:1e:b8:f1:22:fe:b1:06:52:c4:
39:95:54:79:c2:e8:f7:e5:c3:b1:16:78:01:b1:14:
db:ed:62:cd:e0:c3:6a:8a:5b:92:41:31:9c:7c:b9:
bc:c2:36:e0:3a:11:c1:cb:5a:2a:8f:e8:72:ae:41:
55:bf:9b:70:4d:06:34:74:c4:16:15:fb:cb:89:4b:
43:00:2a:4f:1a:a1:f3:05:f3:9c:bb:29:07:9d:56:
bd:6e:f9:6a:21:9d:f5:0b:c6:9d:ce:14:b1:bb:e7:
17:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:45:77:20:B2:15:65:AF:6B:36:33:31:4A:AD:00:2E:6B:50:AF:D9
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a3:b2:87:4e:5f:29:12:f6:c7:b0:32:c3:1a:ff:9a:0a:e7:
b6:5e:9b:0e:43:70:91:71:a4:11:3d:0a:73:85:93:10:87:c8:
04:24:cd:c1:f7:28:78:80:9a:b2:2e:a5:7c:de:50:d6:36:1a:
08:cc:a4:60:c9:be:e0:e3:96:33:00:df:f6:d1:dc:7b:81:e6:
53:38:c9:70:97:9d:74:6a:84:83:f4:e5:0f:3f:6b:ca:bf:8a:
87:b2:4e:37:34:5c:df:25:c8:b6:3f:1f:96:29:87:e6:9e:d7:
0a:6b:bc:42:c3:91:a4:a1:ad:80:e6:e5:e7:0e:63:b6:6d:e0:
24:f5:0c:ed:fe:71:86:30:32:20:ac:e7:cf:af:79:3e:ef:82:
2c:cf:83:17:f7:01:76:dd:9e:a1:d8:e0:0a:29:98:5b:6c:d5:
f2:25:d2:6a:1e:74:54:bc:a2:d2:68:df:65:d1:d5:e4:5e:ba:
e0:2a:2c:e1:59:04:d7:db:0f:0f:e6:98:35:57:e8:b4:ac:32:
d8:77:61:e4:3f:78:54:fe:70:b9:1e:fa:5b:fa:4c:4a:e2:85:
dc:b8:84:65:d5:a6:00:02:fa:9a:cd:5c:06:ef:6c:38:d3:5a:
84:5c:a0:16:0f:36:8e:79:a8:ce:21:6f:83:c0:7d:78:0f:e0:
85:f8:d6:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:44 2025 by rpki-client