Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
File: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft (raw, json)
Hash identifier: Cz4sXnJGo0qWuJcMF2DAuUltoqYccrv/wUH/iqcvqVQ=
Subject key identifier: 1E:C9:8F:75:EC:C6:45:15:EB:6E:B3:84:EC:0A:D8:26:A8:9B:4C:14
Authority key identifier: E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
Certificate issuer: /CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Certificate serial: 019A4D73E3F38F45D162B79AAB6CD4DB9790
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 06:00:31 +0000
Manifest this update: Tue 04 Nov 2025 06:00:31 +0000
Manifest next update: Wed 05 Nov 2025 06:00:31 +0000
Files and hashes: 1: 4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl (hash: rIDlSINM5uQaGYkqyF8EwSHaUgkfLl0j2oktAOvk/V4=)
2: SifsSXB3IxM773oq0Xz9LePnp8I.roa (hash: zgIEbQQ5tBYSjxuoWIlb12GUFr1oCylWnPsgULnZLUs=)
3: pe-h0g6N0Y23HKrAKsDD9huS1mE.roa (hash: ylxKfNsAYg9jbE4bG9j7buLcVQFIUsPKCa1+TwgGN2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:e3:f3:8f:45:d1:62:b7:9a:ab:6c:d4:db:97:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e224e450eafed4c259b6dc0a34e306f1ad284bc4
Validity
Not Before: Nov 4 06:00:31 2025 GMT
Not After : Nov 5 06:00:31 2025 GMT
Subject: CN=1ec98f75ecc64515eb6eb384ec0ad826a89b4c14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cf:7f:5d:96:ed:92:a8:0b:1c:10:4d:47:80:
a9:9a:cf:66:f4:ab:82:fe:0c:74:43:00:c6:e7:ef:
ce:fb:f0:48:84:ac:34:70:9e:77:bd:53:91:b2:0e:
d3:c8:88:c1:c8:29:bc:5e:81:69:85:3a:31:fe:a8:
b4:7d:46:67:96:6c:e0:b0:9a:ad:83:fd:18:6f:9f:
81:c1:54:38:83:ba:ab:71:eb:72:9a:37:cf:b2:a9:
14:6b:4f:e9:ef:28:9b:ea:b9:e6:23:58:39:7b:88:
04:7b:8e:e4:f5:55:67:74:ee:a8:59:39:f6:95:28:
50:73:49:1d:42:e3:90:67:a8:83:a8:a4:42:d6:79:
cf:d4:8a:b7:98:74:a7:63:80:78:da:67:8d:38:dd:
9f:2d:83:83:24:cf:67:3a:3e:2d:b2:6e:e3:54:d2:
49:53:24:c5:a3:32:e8:6b:d6:aa:19:48:c6:df:64:
95:b6:65:fd:a0:ad:6d:d0:77:6a:f8:cb:19:f9:4d:
12:3d:cc:60:ab:7c:8c:9f:ea:db:c6:8d:85:ee:9c:
44:85:98:ba:7b:f3:d8:80:11:f5:92:2a:e9:3e:cb:
5b:a0:98:f5:85:4d:46:28:b4:fb:d5:49:9b:f8:11:
06:6c:e8:26:ca:f5:d6:55:d4:4b:7c:02:24:84:5f:
47:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C9:8F:75:EC:C6:45:15:EB:6E:B3:84:EC:0A:D8:26:A8:9B:4C:14
X509v3 Authority Key Identifier:
keyid:E2:24:E4:50:EA:FE:D4:C2:59:B6:DC:0A:34:E3:06:F1:AD:28:4B:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iTkUOr-1MJZttwKNOMG8a0oS8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b9178b-c7ba-4d4e-af9e-6acd21d4baf8/1/4iTkUOr-1MJZttwKNOMG8a0oS8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:51:45:3b:ec:7b:0d:de:c1:67:32:4a:b0:f1:85:ce:ae:f8:
b6:ba:9a:32:c8:87:a4:8c:53:e1:01:e6:7c:ed:b9:af:d0:dc:
19:d2:12:c1:f4:81:c5:53:2c:c5:7a:8d:cf:48:39:c3:82:e9:
f6:05:17:72:e4:b1:73:e1:2e:61:29:0f:28:b5:59:2b:c5:f0:
5d:04:b7:76:d6:cf:9c:6f:ca:4a:0e:d6:cb:2e:c9:ab:6d:78:
0d:8c:e8:94:be:e1:8a:b5:be:4a:d5:cc:bc:22:9f:f4:8c:21:
18:57:c0:67:4b:37:54:79:f7:95:3f:9f:24:f7:4c:78:1c:b6:
3b:d0:76:b5:3a:9a:15:cb:b1:a1:ac:12:dd:17:fb:4a:7f:b3:
a0:f5:57:3d:ac:48:99:59:60:e3:8b:fd:40:6e:45:5b:90:61:
97:a1:44:8a:66:a5:01:21:75:cc:5b:0b:25:a5:82:16:ee:34:
da:18:2e:8d:10:d4:65:7c:e4:76:b1:79:ae:5b:4c:c8:7c:e3:
a0:3a:fd:86:64:12:44:e5:0b:17:06:a4:f8:30:9d:f2:50:c6:
a6:1c:dc:d2:89:0a:e3:1e:b4:78:ed:30:17:f1:d4:97:cf:aa:
36:c2:03:b0:46:fc:87:85:e4:91:72:83:ba:8a:15:5d:50:31:
85:c3:79:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:09 2025 by rpki-client