Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: zYaOopY9UJPdJHLC7DEBDVhDEj4BEYmwH2r7jPCU4t0=
Subject key identifier: 77:CD:E9:CC:9A:69:88:3A:1F:22:4A:92:75:07:A2:BF:74:2B:04:24
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 019A4D73FF30453E0F973AAE66B86FBB471F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 12F3
Signing time: Tue 04 Nov 2025 06:00:38 +0000
Manifest this update: Tue 04 Nov 2025 06:00:38 +0000
Manifest next update: Wed 05 Nov 2025 06:00:38 +0000
Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: zD0ALaeuprQjMXxUyeNKR5UeuOmgUFFYSLtniS5T6GQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:ff:30:45:3e:0f:97:3a:ae:66:b8:6f:bb:47:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Nov 4 06:00:38 2025 GMT
Not After : Nov 5 06:00:38 2025 GMT
Subject: CN=77cde9cc9a69883a1f224a927507a2bf742b0424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:72:f9:e3:80:c0:b0:21:56:b2:40:6d:92:
ea:b6:02:4d:64:7a:da:85:de:c0:3f:c6:ab:11:1d:
e3:2a:f3:9c:cb:af:fe:57:f4:f7:6d:b8:60:79:04:
66:8a:4c:86:1a:bd:3d:f8:ee:4d:cb:f5:a3:6a:45:
c4:34:3c:1e:33:47:6b:44:6a:ec:8f:31:b4:fe:2e:
39:8f:b1:69:11:bd:a0:72:09:55:a7:da:19:ed:4c:
84:b3:12:d5:c9:fa:be:98:d9:d6:ca:41:6d:5c:50:
14:fd:05:6e:f8:75:ca:08:09:e1:98:db:91:d6:ec:
49:eb:2a:38:f0:ed:4d:68:b2:53:ee:0f:fd:5f:9b:
a0:a7:4b:8f:f3:bd:bc:ee:ca:08:58:6d:d9:be:5d:
23:9e:74:c4:7b:4c:44:ee:ae:9e:bf:ee:2b:61:4f:
f8:65:1b:26:68:f5:34:88:e8:ba:20:0f:8b:c2:8f:
1b:cc:34:24:4f:7e:ee:2e:d2:d9:63:6a:3f:ee:1c:
4d:02:f1:8c:85:98:a8:8e:93:fe:8c:31:48:7e:5a:
99:14:41:e7:d3:42:1a:6f:8b:21:a0:1b:a5:2a:31:
08:66:39:fa:19:b8:fa:e7:88:98:f8:38:5e:d2:f8:
ec:d1:5c:96:83:07:0e:30:d6:50:4b:70:bc:ed:9b:
88:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CD:E9:CC:9A:69:88:3A:1F:22:4A:92:75:07:A2:BF:74:2B:04:24
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4c:28:56:d4:0d:1d:0c:1e:d4:58:aa:c6:fb:4e:13:d5:e2:
3b:63:b5:f4:e9:8e:d5:12:7d:98:c0:b9:66:37:27:c0:0f:45:
e7:24:8e:0f:27:ef:ac:2f:50:e7:a1:62:f3:99:6d:e6:34:81:
01:a4:64:73:80:60:ed:ef:dc:f8:44:aa:3e:82:45:9e:61:f3:
59:64:8c:d1:23:61:34:41:22:6e:90:cc:f7:64:2d:87:bf:f2:
05:64:c1:d5:9f:5d:26:46:a1:5e:95:ef:7e:e6:63:f7:a7:61:
b9:5c:3c:47:99:7e:bc:13:b6:35:96:b5:25:e9:76:df:6f:c6:
23:c2:8e:9e:5d:d3:e5:af:b0:78:ad:8f:c4:7c:0e:2f:21:d7:
29:39:62:7d:e0:66:bf:cc:4d:f1:34:73:62:16:12:79:5d:ed:
77:e7:fc:8e:90:9d:bf:aa:63:a1:4f:a3:38:1b:df:0b:03:03:
4e:a5:19:31:89:6e:90:eb:1d:6f:29:05:74:4f:aa:a5:1f:4f:
34:72:e0:2c:62:de:92:cf:13:1f:0c:85:42:42:d0:43:ad:6b:
e2:0a:77:43:71:38:e1:06:a8:a8:ff:28:49:f5:3d:43:67:b3:
5f:8d:17:d5:42:d1:36:39:24:ba:f1:59:94:e6:e7:1d:36:ca:
78:5e:84:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:28:23 2025 by rpki-client