Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: BN3g5i9djTJ5x6+2KuM74wQ9c/okWM0PsKpOPtCaMu4=
Subject key identifier: EE:C0:A1:4D:E0:9F:10:E8:E5:24:D4:1B:09:3B:04:7E:78:17:D2:22
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019A4D73A2E0358EDA2D1CB594C6DD948B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 06:00:15 +0000
Manifest this update: Tue 04 Nov 2025 06:00:15 +0000
Manifest next update: Wed 05 Nov 2025 06:00:15 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: JIH3l9HlIcyG20+Ic740veN8mHPAGCBiOHQ4MyXKFQM=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a2:e0:35:8e:da:2d:1c:b5:94:c6:dd:94:8b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Nov 4 06:00:15 2025 GMT
Not After : Nov 5 06:00:15 2025 GMT
Subject: CN=eec0a14de09f10e8e524d41b093b047e7817d222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a9:69:7c:4a:ea:a6:21:dc:b5:bd:59:c6:05:
b4:f0:c5:63:2f:dc:21:59:a9:2c:e6:1f:ca:30:27:
77:70:f4:a2:76:ac:70:2d:37:99:df:24:ed:3c:85:
b2:c4:0d:3f:21:ca:77:7f:e2:1d:25:13:9c:ae:ef:
89:e8:fc:a1:6f:6c:2a:44:ef:d9:48:72:1a:97:b0:
22:4d:a1:0e:8d:19:df:d4:e3:4f:e6:ff:7c:23:59:
34:7e:3f:c4:d1:26:e2:f6:68:65:08:b8:33:c9:8f:
94:34:29:25:e7:59:34:77:b1:5d:3e:e9:a8:fd:07:
40:aa:8f:36:5b:ca:33:fa:13:24:a6:37:b5:a6:16:
6a:dc:c9:8c:cc:14:4d:6e:1b:6a:28:39:96:c0:8f:
19:1a:8e:df:68:07:23:6a:55:96:90:50:89:23:01:
b3:95:9a:d1:a1:71:fd:00:4c:ed:32:5d:35:a6:33:
4a:f0:65:b9:66:d4:69:9c:b2:57:10:b5:9d:07:05:
0b:62:53:61:f4:8a:83:07:79:11:76:ec:27:77:64:
6f:67:68:00:df:85:ba:70:65:41:4c:4f:a1:87:3e:
29:08:eb:2b:6d:58:42:6f:4e:66:be:93:17:ff:88:
53:2d:44:e1:a9:3d:11:4b:48:ed:14:d0:32:70:76:
f4:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C0:A1:4D:E0:9F:10:E8:E5:24:D4:1B:09:3B:04:7E:78:17:D2:22
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:23:c6:84:b8:a1:20:ff:85:cc:91:f4:5b:77:d5:ab:1d:e7:
87:fe:f9:2d:af:c0:c1:68:f5:1d:a7:8c:fc:53:c4:d3:8a:b6:
99:2d:69:22:ca:8f:44:c0:1b:a7:26:87:e0:92:e5:f4:22:1f:
b6:dc:cf:95:d9:a6:dc:33:64:e6:79:86:ea:a3:62:fd:49:0a:
d0:2f:e4:15:0b:52:f9:f1:39:0a:c7:ac:5c:d5:55:de:cc:86:
9c:fa:06:0c:f7:bf:50:3b:62:7a:af:f0:d7:79:af:c2:63:fe:
4b:56:71:48:21:11:9f:df:6a:76:cb:78:e8:e6:2f:7e:6d:54:
47:0f:af:14:fc:70:19:6e:aa:1b:7a:ef:45:13:dd:8d:b8:9f:
5f:c0:fc:35:da:8d:0a:3c:21:d2:08:f0:b5:3a:b0:25:9b:b3:
d8:f6:2a:fd:18:83:8a:e5:dc:9e:77:b1:4a:ab:c7:b1:49:e4:
60:6c:b8:d8:7f:38:ec:fc:ff:a8:32:5b:95:ec:89:26:71:97:
30:1f:94:fe:e0:6e:28:28:7f:9d:35:79:d8:a5:30:71:4c:ac:
6e:00:dd:8a:c1:9d:23:6f:09:32:5e:94:16:c3:a9:ec:67:84:
29:2f:88:4d:fe:d5:3d:2f:6f:c1:5b:b7:c3:03:75:41:c9:55:
5f:29:2f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:09 2025 by rpki-client