Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: FeTH/l6ijSLLCmkqfj2w0U1S50T3l2vjMR7v2enXNb8=
Subject key identifier: A9:E6:F4:1A:18:DF:59:EA:5E:F8:D0:AE:87:CF:7F:B9:43:44:CD:FA
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019A4EF5E0947C2279D389AC1916B56585AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0E1F
Signing time: Tue 04 Nov 2025 13:02:07 +0000
Manifest this update: Tue 04 Nov 2025 13:02:07 +0000
Manifest next update: Wed 05 Nov 2025 13:02:07 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: d1QjnImIUqZi7wlsmg9QktVuFvb8mYC6wlrNnoR/BgU=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:e0:94:7c:22:79:d3:89:ac:19:16:b5:65:85:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Nov 4 13:02:07 2025 GMT
Not After : Nov 5 13:02:07 2025 GMT
Subject: CN=a9e6f41a18df59ea5ef8d0ae87cf7fb94344cdfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5a:94:19:7f:28:eb:22:d8:2b:03:2f:02:80:
f0:2c:49:90:e4:e7:68:95:5e:8a:c9:e5:54:3e:59:
04:91:22:63:89:d3:ac:1d:6f:47:45:b1:b0:cb:c6:
31:98:f6:eb:1d:68:c1:4f:4a:e1:87:f5:ca:77:c7:
a1:97:63:d7:db:e1:f4:97:7b:17:16:18:5d:de:88:
76:b8:1c:ee:31:93:9c:93:04:cf:cb:64:31:c1:40:
aa:6e:b4:5f:00:b0:64:97:7e:73:10:5e:d2:c2:d9:
f7:7f:4f:a0:15:60:d6:ba:7e:3b:98:1c:58:19:86:
e7:96:1d:ec:6e:51:96:86:c9:e4:e6:19:5b:35:e7:
ec:4f:97:55:4d:88:bc:5f:19:91:95:7e:75:2b:33:
7a:3b:b0:0c:cf:1f:f5:a8:fb:30:82:25:70:09:ff:
5a:63:b8:61:bc:d6:be:23:93:df:6c:fd:97:c4:02:
e5:2a:04:22:fa:49:f0:99:87:b7:1a:e6:47:6e:a0:
e2:b2:8d:58:60:7b:0e:21:ed:03:61:54:c1:15:f3:
ea:05:fa:a5:84:b8:90:27:54:00:f3:fb:ff:52:36:
ad:66:ba:f2:9a:ee:15:77:af:97:54:c0:52:16:b6:
91:5f:77:1d:f7:07:8c:81:7c:d4:84:49:35:60:81:
fd:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:F4:1A:18:DF:59:EA:5E:F8:D0:AE:87:CF:7F:B9:43:44:CD:FA
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ed:8d:8c:45:c6:cb:8b:2b:50:2c:05:ea:18:49:8a:5d:75:
ed:68:13:14:73:60:b8:b7:83:03:d4:96:aa:d1:ca:4c:5b:39:
86:4e:39:41:93:fd:ff:3e:e1:0c:3e:66:11:16:38:da:9f:c2:
99:4f:fa:47:25:d0:45:5d:17:c0:6b:27:be:1d:bb:2e:c6:b0:
a1:e1:3f:c7:4f:f1:83:e2:93:8b:af:c5:bf:7b:68:77:ea:d6:
df:cf:ab:91:64:dc:90:e0:0c:20:88:b8:7e:44:e7:77:1a:a1:
6e:44:ef:40:77:34:50:e8:75:5d:d0:e4:b8:29:58:de:a6:42:
8f:4e:54:54:2b:28:46:8d:92:e7:93:84:0c:1a:b4:44:d2:9f:
a9:41:b8:90:a1:2b:3d:69:ff:f7:88:22:62:64:17:9b:51:16:
12:85:0e:c9:67:92:30:81:de:d2:26:fb:65:e7:31:58:14:e1:
b6:61:30:15:23:e1:43:f5:91:c8:57:71:69:40:aa:e1:6d:18:
04:63:97:cc:fe:41:6d:f7:48:91:3f:fa:14:1a:44:11:c7:79:
7a:2d:1c:db:fb:f8:b8:59:45:bf:af:c8:e0:57:ce:2a:a9:75:
ff:9b:5c:32:53:9b:1b:cb:e7:c9:82:c3:10:0e:aa:b0:2c:b2:
33:2b:bc:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:07:40 2025 by rpki-client