Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier: Rjg8S/Er0xD8ov8Deu06D8hkfqSTNpo1Q3VcG/yRwYU=
Subject key identifier: FF:E9:BD:B2:C8:60:0C:86:C1:2F:F7:A2:89:82:9C:CE:EB:7F:12:28
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019A526348B30D267A5353F11E4B69EE88DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number: 0D62
Signing time: Wed 05 Nov 2025 05:00:29 +0000
Manifest this update: Wed 05 Nov 2025 05:00:29 +0000
Manifest next update: Thu 06 Nov 2025 05:00:29 +0000
Files and hashes: 1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: 3m1kfgLXY1r9WZ0BpmWR9fg5B+5SwtP0vKXtnJGSakA=)
2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=)
3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=)
4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:48:b3:0d:26:7a:53:53:f1:1e:4b:69:ee:88:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Nov 5 05:00:29 2025 GMT
Not After : Nov 6 05:00:29 2025 GMT
Subject: CN=ffe9bdb2c8600c86c12ff7a289829cceeb7f1228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:17:60:24:f4:fe:85:19:f6:c5:97:e6:aa:
a4:92:9d:81:1e:21:d9:e3:1a:ef:70:36:92:4a:f8:
fd:1c:f1:c3:bb:e5:e3:cb:f7:2b:ca:78:a9:db:00:
d3:50:fb:b8:a1:3f:55:6e:a2:c9:2b:c5:10:fa:95:
9d:bc:cf:9a:85:4b:89:f6:9c:d4:98:59:35:e2:66:
19:5b:b1:a8:93:ac:4a:e6:06:48:7a:99:63:ef:cc:
35:6b:23:33:a2:c9:3b:d1:ce:ad:67:d4:3b:d5:d6:
ec:ee:b2:ea:2b:8e:ba:f1:4d:b5:82:63:04:25:e3:
1c:3c:bc:17:1c:50:c8:51:67:56:ee:df:bc:ff:03:
ce:af:f3:c3:82:50:5f:22:09:d4:16:31:85:83:fa:
64:c9:2b:2a:41:b8:3a:2e:e5:11:3e:8a:ae:c3:cc:
aa:8e:d1:65:df:78:c9:b4:33:1b:2f:a4:3f:2b:44:
be:b8:90:1b:1c:2b:49:c2:0a:9b:c7:cd:a8:c7:9e:
97:de:0c:e1:a8:af:56:da:6f:04:3c:e5:a1:37:7f:
f8:76:1d:13:23:09:59:2e:b8:41:99:59:25:cb:58:
eb:ec:2e:27:79:e7:d4:f2:2e:83:4f:51:c4:d3:ee:
0c:7f:a4:bd:db:12:ee:e5:fd:10:6e:f2:17:2d:f1:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E9:BD:B2:C8:60:0C:86:C1:2F:F7:A2:89:82:9C:CE:EB:7F:12:28
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:0b:7c:d6:ee:52:0c:cc:e1:17:e1:b2:30:0c:7e:04:eb:ba:
99:c8:d8:3b:5d:73:18:b6:ac:63:3a:1d:a7:d3:d8:69:91:58:
0f:0c:1b:97:33:67:2f:dd:56:55:f9:49:ce:e0:06:ee:f6:db:
30:b9:c6:c3:1d:b6:26:d5:b8:20:de:f0:ad:2e:39:18:dc:d9:
24:4e:41:55:c8:c8:15:0e:02:76:01:20:18:a5:53:af:f1:43:
0f:f1:ef:6b:0c:fd:7c:ab:40:a7:14:26:4d:81:94:65:b9:e4:
6b:8c:9f:19:51:b8:50:49:1b:22:a9:b6:62:f8:d2:15:6f:f6:
32:e5:45:0e:68:e9:ee:26:c7:c3:da:b8:ea:08:f5:ad:55:28:
5c:6b:9a:56:ad:f8:6c:0b:a2:ad:57:8c:ca:f8:d9:f8:11:04:
6a:33:66:14:97:7f:b7:b8:f6:71:76:82:60:12:fd:95:61:35:
0a:8c:d6:ed:58:d3:72:e3:a5:03:65:ee:1c:16:5c:9c:56:64:
d4:ff:79:2e:a9:a9:18:87:e3:d1:98:6b:1e:0e:7d:49:7f:85:
ce:cf:10:eb:7e:83:73:09:f9:6e:b4:2d:c6:e8:4e:41:f7:5b:
a8:61:49:12:1f:5a:4f:96:d6:fb:35:15:b6:21:55:ff:b5:b5:
bc:4f:12:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:29:02 2025 by rpki-client