Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: 47P5YmZCiJUphXaqzYdrbnpUaQhxrVqs6EPCrg6aMYM=
Subject key identifier: E3:74:5D:0A:5F:8A:B9:78:67:BF:56:60:A9:38:90:F0:69:E3:7E:79
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 019A4DE18FB90FDBD0A08DBCEF00263BD531
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 145E
Signing time: Tue 04 Nov 2025 08:00:19 +0000
Manifest this update: Tue 04 Nov 2025 08:00:19 +0000
Manifest next update: Wed 05 Nov 2025 08:00:19 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: PaBZb4YLC8Zy8KYk5HKE6PVMshlzlzUmKa60aeZ8EU0=)
2: HTMh6RJF_q53kTnEGeTtdGIx040.roa (hash: nzX5ZOpXvf0qMt8FdSECR2favMzFA7ed3+MWJmI8hm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:8f:b9:0f:db:d0:a0:8d:bc:ef:00:26:3b:d5:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Nov 4 08:00:19 2025 GMT
Not After : Nov 5 08:00:19 2025 GMT
Subject: CN=e3745d0a5f8ab97867bf5660a93890f069e37e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6e:fd:e5:ac:8d:30:ec:6e:36:46:fe:c3:ed:
10:ff:ff:0a:e6:73:68:d1:f3:e5:da:b3:4a:84:bd:
47:84:07:7f:2d:7a:50:80:05:90:50:30:e0:03:9c:
40:fb:81:49:af:b0:55:16:0b:08:35:15:d0:95:fd:
3b:67:3f:f2:05:42:f4:9a:5a:b4:a3:51:07:27:cc:
51:ba:b4:f9:a7:d5:f1:51:ce:67:68:fc:5c:42:37:
73:f1:37:f1:27:a3:30:d3:3d:08:22:59:17:13:7f:
0c:a1:ca:90:95:fe:f7:7f:63:fb:84:e6:44:36:f5:
08:90:25:99:3d:09:e9:49:90:dd:74:81:d7:cd:47:
0b:85:b8:2b:80:3c:47:0d:c4:c4:2c:43:0c:31:eb:
09:d9:b4:df:77:e1:8c:ce:cc:ef:ca:0d:25:68:27:
4d:8c:83:85:9b:a5:09:92:da:38:32:57:42:b6:75:
db:be:c0:0d:41:71:2a:f4:e7:e7:1d:45:b3:dc:71:
aa:f4:28:4c:a8:e1:7e:04:08:27:0d:ee:1a:8a:a4:
e4:64:dc:1e:a9:a2:15:c2:41:0a:83:4a:c2:7e:5f:
bd:d3:f9:d9:d3:cc:ab:88:fc:fd:59:21:cd:16:d4:
e2:cd:c2:34:ec:f7:38:15:1e:9f:0e:69:de:10:e9:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:5D:0A:5F:8A:B9:78:67:BF:56:60:A9:38:90:F0:69:E3:7E:79
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:f4:0f:31:08:12:90:a5:28:27:f9:52:c1:9b:f1:c7:7d:43:
93:2f:7d:d6:cf:83:75:f7:c2:95:4c:95:78:05:84:00:53:7e:
3e:87:d3:de:a1:ef:48:f3:9f:72:bc:de:17:c7:1d:5f:75:30:
ed:6b:35:c1:de:02:85:1f:25:20:3a:73:5d:d9:30:d6:80:fa:
bf:70:0f:c1:6b:b1:7e:bf:97:3c:88:ea:08:d7:33:dd:1a:93:
b0:59:46:ce:44:56:41:13:81:bb:3d:5a:d2:ae:d8:7b:4c:3e:
e2:ec:c0:90:32:df:b6:45:70:e1:d7:e3:6a:c8:7b:b5:4e:91:
b0:b4:de:7b:8e:e5:81:3f:ba:b7:44:ae:8c:42:85:07:fe:89:
3b:c3:33:5f:08:6c:dd:2b:3e:65:86:5b:3d:5c:3a:fb:29:13:
29:38:0a:e5:6f:9d:8b:56:ef:99:4d:7e:ab:ad:9b:26:fd:9a:
f0:a2:98:e2:ff:0c:c8:37:0b:1a:c4:d5:63:eb:d0:63:f7:43:
b3:d3:8e:c3:8a:cd:cf:1e:c2:6d:34:05:86:4a:6c:a3:3b:74:
0c:c5:23:9b:13:bb:70:cc:e6:14:2c:19:da:1a:96:45:76:9e:
1f:66:31:54:29:06:e2:2e:4e:38:c1:26:6e:98:fb:6b:97:a3:
d4:91:1e:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:10:00 2025 by rpki-client