Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: SVrsU/iyVG8AV+3ejw9IrXKg5Iq06F7FdRVA+UzRRHI=
Subject key identifier: CA:F7:7A:57:EB:73:92:42:63:5D:8D:1A:40:3C:01:E0:65:AA:DC:2D
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 019A4E4FD62EAC8EFE61F1928F5E15FE19C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 0ACC
Signing time: Tue 04 Nov 2025 10:00:46 +0000
Manifest this update: Tue 04 Nov 2025 10:00:46 +0000
Manifest next update: Wed 05 Nov 2025 10:00:46 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: GHomTqcJNtAX+PDyPYvvyFf07788Fc0lMT/8rMBCDzM=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:d6:2e:ac:8e:fe:61:f1:92:8f:5e:15:fe:19:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Nov 4 10:00:46 2025 GMT
Not After : Nov 5 10:00:46 2025 GMT
Subject: CN=caf77a57eb739242635d8d1a403c01e065aadc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:1e:e2:63:8b:c0:fd:0a:8b:3c:eb:91:7f:
fc:90:65:7e:cf:b2:38:18:48:36:ab:42:15:ff:be:
2d:33:69:eb:0b:3f:31:5b:ab:6e:eb:74:8a:2f:13:
6c:02:79:a8:1c:04:d7:e4:df:07:4f:79:ba:64:2d:
84:1a:1d:b2:35:cc:f7:be:a9:22:a4:a5:5c:67:94:
3d:85:5d:97:a9:20:38:8d:0d:e1:b0:36:34:4d:8d:
b7:56:45:f4:7d:70:cf:a1:7b:f6:8b:7f:a3:13:54:
72:0a:aa:91:ad:18:2f:11:46:b9:da:57:c4:f0:86:
5e:d0:2c:0f:b3:74:ca:32:b7:ad:06:c7:58:3e:4e:
47:a3:3a:04:d5:5f:65:e3:1a:c5:57:37:1e:37:8e:
90:cc:68:46:c0:8e:d6:74:7f:a6:11:e0:e0:01:5d:
d4:77:1d:01:c2:3a:79:94:90:bc:5d:eb:56:bf:de:
50:63:1c:bb:fa:40:ff:d5:eb:28:ea:86:07:aa:65:
95:d3:61:4b:06:a5:29:4f:8e:cd:2d:d9:fe:77:c7:
27:d5:96:6a:93:8c:d4:35:86:72:c7:c7:4c:56:20:
24:bf:97:35:55:c0:53:4a:14:fb:c7:8b:5a:ab:29:
73:46:04:5b:9a:42:4b:ce:90:db:06:c2:6b:93:eb:
de:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F7:7A:57:EB:73:92:42:63:5D:8D:1A:40:3C:01:E0:65:AA:DC:2D
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5c:5c:40:79:18:c7:ac:c3:aa:8f:33:bd:df:9c:c1:f8:c5:
b9:a9:c4:57:26:4b:9f:bf:ce:3f:01:b9:79:1f:98:b9:cf:ac:
85:4e:d0:ea:2d:7a:ad:00:fe:02:e7:28:1f:9e:69:20:db:d6:
75:10:b1:58:90:5f:37:38:22:36:51:05:67:23:47:1e:ed:6b:
c7:f5:50:45:01:1b:fc:d4:a7:7c:dd:47:a4:54:58:87:75:b0:
44:20:87:50:c4:61:6c:de:21:f9:51:89:86:0f:be:eb:8c:59:
48:4b:a7:68:19:6b:9d:41:87:91:30:47:35:11:45:ea:c8:59:
7d:e7:4d:cf:8c:0a:9c:83:42:ae:e2:97:eb:76:10:f2:b0:f0:
d7:2b:16:24:24:c3:28:b2:7f:a9:cf:c4:58:b7:08:61:f3:7b:
a0:e0:ed:bf:78:84:8b:14:1e:8d:58:13:6c:de:1b:c5:cf:90:
5d:87:d7:73:92:1a:b8:d7:80:e6:0f:58:9d:62:63:bd:9f:5b:
1f:4c:ad:86:40:b9:ce:f0:62:5d:2e:61:45:35:ef:17:fc:1b:
d0:a6:d2:af:bb:f3:77:06:1f:ca:b0:ab:6e:d7:b1:a9:cd:46:
05:47:0b:07:00:cf:66:87:9b:b9:ed:13:1c:4b:5d:77:fe:02:
10:a3:65:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:51:12 2025 by rpki-client