Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
File: 4puawu9jG5LoL1ldc-R5LIFuxuY.mft (raw, json)
Hash identifier: BPYRQPoatDPZj7j9lho3YYkgNJX9JVkmicjzc5yHSXE=
Subject key identifier: 25:CE:58:C1:B2:56:57:06:D3:06:F7:AF:D0:0B:9C:E1:CE:CE:F8:24
Authority key identifier: E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
Certificate issuer: /CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Certificate serial: 019A4F2B370EF11A74667BF6B52CC87DFA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
Manifest number: 0DFE
Signing time: Tue 04 Nov 2025 14:00:23 +0000
Manifest this update: Tue 04 Nov 2025 14:00:23 +0000
Manifest next update: Wed 05 Nov 2025 14:00:23 +0000
Files and hashes: 1: 4puawu9jG5LoL1ldc-R5LIFuxuY.crl (hash: KmIm3BJf73pjphiOBy16LOtf2RaciYgkU+HizcEek/E=)
2: EBmgons8smLjSy_pC81B7nZjG3w.roa (hash: zpgv0UbTTPAH0iIRbzl1hsN1Wy449Ae/Kgm8XxlzuA4=)
3: ImgvJz4_mDjqxdrfNbxhGYCKGu0.roa (hash: /y4sZGaV5lW/RKRkRNk7SmLLY+Y8ezjiodQM42Rpemo=)
4: X7I_6O60aP9OaBtbJevHcrghsuE.roa (hash: hR7L9FjeYMdP71zS9N34E835iFleUqKlYe8PrU5+gmY=)
5: peVRzfk7a5kMcnIN5l0vfDJAjV4.roa (hash: BZZQzoUGU3SVXNptLeHk5DArDqOJYETbuht6S7O+La0=)
6: yI5Nbp0-uf0q4zk47pCiYdnE9hQ.roa (hash: BKzz9xX/v8G21Kss5sh+1KuOPfvgIR81jj3LRU4Atjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:37:0e:f1:1a:74:66:7b:f6:b5:2c:c8:7d:fa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29b9ac2ef631b92e82f595d73e4792c816ec6e6
Validity
Not Before: Nov 4 14:00:23 2025 GMT
Not After : Nov 5 14:00:23 2025 GMT
Subject: CN=25ce58c1b2565706d306f7afd00b9ce1cecef824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ad:c3:82:70:98:04:f2:35:84:cf:80:84:9f:
b3:86:48:97:0f:3a:b2:fb:4c:e3:ac:b0:cb:a0:62:
3d:e2:c9:2b:89:70:81:e7:73:c9:91:5a:33:84:e4:
b6:af:7d:91:7d:4a:b0:18:ae:85:38:4a:09:73:c8:
67:c8:40:40:6f:c0:72:fd:a1:3b:f2:6c:e3:56:28:
1e:51:77:f7:f5:ff:48:62:d7:7e:a8:b6:63:9a:dd:
af:76:06:71:94:cd:21:65:42:ed:bc:01:4d:57:c8:
1a:79:94:1f:ce:9b:5f:22:92:2f:8b:0f:a9:2f:8a:
2b:f0:fc:28:6a:50:54:50:d7:3a:67:67:bd:ca:ff:
d8:61:af:08:03:5e:91:da:9a:af:29:e3:52:a4:a8:
83:b6:e7:09:24:5d:c2:ea:db:4c:8d:21:0f:35:f9:
2a:5b:fd:10:63:12:31:44:22:a7:1a:f4:16:d8:49:
7c:16:29:d7:b4:e1:60:ef:27:8d:8a:35:26:4c:e1:
34:c1:4d:b0:66:b3:f0:04:76:dc:5e:a8:84:2f:da:
69:60:e9:46:59:97:7e:34:f4:47:30:60:b2:e4:ec:
9a:2c:fb:5b:02:3d:f6:57:d4:f4:7e:7d:a4:64:c4:
8d:fb:d4:ff:12:2d:a2:b9:d5:69:73:ff:27:46:b4:
2a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:CE:58:C1:B2:56:57:06:D3:06:F7:AF:D0:0B:9C:E1:CE:CE:F8:24
X509v3 Authority Key Identifier:
keyid:E2:9B:9A:C2:EF:63:1B:92:E8:2F:59:5D:73:E4:79:2C:81:6E:C6:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4puawu9jG5LoL1ldc-R5LIFuxuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/690357-dfbe-4d86-afd6-9164e352a83c/1/4puawu9jG5LoL1ldc-R5LIFuxuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:9e:e6:ea:f7:f5:77:0f:95:6a:7c:7e:df:2c:d6:10:ce:b5:
26:d1:ab:ae:5e:a6:d4:e4:24:7f:04:73:42:e8:45:9f:3d:f6:
e9:0a:26:a4:6b:3e:80:c2:7b:64:ab:99:e7:62:55:b8:9b:13:
a3:47:c0:d6:2e:78:21:83:c3:2d:47:0b:26:dd:56:67:e2:0b:
19:3b:3a:ac:4d:d3:19:5c:f0:69:01:56:a4:3c:59:98:ee:58:
f1:c6:eb:ae:eb:10:2e:0e:7e:8d:f3:87:94:b7:64:a4:20:81:
51:d0:79:3d:b9:59:a3:0e:87:c7:7f:f6:99:d0:db:fa:8b:da:
ae:fc:0c:f9:3e:cb:4b:62:2c:99:be:76:ae:f5:ed:ad:6d:a5:
12:b3:f2:b9:78:b9:43:bd:9d:95:97:c8:01:f5:94:09:72:41:
de:25:cc:e4:79:98:72:db:98:b8:9f:a7:04:7e:eb:c6:23:aa:
d9:b1:02:3c:29:bf:2e:dd:8e:54:7d:30:2b:83:8e:d6:d2:81:
0c:a9:c2:bc:65:7f:86:e3:dc:9b:27:07:0e:d7:28:90:75:e1:
15:d9:29:a7:98:7c:4f:20:82:18:49:a0:28:2e:c3:43:c8:7c:
d0:a7:c7:d7:fb:4f:d3:b4:a7:ad:d6:9f:7a:9f:a9:4a:9c:0a:
0c:48:40:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:16:44 2025 by rpki-client