Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: 1qDKKhV4jCDmdxkROu1yv2bOtHjtOpi+n1i3YFKQHiE=
Subject key identifier: 4E:D0:07:77:55:BB:2F:EB:FA:25:11:83:C4:82:1F:F6:C8:58:E0:A9
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019A4E86CA98FA91D77557AD8DA6C3F11FF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 11:00:47 +0000
Manifest this update: Tue 04 Nov 2025 11:00:47 +0000
Manifest next update: Wed 05 Nov 2025 11:00:47 +0000
Files and hashes: 1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: RaIUdppQNvNdM8Rglyf+a9h/SGBIZ+Lm3I3IXiYUV6Q=)
2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:ca:98:fa:91:d7:75:57:ad:8d:a6:c3:f1:1f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Nov 4 11:00:47 2025 GMT
Not After : Nov 5 11:00:47 2025 GMT
Subject: CN=4ed0077755bb2febfa251183c4821ff6c858e0a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:76:21:0d:56:99:bf:a8:5e:f6:d5:c7:07:28:
1e:7a:d4:27:e9:39:30:d6:e8:ac:e4:84:3f:1b:c9:
4c:4d:3d:61:18:a5:27:78:a3:d3:ba:7d:b0:3d:d8:
68:49:b6:8d:f1:ff:1e:3e:c7:61:19:72:37:ec:e0:
15:16:df:dc:98:12:e8:03:ce:26:1f:54:b0:68:46:
0e:09:34:96:d5:0d:5b:5a:3c:66:92:fb:ee:e3:1b:
05:1b:4d:be:c4:97:3c:b5:4c:88:80:cd:87:b3:9e:
f8:9e:13:b0:95:36:e0:7a:23:1c:f8:8d:49:5d:35:
26:b9:3c:63:22:6d:3c:34:a1:27:45:60:5d:91:57:
d2:f3:b2:63:c1:dd:1c:ff:6e:42:b2:17:d2:52:df:
e2:92:27:b3:97:c7:2c:de:d1:30:a7:77:b9:21:9d:
e5:eb:ff:e1:06:6c:ed:40:c9:91:e6:80:95:9e:c3:
3f:0b:fd:34:7a:20:cf:68:38:a1:87:c8:ab:a4:29:
22:b5:ad:1b:e2:99:44:15:00:be:ad:d0:0f:96:a2:
c6:28:96:29:57:05:53:6c:3b:43:fc:5d:28:da:74:
16:a9:c3:89:5f:7b:8c:5a:a8:79:e0:af:72:3e:73:
3a:36:a4:8e:c3:b7:7c:9f:d2:ff:dd:d1:d7:c9:d1:
37:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D0:07:77:55:BB:2F:EB:FA:25:11:83:C4:82:1F:F6:C8:58:E0:A9
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:71:39:d9:ad:0d:43:be:cf:98:ad:01:20:67:a7:df:e2:2a:
0f:26:b8:c8:27:6b:43:b8:05:a7:f3:f3:34:d0:b4:84:10:c0:
e6:03:37:78:6e:f2:4f:69:ce:e6:e9:b9:88:e7:41:65:08:0e:
31:0b:2a:4a:26:c5:2e:96:e7:ee:7d:eb:7e:b8:2a:34:4b:02:
8e:78:e6:a4:52:41:13:97:c3:12:b3:19:43:cf:ed:79:c8:de:
37:02:0d:45:bc:5b:2a:0f:17:81:c5:c5:bb:22:cc:60:26:9c:
0f:be:ac:79:5e:42:dc:45:e0:05:b8:cf:51:2e:c3:f1:01:8b:
64:cb:3d:39:79:c5:3b:22:7b:92:bb:b2:87:ca:10:85:c3:75:
6e:76:37:7c:14:36:49:5d:aa:e5:a1:3d:5b:9f:2d:e8:6d:db:
56:51:43:0d:7a:28:50:cc:4b:81:8c:a2:ba:4f:34:61:79:f4:
f8:d5:8a:4a:a5:ad:1f:50:d4:ec:7e:2f:f2:f3:31:9f:61:79:
d2:76:8d:f3:6b:33:7f:18:55:f7:98:ef:ad:d2:51:97:81:55:
9e:9a:4f:c0:1b:39:1a:7d:ab:bb:d2:b6:5e:7c:f1:92:21:c1:
07:82:3c:4c:0c:da:e2:45:4f:e3:ff:ff:f1:b4:0e:8e:34:e5:
ee:3b:37:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:42 2025 by rpki-client