Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: 8OYunSHI1OmTk9gBQv5PE0uM2h6d9XOJKppOUovmoYQ=
Subject key identifier: B5:DC:1A:2D:7B:C5:09:FB:21:0B:4F:5A:92:2F:48:C2:AD:99:57:46
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 019A54C05F817839FE89545602468CDE1063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0A47
Signing time: Wed 05 Nov 2025 16:01:24 +0000
Manifest this update: Wed 05 Nov 2025 16:01:24 +0000
Manifest next update: Thu 06 Nov 2025 16:01:24 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: h9iM5dRrzoGe9+K4LEiDUTMYUVBKBuDHMLnjXTsQBGU=)
2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:5f:81:78:39:fe:89:54:56:02:46:8c:de:10:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Nov 5 16:01:24 2025 GMT
Not After : Nov 6 16:01:24 2025 GMT
Subject: CN=b5dc1a2d7bc509fb210b4f5a922f48c2ad995746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b1:4e:90:b0:ff:8c:55:fe:c9:5f:1e:be:69:
fc:d9:82:73:b2:9b:5f:25:b8:dc:4b:0c:d0:e3:c5:
a4:9f:59:40:66:2f:3f:48:eb:9b:c6:73:64:da:fe:
c8:8b:02:28:1a:b2:09:dc:86:b4:bc:a9:74:dd:03:
32:6d:8c:ba:85:ee:c8:37:32:61:55:57:ad:6a:fa:
a1:07:1e:a9:73:9d:5d:10:7f:0a:ce:6e:7a:3e:2b:
1e:bd:c0:d1:da:dc:20:36:fe:fc:61:2d:55:78:90:
f6:c1:ea:ef:30:0a:37:f8:11:65:d4:79:a6:95:36:
31:5b:2a:cf:32:44:70:a6:22:80:5f:36:07:a2:99:
00:ce:f8:32:48:57:0c:11:c8:3d:b3:3d:90:13:02:
bf:1e:50:14:59:89:bb:d1:79:eb:bc:7e:0c:21:6f:
06:4a:2a:96:41:78:e0:d6:2b:23:16:82:5a:e4:f5:
44:00:38:e4:50:fb:e9:1e:aa:e7:a5:b3:07:d2:f7:
67:c4:31:06:2a:d9:ad:76:f7:7d:06:1b:0a:a6:59:
59:83:bc:b4:9a:fe:66:11:66:bd:f7:98:23:b4:74:
20:e2:1e:f1:4c:4d:a5:4c:56:4d:36:c0:84:83:30:
fc:8e:51:92:4c:e2:28:91:79:3a:14:78:7e:55:a5:
1e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DC:1A:2D:7B:C5:09:FB:21:0B:4F:5A:92:2F:48:C2:AD:99:57:46
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:2b:08:d0:5a:a3:08:00:ff:c0:48:40:5d:77:60:a2:2c:8f:
03:ff:da:ff:e4:65:59:28:31:64:74:b9:2f:29:6f:37:e9:ca:
42:af:ed:a0:94:21:b5:93:03:f1:b9:ed:ca:4c:ec:67:63:4e:
37:02:ee:e4:6c:5b:38:38:e2:d3:47:00:60:42:01:e9:00:38:
26:25:7e:df:9a:05:20:2f:31:b1:81:b4:d1:db:f0:27:37:64:
51:4f:38:b3:99:bd:30:66:9e:ff:94:42:fb:e8:16:4f:b5:b7:
1f:d9:0c:2b:f4:49:0b:62:97:61:c2:2b:f2:86:b3:b7:e6:65:
34:d3:5f:b0:98:df:0d:01:55:f3:85:11:84:f5:78:df:05:87:
13:a0:a1:c5:a0:2d:5f:9c:ce:be:a5:b5:59:79:36:f7:11:f7:
73:1e:dc:6d:7d:9e:77:8a:b1:2f:42:8b:f5:41:2c:25:fd:51:
5b:15:d8:53:26:7d:61:18:9d:84:9d:5b:18:3f:c4:64:3f:ba:
fa:08:c1:8b:11:4b:37:90:e9:7c:7f:8f:27:8e:85:1e:e9:c4:
0d:c5:11:b6:4b:bb:19:d9:18:ae:94:48:63:89:0d:df:1b:64:
c9:ba:1f:73:ea:ef:4d:76:61:f5:1c:6f:3d:7b:cd:fd:b9:c8:
87:de:02:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:31:27 2025 by rpki-client