Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: bEiMEfRIxntk49sXmJDNqUxRppDYjsnnwIq91s3vc0I=
Subject key identifier: 5C:1A:06:E0:92:B5:EA:A0:09:08:4F:FC:39:B6:BE:5D:99:0A:B5:90
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019A4E86B131B4BC2165F5E75322D929C286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 123D
Signing time: Tue 04 Nov 2025 11:00:41 +0000
Manifest this update: Tue 04 Nov 2025 11:00:41 +0000
Manifest next update: Wed 05 Nov 2025 11:00:41 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: xp9+TuOm41wtpQMprxNBFWoXppT9mBvm4BrK4i7FEhc=)
2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:b1:31:b4:bc:21:65:f5:e7:53:22:d9:29:c2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Nov 4 11:00:41 2025 GMT
Not After : Nov 5 11:00:41 2025 GMT
Subject: CN=5c1a06e092b5eaa009084ffc39b6be5d990ab590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:84:c6:3c:9d:54:57:6a:e1:69:60:e5:45:
f1:16:5a:96:0d:80:47:b5:21:5a:ad:6d:09:38:73:
f7:d9:3c:9d:0f:2e:3f:e8:f7:e1:02:f9:1b:16:15:
e3:f4:f1:e8:6c:6a:41:46:26:e9:ce:b9:ec:d0:b4:
c5:91:32:78:75:4c:de:83:ca:fa:f6:c3:65:43:2e:
73:83:3b:2f:86:35:06:b7:00:bf:9b:16:33:c5:1a:
45:7e:74:dd:4d:1d:fb:df:3a:f0:48:59:24:7b:fc:
82:d9:f9:4e:e3:4a:df:6f:6a:66:97:63:c5:d8:a7:
f7:0f:54:e0:a7:34:fe:46:fb:24:2b:07:1f:a6:52:
cd:63:30:a5:6a:61:9c:c9:43:b7:ed:08:42:2b:ec:
08:eb:90:81:15:3f:40:eb:18:4f:9c:ba:2e:b6:ba:
8d:4b:b1:57:9f:16:14:40:93:be:53:cf:13:a3:48:
8e:20:f7:67:77:a8:c9:0a:63:b2:f2:17:16:c6:cf:
d5:18:7d:e5:ae:7d:53:58:4b:cc:9c:6a:c7:56:f8:
a4:20:78:3d:07:24:92:a6:25:f8:e3:90:87:9b:f2:
c6:33:63:cc:c6:37:14:12:12:9c:86:db:ba:2e:e4:
16:1c:e2:d3:9b:ee:c4:cd:24:62:54:e9:ce:6a:86:
f8:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1A:06:E0:92:B5:EA:A0:09:08:4F:FC:39:B6:BE:5D:99:0A:B5:90
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f8:80:5a:a9:31:b1:c7:02:fe:c0:b0:75:8f:66:47:d9:b1:
9f:fc:ee:23:26:7b:f0:78:d2:e0:cc:86:74:31:4f:5f:2c:74:
1b:0a:b1:b8:84:15:2e:20:25:7d:d7:4c:aa:e1:ce:67:57:49:
91:c2:e0:f9:72:3e:e4:9e:cc:97:cd:ae:5d:ca:cb:74:2e:fc:
09:fd:1f:58:d7:05:5b:ae:e1:c4:0a:a7:35:1c:9a:44:c0:5e:
e7:11:de:6a:0d:a3:a9:80:83:c3:ef:7d:5d:a0:af:cc:4d:69:
29:cd:30:fc:9e:a7:21:b4:79:24:0e:27:13:35:42:0d:31:c5:
57:5f:8c:0b:77:2e:f5:f9:df:75:02:68:44:3e:10:8a:b4:77:
92:61:d4:ba:c7:a6:69:16:a1:7d:6a:ca:34:10:49:d0:a6:f0:
bf:a3:79:5c:e6:70:e6:42:a6:75:0c:86:3c:d7:e3:10:4d:5a:
73:6b:9a:bd:5c:e8:ff:06:3e:cd:cc:8a:cb:61:0e:55:7d:2c:
e3:5e:1a:71:c9:c4:db:f7:18:05:51:63:c9:11:24:ed:cb:27:
7f:04:19:60:93:55:86:12:5b:33:45:ee:3e:d1:80:46:e4:de:
00:8a:c0:03:42:15:62:8f:76:8a:c9:36:ad:64:df:63:86:a0:
69:e8:c6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:49:39 2025 by rpki-client