Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
File: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft (raw, json)
Hash identifier: dpE/j+4XMI/R1aDqDsZctlowa++j+TVWnatGKJ9n4BE=
Subject key identifier: 4A:BE:C4:AB:B7:FC:CD:01:08:37:44:E8:8A:1D:D5:C6:81:65:CE:82
Authority key identifier: D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
Certificate issuer: /CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Certificate serial: 019A4F98E85BE80E17C001D412ABCE894F60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
Manifest number: 040D
Signing time: Tue 04 Nov 2025 16:00:12 +0000
Manifest this update: Tue 04 Nov 2025 16:00:12 +0000
Manifest next update: Wed 05 Nov 2025 16:00:12 +0000
Files and hashes: 1: 04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl (hash: vc1Sql7n4DuH0HPJWtly8vVA5wPQ2Znm2n/kghuD1ts=)
2: 0k42oFwK9zeHh7UudZGNANSBYXM.roa (hash: 5Ao6mH3fPzWjkBEDJZN7zRWdA8LcUFLpcoEHQj83IGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:98:e8:5b:e8:0e:17:c0:01:d4:12:ab:ce:89:4f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3802ea8f9ce802b57bbbab78e3097937ffa11c4
Validity
Not Before: Nov 4 16:00:12 2025 GMT
Not After : Nov 5 16:00:12 2025 GMT
Subject: CN=4abec4abb7fccd01083744e88a1dd5c68165ce82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a2:a8:e2:5f:ca:5b:f0:88:9f:f0:28:9a:82:
46:f9:08:30:13:c2:98:d8:4b:db:78:e8:68:5e:52:
68:2d:95:64:71:e8:68:42:c3:41:49:19:0d:01:be:
a4:4d:5c:62:21:bc:e8:24:df:d8:f0:ba:09:f7:b7:
67:6a:37:f7:88:69:e8:d1:f8:02:d2:0c:48:52:31:
c1:3d:62:9b:67:5b:28:1e:c0:94:d2:4d:94:6b:0b:
ae:21:47:82:a2:8c:dc:6d:3c:ab:74:32:1b:69:fb:
f2:20:fa:d1:2c:cf:6b:b5:23:97:95:41:92:08:7f:
47:36:2e:c7:e1:67:33:8c:5d:85:2e:28:9a:2b:2a:
3c:48:66:7d:88:76:a9:42:57:59:60:5c:65:c4:3d:
04:2b:08:36:a3:75:d7:02:2a:e2:ad:b7:2d:78:44:
7a:66:b5:93:4e:2c:e4:3a:24:21:1a:2f:e0:d5:0d:
55:ae:12:38:fc:47:2b:d0:b2:66:9e:7f:2a:b7:f1:
8c:97:c5:0b:d7:a2:ec:62:8b:f4:04:24:9a:7b:a4:
f0:52:5f:36:92:d2:1b:9e:77:1c:58:a0:8b:e0:3d:
4b:68:a5:1a:6c:54:e6:c1:a7:ad:a2:41:2a:9d:16:
21:74:ca:0c:6c:61:db:5a:d9:17:db:3f:50:ed:9c:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BE:C4:AB:B7:FC:CD:01:08:37:44:E8:8A:1D:D5:C6:81:65:CE:82
X509v3 Authority Key Identifier:
keyid:D3:80:2E:A8:F9:CE:80:2B:57:BB:BA:B7:8E:30:97:93:7F:FA:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04AuqPnOgCtXu7q3jjCXk3_6EcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/8702e7-4bf1-407e-bafe-fad21ff29e2b/1/04AuqPnOgCtXu7q3jjCXk3_6EcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:b9:4e:4d:65:c7:db:fc:52:e5:f3:0f:cf:b1:f6:c0:68:09:
12:cb:3f:e0:a0:dc:32:1a:9d:4b:8f:bd:67:c2:39:47:ce:5e:
16:bd:68:e2:0d:36:77:3e:49:c3:10:ab:31:e6:75:ce:b4:18:
1d:22:c1:33:c1:43:22:76:d8:4e:ee:97:12:af:e1:fc:1a:3a:
c3:c0:e7:05:bc:7a:a1:fd:d1:b2:bc:23:59:e7:86:e3:0b:95:
7c:0d:01:08:6e:66:48:ca:e5:fc:79:0e:d2:95:83:5b:fd:3c:
69:3b:56:ca:e4:ea:57:2c:98:2c:68:43:92:89:a7:d1:13:3c:
ec:ed:3e:c1:d0:36:2c:78:2e:0b:c3:fa:ba:66:56:44:ca:23:
df:ab:f4:7d:c8:b5:61:66:1c:05:25:a9:eb:f5:aa:aa:48:98:
8d:d6:bf:70:c1:3f:ab:39:13:fc:8e:7c:62:85:b6:41:82:63:
a9:21:37:ed:bc:e8:a1:03:7f:db:3c:f3:77:73:41:56:9f:c7:
98:8d:14:e9:76:3d:8b:bd:0d:9a:c4:17:e1:bd:86:1a:ab:db:
47:16:18:14:e6:73:4d:84:dc:91:7e:6e:8e:55:01:64:3a:78:
2a:8e:25:77:51:68:40:fa:06:45:fe:6c:ac:b1:31:04:95:1f:
fd:3a:41:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:33 2025 by rpki-client