Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
File: e4mF-uoIWYwFzDC4LigjBq95MxY.mft (raw, json)
Hash identifier: B7VIut80nKEcHvc+b8+cBg2NoRROAZajlt2pSAsVhbk=
Subject key identifier: BE:44:7B:ED:5D:2B:EE:4D:D4:FD:04:E9:AB:D9:7B:08:21:BE:88:22
Authority key identifier: 7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
Certificate issuer: /CN=7b8985faea08598c05cc30b82e282306af793316
Certificate serial: 019A4F997FF454242C24B5DB11CF8F6EE5C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
Manifest number: 0FA8
Signing time: Tue 04 Nov 2025 16:00:50 +0000
Manifest this update: Tue 04 Nov 2025 16:00:50 +0000
Manifest next update: Wed 05 Nov 2025 16:00:50 +0000
Files and hashes: 1: e4mF-uoIWYwFzDC4LigjBq95MxY.crl (hash: p7WxfGHFhJzeuErBYDgspQ7DFLA0RPjqePr2w4lAW8Y=)
2: wezzDoLmoG44JNaFHHcOefdwrnE.roa (hash: feMtqmKbJF8l19fJuaMh5zzlgwe36jwzuX192DfrtQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:7f:f4:54:24:2c:24:b5:db:11:cf:8f:6e:e5:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b8985faea08598c05cc30b82e282306af793316
Validity
Not Before: Nov 4 16:00:50 2025 GMT
Not After : Nov 5 16:00:50 2025 GMT
Subject: CN=be447bed5d2bee4dd4fd04e9abd97b0821be8822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:6e:f0:99:f4:9f:38:f5:8c:d6:ef:2d:58:
20:0f:1c:46:00:d9:5e:49:f2:e5:6b:e2:94:f4:45:
ae:0f:0d:01:5d:19:30:c5:dc:c7:f3:7c:9f:33:ce:
6f:99:af:81:c4:e3:a3:cc:5a:b9:78:e5:32:21:0e:
15:44:61:49:6a:58:c5:44:01:9b:1c:0f:3d:55:2d:
10:7f:15:e0:dd:0b:db:5a:bb:4e:3a:08:84:27:c0:
06:5d:a8:17:4f:8e:96:f6:cf:3a:0d:1a:62:a2:d2:
47:81:cf:b8:d2:7a:2c:5e:74:85:bd:15:3b:d1:31:
71:5e:e6:e1:a8:97:d1:65:91:a4:dd:30:28:97:a5:
92:56:70:93:da:86:af:fc:9e:3b:64:d1:f6:2d:9d:
d2:25:e6:c9:af:69:ac:99:31:ec:a4:7f:6c:86:c6:
7a:a1:7a:d3:8d:19:96:0e:7c:c2:19:7f:7e:6d:e1:
9a:9c:3d:f4:86:54:fb:2c:3c:3f:97:9d:d5:ee:83:
e7:71:ea:a1:b4:c3:b8:6f:a2:89:a8:a4:88:f2:d2:
32:39:60:95:d0:83:02:aa:6f:f4:c3:1e:0e:6a:f8:
57:f0:ea:28:49:cd:bc:26:7e:8d:06:45:9b:af:79:
62:a0:f7:13:69:c7:f3:e7:ca:dd:81:70:6b:5b:ca:
95:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:44:7B:ED:5D:2B:EE:4D:D4:FD:04:E9:AB:D9:7B:08:21:BE:88:22
X509v3 Authority Key Identifier:
keyid:7B:89:85:FA:EA:08:59:8C:05:CC:30:B8:2E:28:23:06:AF:79:33:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4mF-uoIWYwFzDC4LigjBq95MxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e59ba1-3d5b-4299-a852-37c86e355267/1/e4mF-uoIWYwFzDC4LigjBq95MxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c6:c6:f3:99:c6:cf:3c:35:78:14:ba:a9:1a:00:d1:a0:0e:
9d:c1:66:73:c4:f8:40:70:3f:cf:39:bf:01:8b:fb:3e:c4:11:
20:57:58:0c:3c:47:08:82:4f:a6:b2:1b:56:ad:96:4d:34:19:
8d:a0:04:9c:da:4d:50:d0:6c:7f:a9:2d:ae:9e:97:8a:5d:67:
03:c1:57:a7:bd:d0:17:80:4e:66:24:c5:64:4e:7a:91:de:ae:
7c:94:f9:73:81:65:91:88:d8:68:cc:4e:0b:a2:81:4b:2d:a9:
6d:96:94:cd:3a:ea:07:e8:27:d5:79:2b:6a:94:ca:ca:79:7f:
7c:e7:94:28:23:5e:a5:c5:96:6d:04:24:7d:39:93:8d:f5:62:
31:05:93:e8:6c:df:7f:81:0a:42:dc:98:cd:b2:2e:43:1e:a3:
83:8c:ea:19:1c:a3:b3:90:05:ef:63:4d:7a:f2:00:b4:ce:81:
52:31:78:c3:dc:17:bf:75:62:9e:0e:d8:40:44:50:f2:f8:15:
e0:60:77:84:43:1b:b7:e1:93:2d:3f:ff:63:6a:a0:3b:e5:e3:
98:ad:0b:e1:cd:0e:f8:51:7f:b6:e6:64:7e:cc:82:92:c1:b5:
8f:00:b9:9b:6e:9c:c8:3a:dc:18:10:42:8f:f7:db:8b:60:ba:
cd:39:2a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:56:15 2025 by rpki-client