Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: ZCUAJEUJCZDwM6kPiOnTXBNFQe3sUJvlk+oPYxCAS4U=
Subject key identifier: 13:34:00:E7:60:A3:5B:EB:B6:D1:D9:F1:08:BD:0A:97:31:0B:03:50
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019A54C10F459CA880510089B25C7938DED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 3B
Signing time: Wed 05 Nov 2025 16:02:09 +0000
Manifest this update: Wed 05 Nov 2025 16:02:09 +0000
Manifest next update: Thu 06 Nov 2025 16:02:09 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: jfoYOBqqilAu0zQ5kQ6U/I5thbHI+JHw5B2uJ+nrypo=)
2: NxyC245LfoIGu7NVTJi-_dDCgvs.roa (hash: Suj+SVX/zjejO/imh+c1lgrmaGy+Ijth/7DtIkk94wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 16:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c1:0f:45:9c:a8:80:51:00:89:b2:5c:79:38:de:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Nov 5 16:02:09 2025 GMT
Not After : Nov 6 16:02:09 2025 GMT
Subject: CN=133400e760a35bebb6d1d9f108bd0a97310b0350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ce:70:51:1b:d8:90:e1:1a:6d:e1:87:93:6a:
de:61:8e:8c:c5:2c:f9:be:73:02:b6:a6:8f:4c:78:
11:47:71:c1:83:af:d7:15:b5:0b:b6:cd:d0:22:9a:
3f:c4:6a:97:00:32:7a:4e:74:e5:2c:d7:f7:3e:9a:
11:6a:60:42:26:93:28:43:95:a7:bc:51:e8:78:0c:
38:cc:f2:bf:79:a7:89:0f:41:f9:ce:2e:9a:1f:f6:
68:f4:a8:18:66:a2:79:7c:d1:68:a5:76:cb:94:e4:
2c:3e:23:18:8e:7b:38:01:0e:ab:4c:49:24:32:a0:
c7:6b:09:4d:15:26:ab:da:8b:da:f8:0f:d0:6c:2a:
e9:f8:69:82:b9:b9:03:f8:5f:4b:94:69:ad:3e:a2:
5e:91:2d:1d:61:20:dc:85:31:df:a9:08:cb:96:04:
56:32:a1:4c:46:6e:0d:cb:16:24:2a:d5:79:89:72:
a3:97:4c:e6:28:a6:e3:17:4d:21:80:e3:a3:47:8f:
db:71:c7:d6:ee:05:53:9c:a5:cf:92:fd:e3:d6:99:
4b:89:ea:9d:dc:16:75:51:52:23:de:a4:c8:70:44:
a8:89:fc:e8:39:9e:d4:07:5d:54:c0:22:98:fe:bc:
ab:ee:0f:f0:06:72:95:c7:27:49:03:e2:4b:9c:03:
37:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:34:00:E7:60:A3:5B:EB:B6:D1:D9:F1:08:BD:0A:97:31:0B:03:50
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:3b:cb:ef:7b:f2:92:87:1b:bc:21:84:7c:de:c7:09:0d:ab:
3d:25:30:37:33:9d:26:d2:37:8b:b8:27:ea:0a:e5:5b:88:c6:
4a:32:1b:fd:c5:40:0f:c9:4b:e3:63:79:21:b0:98:bd:a8:15:
c4:af:c7:61:ce:46:10:37:af:67:eb:e8:89:c6:57:91:a5:ba:
58:0e:1a:3f:c0:46:93:1a:a0:52:33:cf:2c:76:48:ea:8c:b7:
2f:01:b5:fc:ed:8d:af:ad:9a:a1:57:ee:c7:80:7a:1b:d4:66:
e3:e7:e0:9d:19:50:22:76:e4:86:41:06:71:58:ef:93:2b:aa:
12:9e:0d:2e:65:19:5a:11:0e:f4:a0:a0:09:dc:8c:4d:51:2c:
33:b2:9a:66:46:2b:1d:0b:99:0c:a4:6f:c9:6f:db:d9:c7:84:
34:19:13:bb:1d:de:28:8b:aa:8a:e3:ae:32:5d:2b:5a:4c:c0:
a6:b4:4f:c1:bb:f0:9e:b1:8f:ed:f4:09:ba:81:4b:93:22:a7:
73:65:1b:f5:35:a0:0d:99:02:bb:24:77:c9:12:86:bd:bf:3f:
ae:88:13:72:d9:cd:d7:05:7c:29:0b:51:7e:59:95:0e:4e:f7:
7e:bb:9b:60:46:47:a5:6b:54:44:66:9c:c3:91:70:67:cf:7a:
30:2c:c4:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 02:00:55 2025 by rpki-client