Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: vWw/Gt7g3r5GrN5oyysAJxGN/cy61/d7o7OYT4FY2L4=
Subject key identifier: 74:F8:B9:EE:F2:D9:EB:11:4C:2A:AF:F1:07:EE:A0:40:78:2A:E5:58
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019A4EF49DFF0223A8195FFBAFFCF62749E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 0370
Signing time: Tue 04 Nov 2025 13:00:45 +0000
Manifest this update: Tue 04 Nov 2025 13:00:45 +0000
Manifest next update: Wed 05 Nov 2025 13:00:45 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: Tq5hTmw8VOZCUQ4TC/xCC/INbYY8i2fPAZlHmm1eq1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:9d:ff:02:23:a8:19:5f:fb:af:fc:f6:27:49:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Nov 4 13:00:45 2025 GMT
Not After : Nov 5 13:00:45 2025 GMT
Subject: CN=74f8b9eef2d9eb114c2aaff107eea040782ae558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:ee:f9:37:d0:be:62:d2:7e:4b:35:c0:25:
48:3f:34:0a:e1:fb:d1:e9:7b:45:86:b4:fc:c9:14:
44:57:d1:5a:34:80:06:a4:46:95:a2:67:b1:59:09:
b2:a9:92:6a:57:45:62:78:94:48:e1:65:32:8f:0b:
17:aa:69:ac:a4:58:4b:69:73:1f:20:9a:39:2e:87:
31:02:ee:ef:63:53:c4:c4:d7:44:9d:93:17:2a:fc:
37:74:8d:11:c2:71:13:fa:9c:06:3c:c2:b0:8e:3f:
c3:0d:07:de:f3:c9:fe:36:f0:4f:05:df:ff:9d:fc:
13:bd:6d:40:36:30:0f:3e:6f:18:7a:1f:dc:5d:20:
93:13:d9:05:84:80:02:ba:ad:30:06:8c:0c:ee:66:
56:73:84:66:ef:a4:c5:d1:91:f9:59:81:0b:7a:9e:
7c:e0:1f:6d:fc:0a:39:10:1d:f9:f4:95:5b:bc:d1:
64:f0:6b:05:78:8e:14:47:ff:ba:67:bc:b5:c6:85:
4b:65:4e:3f:29:c4:5c:94:ba:31:ae:23:c0:f4:e0:
c7:6d:a6:ba:be:62:80:79:ad:51:a1:92:2a:e3:79:
cb:7b:51:9c:73:5c:4d:47:eb:62:c5:e8:1f:e8:58:
0c:64:e9:bd:3b:69:0c:96:aa:7c:e5:98:b1:bf:05:
ea:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F8:B9:EE:F2:D9:EB:11:4C:2A:AF:F1:07:EE:A0:40:78:2A:E5:58
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:57:5c:a2:33:08:37:28:ce:8c:19:a4:95:a8:80:01:4d:2a:
2e:5d:b7:74:da:21:e5:65:53:54:c8:b4:de:b9:82:28:61:6e:
e1:27:d8:25:6b:06:0b:30:35:92:06:17:bb:8c:e6:d3:09:b8:
c9:de:25:95:dc:6f:5c:55:64:32:2d:c0:94:e4:53:78:f6:1f:
26:50:ae:91:88:7b:a5:be:aa:82:58:96:16:ac:19:0b:89:05:
aa:77:c0:f0:39:48:6e:3c:c4:55:42:44:c3:64:af:41:69:0b:
3e:ff:83:c9:de:49:63:da:b1:86:a2:01:26:cd:53:4f:b2:06:
ab:88:39:e9:bf:a8:0e:72:6c:08:71:14:5f:e4:ce:e7:af:d8:
7f:8f:be:2c:1f:36:b9:06:ea:5f:cd:32:d3:b1:9e:b5:5d:db:
82:b5:8d:aa:e9:4c:c8:9a:9e:8f:2a:e5:3e:c7:4e:bf:d0:95:
17:21:07:f6:b6:3c:c0:6a:38:db:91:df:da:1d:48:23:f9:cb:
64:ff:8e:ce:21:42:2d:0e:74:06:57:58:6d:b7:49:55:24:38:
37:40:c8:ad:38:4a:a9:1e:c7:59:06:7a:55:99:6f:99:a5:e9:
87:c9:32:91:a4:35:d6:de:59:ec:2d:04:af:2e:d8:1f:83:dc:
a0:63:46:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:00 2025 by rpki-client