Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier: QYu1Ts8HuMO6A5NAXPEPOLB9Z+r7SWto03aP0Ryguis=
Subject key identifier: 98:AF:5C:39:F9:3E:3E:94:88:0B:93:EA:48:2B:54:A6:BF:FC:34:1F
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial: 019A4F6255761E83B8F235B055C23CAAB49D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number: 078E
Signing time: Tue 04 Nov 2025 15:00:35 +0000
Manifest this update: Tue 04 Nov 2025 15:00:35 +0000
Manifest next update: Wed 05 Nov 2025 15:00:35 +0000
Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: M48VhpsRN/Ekk+wVY6YhVB87z8qxnM0PiFg8jxLNuDY=)
2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:55:76:1e:83:b8:f2:35:b0:55:c2:3c:aa:b4:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Validity
Not Before: Nov 4 15:00:35 2025 GMT
Not After : Nov 5 15:00:35 2025 GMT
Subject: CN=98af5c39f93e3e94880b93ea482b54a6bffc341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d8:32:4a:6d:38:de:21:9b:f1:11:97:1c:d3:
65:db:7f:a5:ed:d0:54:0e:94:ba:62:84:9c:5c:28:
44:12:4f:61:0e:a2:ed:a5:00:80:94:af:e6:2c:eb:
7c:ea:d6:8e:c5:84:40:32:03:44:6d:35:07:d2:91:
f6:cf:5a:dc:ac:18:0b:8a:cd:dc:2a:a3:e0:19:1e:
ad:58:19:d9:d3:c1:bc:5a:7a:47:ac:db:ad:8a:36:
4a:9e:11:72:6b:d0:54:e9:89:68:a2:20:bf:7f:4e:
c0:01:f8:e1:a9:56:f0:8b:ee:a8:8a:3a:30:15:11:
74:63:24:22:33:4c:ca:2c:de:ff:1c:52:ad:e6:96:
e0:c7:23:5d:60:a3:aa:d8:5d:59:cb:02:97:4e:3a:
dc:a7:6d:49:c0:5c:b8:8d:52:f5:80:eb:44:2a:60:
df:6c:49:41:af:45:8a:0c:0d:f9:25:33:f9:30:c0:
be:25:03:e8:cf:c5:e0:9c:53:f5:72:b6:b9:cf:12:
be:e6:fc:7d:d2:d3:ef:33:1f:69:9d:2f:f5:c0:55:
c3:5f:e2:4d:49:a4:85:fd:ee:99:dd:36:16:91:b7:
00:ec:37:03:a8:0e:7e:11:19:3a:39:0d:b2:fb:43:
78:60:7f:21:db:27:55:ae:13:af:7d:1c:a8:d2:78:
45:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AF:5C:39:F9:3E:3E:94:88:0B:93:EA:48:2B:54:A6:BF:FC:34:1F
X509v3 Authority Key Identifier:
keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3b:93:81:ce:58:9e:94:c5:c1:2a:9b:7e:3e:60:63:09:a0:
b2:e9:1f:7e:20:ae:92:a8:f8:83:a6:aa:45:ad:f5:25:7c:7d:
fd:19:33:c6:e9:be:00:a5:bb:70:dc:4a:de:9c:a2:e0:35:c6:
ce:27:7d:ae:6c:1c:79:52:00:85:8d:79:11:e7:cc:72:b2:1f:
2d:a9:7c:7d:0d:cd:d0:36:d0:3c:39:c6:83:d9:18:4e:41:89:
a0:b1:82:36:95:e3:71:25:b3:a6:21:a4:54:43:91:6e:08:8c:
e5:36:45:ed:de:19:1f:c9:be:70:b8:3d:9a:28:93:1c:cc:ec:
88:b8:e7:3d:b0:77:b6:2c:a8:5b:b1:0a:55:b8:1a:58:5d:42:
89:8e:bc:8b:3a:1f:79:b6:e9:1d:a9:63:72:83:c1:9a:1c:77:
cd:6f:6a:35:1f:47:ef:f3:81:08:99:70:9d:1e:11:eb:27:58:
a0:57:18:5d:4f:be:50:33:05:c1:d3:5b:0b:14:94:93:ef:a0:
ce:8f:c5:ad:b2:7a:ae:58:b0:2f:d9:93:20:58:af:22:56:2f:
90:29:2f:2b:87:3f:4d:4e:f9:8a:40:97:87:25:74:c1:b9:09:
f3:63:5b:c2:c4:e9:e9:3e:46:f3:74:53:da:56:a7:e2:09:03:
2f:36:12:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:20:58 2025 by rpki-client