Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: MZyRXAT9QY689/aELDBEVBvAFZPfyn//9fdC3E6RUvE=
Subject key identifier: 54:F2:20:DA:32:72:B6:90:6E:18:3E:59:3F:9C:53:8B:39:64:9E:EF
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 019A4F2B1EAE3D15C08F69E1A24890987196
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 1711
Signing time: Tue 04 Nov 2025 14:00:16 +0000
Manifest this update: Tue 04 Nov 2025 14:00:16 +0000
Manifest next update: Wed 05 Nov 2025 14:00:16 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: QifwzJn5HbhkMyXMxeo/FrdKru7zgHSVUGprmUclfrs=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:1e:ae:3d:15:c0:8f:69:e1:a2:48:90:98:71:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Nov 4 14:00:16 2025 GMT
Not After : Nov 5 14:00:16 2025 GMT
Subject: CN=54f220da3272b6906e183e593f9c538b39649eef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:0c:b3:4a:8a:e9:fc:89:9c:0a:0c:51:33:
66:c6:60:38:fd:07:8b:fd:55:51:76:dd:06:a1:26:
80:f7:5e:b3:d8:50:0b:1b:df:1d:35:bf:cd:2e:c2:
c8:06:27:94:5f:00:5a:8c:07:f1:9d:bf:c8:58:3d:
6a:ce:fb:76:25:75:b2:15:76:f6:8d:21:0c:f5:cd:
39:0f:4d:98:2e:e1:2f:c3:d6:26:98:56:06:24:d2:
ba:0d:0f:f9:c0:8d:04:31:ca:a8:07:62:20:2d:9b:
e5:72:bf:7d:2b:1c:72:2d:f5:84:fc:df:bb:3d:b4:
c5:a2:4d:a1:f4:42:09:d1:37:05:1e:37:60:50:36:
30:2e:25:b9:cc:04:2d:1f:63:fb:84:30:6e:76:71:
72:aa:85:95:df:12:49:31:cb:77:68:cc:61:7a:37:
fd:03:a7:c7:04:51:b3:f7:16:d8:89:90:ef:2f:0a:
fe:35:eb:85:ec:3b:cf:26:43:e4:cd:b6:c1:86:32:
34:52:e6:03:26:28:ad:a2:0a:50:e0:f9:d7:3c:ba:
a3:41:4e:1f:c3:a8:14:3e:93:a9:49:23:7f:08:6c:
45:bc:80:0c:8b:c4:94:d5:5a:0f:eb:1a:51:55:34:
46:bd:90:af:db:8f:c0:c1:b7:be:db:73:fa:e5:c0:
bc:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:F2:20:DA:32:72:B6:90:6E:18:3E:59:3F:9C:53:8B:39:64:9E:EF
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:21:6a:40:74:00:e5:f3:71:d7:ad:c9:05:2d:f0:21:ab:08:
b4:80:d2:98:a2:fc:83:83:b8:e7:de:1e:f7:e2:b5:74:61:33:
85:2a:86:1b:03:1d:70:64:1d:37:23:09:a6:6a:73:be:5b:98:
49:e3:18:8c:92:32:4d:88:b5:99:26:42:1e:64:e8:5f:85:b5:
15:9d:92:fc:10:eb:57:34:f6:41:ef:47:e3:82:71:ee:79:7e:
69:a4:ab:ec:81:f7:f4:2a:c1:ae:a3:e8:35:88:e6:36:6c:fa:
d4:0b:ad:ee:45:67:8b:57:5a:f5:14:4e:c7:83:25:2f:e5:f5:
a5:b3:7d:c3:11:5d:6b:a0:40:87:96:4d:e6:33:d4:cf:70:0e:
77:88:d7:3d:75:6b:64:b8:29:7a:c6:34:77:51:d7:a8:08:2f:
13:b2:05:12:97:38:a3:bb:ee:53:03:d8:92:b7:22:24:4a:e0:
e2:80:4e:6e:7d:cc:18:cf:58:8e:ce:cd:2d:e5:e2:1b:ef:a7:
7d:03:b5:4e:d6:8a:25:10:1f:2f:fe:26:74:d4:4c:22:8e:5c:
d3:bf:a5:16:68:12:aa:41:73:34:66:7d:db:5c:e4:99:f9:49:
32:ce:e4:f6:23:b6:63:77:8c:cd:0e:1d:4b:96:52:65:eb:e9:
ca:58:34:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:54 2025 by rpki-client