Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier: mTVZldI4dTMV5SfPfeaR+YSdnDMxgYTM9WXughrAyTo=
Subject key identifier: 4C:37:F8:70:45:F2:D0:16:B9:49:FF:7B:AD:CA:C2:02:61:50:B1:71
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer: /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial: 019A4C9817D74CCE2AAA585B777C2B4B4C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number: 120A
Signing time: Tue 04 Nov 2025 02:00:27 +0000
Manifest this update: Tue 04 Nov 2025 02:00:27 +0000
Manifest next update: Wed 05 Nov 2025 02:00:27 +0000
Files and hashes: 1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: EcgslnHhMOLYOPDJXOfwCQYLWjqb5GPkq/HQ+dRQ68w=)
2: q2EHI1QqAri510M2ZcKkjLI2cEU.roa (hash: 404e8//wzDitUa6OCGaYRBgvvc05hb46lBTtLtVyVk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:98:17:d7:4c:ce:2a:aa:58:5b:77:7c:2b:4b:4c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Validity
Not Before: Nov 4 02:00:27 2025 GMT
Not After : Nov 5 02:00:27 2025 GMT
Subject: CN=4c37f87045f2d016b949ff7badcac2026150b171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:0e:4a:81:a9:a0:96:fd:06:2a:a3:72:0c:
d3:67:f1:23:d7:52:98:62:1b:d8:51:a6:8a:b8:17:
9f:9f:ac:22:01:fa:24:ba:49:9c:80:d7:69:2b:86:
db:01:82:fd:53:10:44:7c:e2:50:b0:7c:3a:75:d8:
2d:30:09:78:f9:70:47:5b:ee:4c:5e:3e:90:30:0a:
4d:5c:9b:b0:81:f8:da:20:6a:de:30:ff:4b:1e:32:
94:4a:f0:8c:fe:4b:c1:13:2f:3c:4c:a8:a2:5e:1c:
07:4a:92:57:71:05:fe:58:74:bc:cd:c6:31:19:a7:
b2:13:2c:62:3b:0d:2f:8f:7f:20:0b:82:c9:a3:42:
59:f2:f6:c8:60:37:4f:cb:a9:69:75:fd:dc:75:86:
0a:fa:e0:97:fd:4b:7c:6b:bc:01:48:90:0c:7d:46:
24:5c:eb:03:cd:9f:1b:fe:57:26:26:13:aa:14:3e:
7c:f7:0b:a6:21:a9:cc:91:81:e5:52:87:bc:33:38:
fe:a7:e3:45:55:f0:0d:68:7c:31:8e:7f:7c:ea:88:
07:ca:a9:9d:ed:70:e4:96:1d:4b:4a:5c:89:b1:f1:
cc:5b:4b:b9:ac:af:25:57:21:12:73:b9:7f:c8:9c:
15:2e:11:e1:37:9e:fa:78:0b:0e:39:a7:6c:04:e0:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:37:F8:70:45:F2:D0:16:B9:49:FF:7B:AD:CA:C2:02:61:50:B1:71
X509v3 Authority Key Identifier:
keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:da:62:eb:d4:8c:cd:80:c1:32:7e:f2:18:80:cc:2a:95:dd:
fc:e5:69:98:0f:87:da:fc:a8:02:02:49:75:05:59:e4:48:6c:
46:75:42:42:99:95:00:ab:7f:83:73:70:c7:cc:b7:62:e6:47:
63:c5:05:1c:f5:ca:6e:d0:54:ea:ef:34:33:a7:ed:fe:41:88:
98:66:77:a9:45:a1:9d:89:82:eb:79:77:99:52:08:43:87:58:
55:55:bc:f0:e9:1e:05:4f:74:1d:5f:d2:48:87:bc:09:ce:fa:
de:74:cc:cd:70:b3:4a:2f:c9:a7:0d:fa:68:04:06:29:2b:0f:
18:56:c2:1a:b8:be:d9:71:f6:14:40:17:45:2b:68:dc:8e:b0:
ae:f8:0d:f8:3e:e4:61:d9:c8:95:46:8a:44:86:a3:57:d5:75:
cd:ab:e0:8e:c2:04:b8:3d:51:11:5f:76:bf:40:a8:71:9d:40:
bd:d0:70:b5:5c:20:72:a3:8e:7a:26:43:88:e1:4b:10:92:9e:
9c:5b:d1:aa:d1:18:25:c6:a2:2a:5b:3a:15:a4:17:a3:39:a3:
b0:38:ed:4b:bc:47:37:2f:1c:b3:ab:90:fc:d2:e0:18:5a:b2:
9e:e2:b0:e3:54:fb:43:2b:e2:f2:b2:59:8a:7e:2a:a0:f0:b8:
6b:0b:8d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:06 2025 by rpki-client