
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
File: 4ei3yrUh6I6AIqNkJFRBhVOKezM.mft (raw, json)
Hash identifier: KAchDucg46ZDe+s5un/tNRdw+qdbXw0Ab5YHFFJWis4=
Subject key identifier: 53:A4:F7:FC:C6:85:44:C3:C5:74:9E:25:1F:CC:41:8F:A3:7F:80:61
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial: 019A4EF453061832651FAAC20125610F65AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
Manifest number: 0BD8
Signing time: Tue 04 Nov 2025 13:00:26 +0000
Manifest this update: Tue 04 Nov 2025 13:00:26 +0000
Manifest next update: Wed 05 Nov 2025 13:00:26 +0000
Files and hashes: 1: 4ei3yrUh6I6AIqNkJFRBhVOKezM.crl (hash: vtBfd7c82gMTtzs6V/kx0qJSH7ziOZau/H/zDepSCDw=)
2: O0VEzp-OH_xjiLZy3Uqgd8JheUQ.roa (hash: bRkZXZhDlUd4TGWoN3UvYTMqPRoPQQ3RohAzYIARoRY=)
3: exE6Ut3mUQ9a9aNWDZix4WcMzvE.roa (hash: L1gAescOmgvvCSriS7QJBXICpNWmr7dIsSMrsFotRNw=)
4: oXaw6fDaPf-aCFWq6--7fP8PfNo.roa (hash: T/GzBAIF7xC4cPBnpxI0RpkOSIvxEnLWEiEZKvaP0H0=)
5: uVDY6PyUuy1nXZci6asUkfr791g.roa (hash: souJp5O+Y8ld96qNW2UmMguzsgXAcLNBUoBdApPqkIw=)
6: uwL3ypGLb_CaISyODq46_j9FKrM.roa (hash: xCrbMi0hxh88kUV/oxrokW/pEF8foYlLuuOWDjfscJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:53:06:18:32:65:1f:aa:c2:01:25:61:0f:65:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
Validity
Not Before: Nov 4 13:00:26 2025 GMT
Not After : Nov 5 13:00:26 2025 GMT
Subject: CN=53a4f7fcc68544c3c5749e251fcc418fa37f8061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:89:17:0d:a8:0e:e0:50:3b:fe:b5:2b:0a:c5:
2d:85:e3:19:d0:fb:f0:0c:b6:77:3a:aa:ae:97:2a:
07:8f:43:f6:1b:8c:22:28:db:f7:7b:23:de:5b:6a:
bc:4d:b4:0a:cf:f6:34:53:c1:82:f9:f3:e4:9e:2c:
73:2c:78:8b:03:24:f2:8e:aa:ba:30:ea:ff:2c:38:
93:2b:b2:30:ea:b3:00:df:1f:f9:2f:f4:33:a0:d9:
57:46:ba:8f:0d:fc:e6:fd:a7:f4:35:91:4e:e3:00:
c8:41:c7:b8:1a:85:e7:6a:9e:23:39:95:1b:ed:19:
4c:9b:84:39:b1:e0:1c:46:c3:b9:25:77:3a:bb:f0:
84:78:f7:c5:75:0e:58:c5:6e:73:02:c8:8f:29:da:
93:b0:18:95:cb:98:ad:b9:61:a5:c3:52:16:00:fa:
e0:ae:33:55:a3:cc:48:fb:80:22:7c:26:cb:7f:35:
70:1e:bc:80:00:c5:ae:92:58:cd:13:db:79:fb:57:
ce:6e:c4:be:7a:1b:2c:4e:d7:cc:c8:c3:bd:b5:45:
7c:b7:e5:a5:6a:77:6f:e7:80:dd:ce:2a:72:eb:75:
5e:c2:bf:7b:5a:06:8d:2b:39:d6:4e:90:7a:b0:3d:
2e:6d:dd:bb:f3:e9:02:29:71:97:72:d3:87:fb:ae:
95:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A4:F7:FC:C6:85:44:C3:C5:74:9E:25:1F:CC:41:8F:A3:7F:80:61
X509v3 Authority Key Identifier:
keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ec:01:63:4a:f6:af:e4:09:c1:74:10:aa:7f:6b:78:f0:b0:
8d:ce:8f:43:5a:1b:a4:b5:fd:82:75:15:5d:8c:c6:92:c7:94:
34:f9:cc:dc:de:85:a5:00:51:fc:45:9c:26:38:a9:63:c1:be:
c2:92:89:d6:1c:da:bb:76:f0:07:f3:26:ff:f4:73:60:b7:69:
70:fc:f9:5a:8f:24:2f:32:f8:0d:f8:db:49:e2:b6:07:eb:a4:
9c:8b:8b:b5:19:0e:90:4f:48:fe:ad:a8:7e:6e:fc:c2:1c:d8:
fa:2d:d5:a5:fe:1f:d1:a4:fd:c2:2f:61:d2:98:f0:15:19:cc:
a6:40:7e:85:5d:7f:82:6e:3c:6d:93:c5:ea:34:df:06:e1:ee:
1e:99:b6:ee:97:71:15:e7:f6:f3:2c:de:3d:77:1f:5f:ad:f3:
56:95:47:bf:8c:e6:c3:a7:7e:64:87:88:e2:81:7c:45:22:e9:
b6:64:9e:cc:95:e9:22:a9:5a:5c:d0:a0:f6:f3:46:84:52:3f:
32:84:b3:6c:35:ec:b8:71:5e:b3:a6:d1:18:7f:3a:27:2f:b2:
3c:a7:e1:f2:d8:9b:8f:aa:60:11:f2:be:a1:c5:46:ce:6e:56:
8a:91:f9:06:3b:22:8c:2a:56:8f:16:b4:f4:47:21:51:54:0e:
1c:b5:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:45:25 2025 by rpki-client