Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: WGpi4vWUcAm8hMjOaJeUTzqTxMN4mEKvzUdEvd1KFk4=
Subject key identifier: 3D:0C:0E:09:F6:96:F1:92:1E:C9:B1:01:80:F5:1D:61:69:CA:F4:5C
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 019A4EF582D52F7D304C9D1C2A5D855282D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:43 +0000
Manifest this update: Tue 04 Nov 2025 13:01:43 +0000
Manifest next update: Wed 05 Nov 2025 13:01:43 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: logcyEZ9ANv5bl20KjI0OQICoTqN7glqPD03DHz+sKg=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:82:d5:2f:7d:30:4c:9d:1c:2a:5d:85:52:82:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Nov 4 13:01:43 2025 GMT
Not After : Nov 5 13:01:43 2025 GMT
Subject: CN=3d0c0e09f696f1921ec9b10180f51d6169caf45c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:99:df:d1:96:ce:ec:c4:aa:45:93:02:dd:33:
fd:c5:c5:4f:55:25:09:da:1a:82:83:9b:e9:85:7b:
5d:80:57:af:28:3a:a2:bc:31:75:3a:3e:aa:c4:9a:
bf:4e:c6:6a:22:0c:fc:7b:b0:7c:c5:4e:fa:f7:8c:
6a:cf:00:05:9b:07:6c:74:c4:f6:90:3b:29:4e:9d:
9e:b6:d3:d7:7c:d2:ab:d8:90:f1:9e:56:77:27:76:
13:5d:2a:d1:a5:82:ae:a3:5b:e5:e8:55:b1:a8:d1:
da:a3:19:2c:c0:3a:13:66:77:dd:e2:1c:13:52:17:
57:50:1e:52:05:7b:09:34:d1:6b:50:dd:b3:04:62:
1e:4c:06:94:24:94:6a:d3:55:dd:ff:29:1f:1f:96:
0f:82:18:a3:55:81:a1:b7:92:20:1f:ee:ce:3a:2a:
2c:4b:2d:45:4a:d1:9f:87:89:9d:35:42:02:0d:e5:
ca:74:9b:8a:84:b7:34:e1:e7:e5:cd:86:a0:10:57:
af:c4:af:84:79:86:37:e7:de:e8:8b:ed:05:f5:a9:
dc:2f:a1:4f:92:3c:8d:f9:f2:3f:6e:44:d1:a6:03:
75:a1:da:44:69:15:a5:ec:b2:61:00:9d:58:d7:5b:
f2:b3:8f:f5:e6:72:16:0c:1d:c7:05:29:84:e4:e8:
6d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:0C:0E:09:F6:96:F1:92:1E:C9:B1:01:80:F5:1D:61:69:CA:F4:5C
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:4c:a4:40:61:39:27:1e:f4:09:53:67:7a:5b:4c:f5:dd:01:
02:0b:2d:1b:b5:c6:1e:e9:02:6a:77:09:77:ab:e6:e9:ca:e4:
e5:5c:25:3b:b1:18:cf:84:bb:12:30:5c:04:b2:7c:03:73:d2:
bf:4e:0e:1c:29:1f:38:c3:a7:51:e7:cf:77:37:20:06:f6:a6:
ee:46:9f:fb:a9:8d:5c:e5:2e:e7:cd:06:b6:01:44:0c:be:f0:
6e:75:7a:34:60:2a:aa:f3:c1:4a:c0:9f:66:d8:00:0c:42:f2:
1c:74:66:8f:7b:1c:8f:2f:72:53:d3:04:e8:3b:5a:64:f7:60:
9f:83:f5:fc:e2:d9:f4:30:36:a8:11:16:6b:2e:59:e9:93:c4:
ec:81:75:8f:42:5e:a2:20:04:1d:a6:9c:cc:bf:41:50:6a:4d:
8e:4e:fd:8a:b9:f8:4f:f3:21:1f:4c:ab:47:3a:fb:43:33:b3:
03:4c:7e:b7:37:d3:91:5e:3b:1c:d7:23:fa:9c:9f:16:f1:9e:
39:24:23:06:58:81:f1:0e:47:f8:e2:7b:fa:2a:bb:8b:d8:6e:
46:80:ca:28:07:33:62:16:46:e3:c0:ea:c1:30:8c:b9:3e:79:
ce:a8:13:e3:01:89:ff:01:71:37:ed:d5:4a:1c:f6:e3:e4:3c:
12:61:13:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:30:06 2025 by rpki-client