Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: J4Fu2oiNZZJeiEzXm4i08X/i+S8cAkHlxwcTtbYNSBE=
Subject key identifier: D7:29:21:4A:5F:D9:49:BF:00:62:2E:CA:48:A5:35:68:83:0E:29:33
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019A4F629029CF3DCBA4414845DC67CB3C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:50 +0000
Manifest this update: Tue 04 Nov 2025 15:00:50 +0000
Manifest next update: Wed 05 Nov 2025 15:00:50 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: nl/PsaDuELBSxv1QHrQdzuPr+bjVkkIerT7FWL4dkCE=)
2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:90:29:cf:3d:cb:a4:41:48:45:dc:67:cb:3c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Nov 4 15:00:50 2025 GMT
Not After : Nov 5 15:00:50 2025 GMT
Subject: CN=d729214a5fd949bf00622eca48a53568830e2933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:00:65:cc:91:8b:c4:85:3e:f9:45:95:43:
d2:cf:bd:f3:28:df:db:36:69:45:98:b4:bc:8f:c2:
3c:7a:8c:34:36:17:80:29:0a:a5:26:dc:dd:96:d1:
a4:a3:3b:31:26:36:69:64:aa:14:90:75:a3:34:15:
54:69:4f:d3:25:42:9b:2b:50:fc:0e:99:27:57:68:
cc:1a:92:c7:1d:19:9e:f8:75:14:95:48:c6:65:a7:
a8:71:87:7b:08:be:a5:da:cf:89:ec:76:e7:58:68:
9e:ed:33:f6:a2:d5:1e:5d:22:09:42:19:77:04:7b:
4d:5a:52:53:3c:df:09:ef:25:ec:73:3a:da:7b:3c:
e1:5c:f2:fc:ae:c3:16:55:21:78:53:4f:be:0a:1b:
4a:68:55:2e:58:46:12:2e:f9:af:75:77:9c:29:c3:
0a:e8:62:f2:52:65:28:7b:80:fe:b1:bb:03:87:a2:
a0:b4:6a:7a:2a:6d:07:a0:31:26:55:d6:fd:86:c2:
ba:d8:8b:77:9b:2b:64:25:5f:3b:30:85:c4:89:a4:
8c:0c:ee:57:83:d3:c2:ec:6f:3d:c4:23:dd:e8:e7:
93:3f:bd:e7:6e:a9:e4:d0:5a:a7:85:ae:6d:e7:e6:
cf:0a:19:c7:d3:a2:c4:d2:df:67:36:88:ca:69:d1:
21:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:29:21:4A:5F:D9:49:BF:00:62:2E:CA:48:A5:35:68:83:0E:29:33
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:75:1c:1c:00:b1:c5:5f:67:9b:86:d9:0b:a5:d3:ac:34:57:
1a:d4:cc:3b:bc:cd:36:86:f4:57:6c:db:34:d3:e4:5c:b0:65:
4b:83:8c:da:06:0f:39:09:4b:f9:36:57:ce:00:95:4f:97:0d:
58:4c:15:74:2c:dc:4e:0b:9b:7f:56:a5:9a:69:5e:0d:62:60:
75:c4:fe:7b:77:61:f8:8b:2c:24:a5:17:91:dc:2c:63:fe:23:
dc:03:90:9b:a5:a6:2b:b5:c2:10:2c:6b:3d:ad:6d:e5:43:ab:
b0:07:7e:b0:ab:4a:9f:e5:c3:9d:13:be:a7:4a:41:b2:24:d3:
12:09:08:89:37:43:bf:e1:56:52:72:31:83:07:95:61:7c:e1:
35:b9:22:06:42:6a:86:46:fa:16:84:99:14:66:e2:92:c1:af:
b0:2b:98:be:75:f3:25:16:17:8c:db:d7:d2:90:2e:b5:90:bd:
c1:99:e1:3b:56:b3:17:64:09:6e:69:b5:04:ac:39:b5:2f:df:
48:4e:95:23:ed:96:63:78:01:9e:fc:43:6b:3e:44:a9:71:43:
b7:99:10:a5:d6:de:87:86:cf:ac:52:2b:52:32:17:86:e4:1a:
18:c9:86:ab:ee:db:bf:64:18:f4:14:d0:da:8c:fc:ac:3f:ab:
29:56:00:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 21:10:17 2025 by rpki-client