Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: aEc4Zj0Z24S+4MzS7gA/16im/3/oMbzPKrcQjncJi94=
Subject key identifier: 5C:66:E9:0C:48:87:BE:6A:41:CF:72:41:B3:88:14:AB:33:3C:1F:EA
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019A530867FD263D3BDCA5C66A85F43321B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 08:00:51 +0000
Manifest this update: Wed 05 Nov 2025 08:00:51 +0000
Manifest next update: Thu 06 Nov 2025 08:00:51 +0000
Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: yXXrVnWexbb52ODXyLsVcfwAcb+LzR8RwF2x8SMGe00=)
2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:67:fd:26:3d:3b:dc:a5:c6:6a:85:f4:33:21:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Nov 5 08:00:51 2025 GMT
Not After : Nov 6 08:00:51 2025 GMT
Subject: CN=5c66e90c4887be6a41cf7241b38814ab333c1fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:8c:6b:8d:b8:cd:da:ce:30:3c:ee:54:34:78:
5d:0b:14:22:b0:69:34:a9:7c:91:86:b6:b8:d2:39:
fe:19:a1:53:a0:f1:61:84:3c:74:a6:60:5a:92:b0:
fa:a7:3e:54:20:20:6c:51:f6:0d:82:20:55:8c:65:
15:60:11:46:49:f0:44:51:2d:ef:cd:d2:02:9b:cd:
6a:01:07:e9:da:92:a8:9b:39:97:c7:e5:c3:e9:3d:
be:7b:eb:6a:43:c9:04:91:ee:b3:6d:49:f3:65:f0:
cf:3e:71:76:c5:85:6b:7c:c3:74:c0:be:c9:ea:77:
e3:9e:03:87:da:ce:88:7d:08:93:8f:46:a1:36:3c:
c4:e6:4b:0a:27:7d:75:63:71:70:26:a0:ff:f8:2a:
c0:b4:9e:78:38:de:f6:67:37:68:81:e5:c4:44:65:
df:80:f6:f0:32:a2:21:e7:aa:49:c1:7f:84:ff:39:
85:dd:62:44:6d:b0:bb:eb:53:25:c0:46:09:ae:16:
e7:f3:86:69:a3:52:70:7e:a3:1e:1d:d7:b5:dd:c5:
91:74:52:bd:b5:dc:c6:f2:ef:c5:7f:d1:d9:ee:06:
05:ff:79:11:12:fe:0e:40:6a:fd:82:02:df:8d:33:
dd:cf:a9:0b:da:f7:f1:76:d3:6c:4d:c7:ff:91:ec:
52:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:66:E9:0C:48:87:BE:6A:41:CF:72:41:B3:88:14:AB:33:3C:1F:EA
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:51:67:e4:d7:f4:f7:34:43:35:f5:58:4f:7b:c3:79:f7:b3:
a2:8f:8c:cf:b2:f3:ea:5d:03:d2:01:82:d3:67:54:08:c9:ff:
5f:9d:e6:06:a5:db:ea:48:57:fd:77:3a:22:85:9e:67:f3:dd:
dd:c0:a9:fd:3d:c7:87:be:fd:19:18:fe:16:61:72:4d:26:db:
72:2c:0b:fb:96:0e:69:e1:83:a5:24:e4:b2:9c:e5:bf:e6:de:
2d:c8:09:60:32:54:94:5e:5c:67:12:54:73:2c:54:07:c4:e1:
de:a0:56:c0:ba:de:36:e8:f8:9c:b6:ec:25:2a:a6:fa:31:7b:
d2:f8:a2:1b:15:40:e0:0e:5c:78:c7:5d:08:40:28:0e:35:7b:
15:c4:95:12:5f:51:32:c1:1a:42:f3:1e:b1:0b:4a:66:57:db:
18:ba:07:e9:9f:4a:ba:0b:db:06:77:7c:98:0e:f0:a4:b4:eb:
0c:2d:8f:b6:73:bf:80:fd:98:63:9c:84:a0:06:a8:63:a8:65:
70:3c:bf:72:75:b9:7c:44:7b:6f:5b:83:f2:71:1f:80:66:bf:
bd:4f:0f:40:98:ed:df:16:6a:44:d7:5d:69:ba:01:73:e2:5c:
90:04:a6:92:cb:f2:4d:0f:40:12:50:03:fb:17:61:53:78:74:
de:47:34:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:47:11 2025 by rpki-client