Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: 4mnl07r0Cv1bubvUBA14XlYlx8AL3e/cny/JLI3QSFI=
Subject key identifier: C5:BD:A7:49:9B:BD:36:EA:77:6F:AF:A1:7B:D3:2D:83:C9:17:7F:82
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 019A53ACF7EB5CD75B1819D04F4D667DC87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: 03E4
Signing time: Wed 05 Nov 2025 11:00:35 +0000
Manifest this update: Wed 05 Nov 2025 11:00:35 +0000
Manifest next update: Thu 06 Nov 2025 11:00:35 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: OOqeEayBDfIUgJC+zfrkeQUwZLkzPOs2Ki6CMmU/tG4=)
2: 6CvazhQ-TchHGMOoGitdZcJhEs4.roa (hash: igPSm0jfypQMdE/eZVfZNp5wdbowi2Qa/IcHnzjteY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:ac:f7:eb:5c:d7:5b:18:19:d0:4f:4d:66:7d:c8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Nov 5 11:00:35 2025 GMT
Not After : Nov 6 11:00:35 2025 GMT
Subject: CN=c5bda7499bbd36ea776fafa17bd32d83c9177f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:38:cc:0c:d6:92:47:b2:87:97:45:b6:33:a2:
3b:9c:4e:c0:6e:c1:de:32:71:f7:25:92:ff:f1:d2:
f7:9d:61:b2:c2:bd:37:82:e7:70:7f:c7:c7:a8:7c:
1e:17:40:4a:e3:81:4a:53:55:99:9e:75:fc:d4:18:
a8:cd:be:11:5b:13:66:f7:ab:db:01:7a:78:6f:20:
d8:f4:48:58:fa:7e:fb:74:a6:6f:b8:d6:d8:73:14:
f1:7c:fe:66:15:ec:15:c8:c2:5d:de:33:e6:e9:7b:
52:06:a7:2e:f0:5f:e9:7d:2c:07:e9:31:28:a6:6d:
1a:59:a1:e2:95:14:9f:fd:be:57:13:94:d6:ad:d9:
d2:a0:21:84:3b:cd:fe:3a:90:39:37:d0:6a:97:10:
59:91:c8:78:b6:5b:b4:c5:bc:ed:9b:0e:fb:88:ff:
59:06:9a:b9:76:6d:14:ac:a3:b7:44:91:1d:82:69:
9a:e9:57:14:84:a6:fe:7a:f2:76:77:b6:7c:a8:0f:
35:1c:67:10:9b:3f:08:52:56:b9:31:0c:71:83:9a:
8e:0e:1a:3d:5e:0e:1f:2a:42:fb:a4:c9:56:1f:5d:
45:12:58:54:b2:a5:94:5e:6d:1b:b6:53:85:49:b1:
a5:4b:3c:b6:45:21:f8:73:75:b2:22:be:8a:de:f7:
ef:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:BD:A7:49:9B:BD:36:EA:77:6F:AF:A1:7B:D3:2D:83:C9:17:7F:82
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:38:56:12:3e:60:ed:75:79:b7:57:e5:fd:40:51:c2:49:71:
4f:21:19:e2:0b:8c:c8:74:35:82:14:a3:e3:30:29:f2:32:ca:
69:16:d6:b6:e1:84:58:94:90:74:75:1f:a0:4e:1c:a3:21:1b:
b4:90:ef:86:7d:99:96:b3:f3:61:00:cd:8f:40:0e:f7:2f:ac:
b5:5f:c3:73:c3:e9:3a:fd:21:e4:b5:80:12:51:9e:94:f7:6f:
60:26:b1:8f:e4:09:d0:10:ff:9e:5b:af:1c:6e:13:f2:5b:f0:
71:5e:ef:a9:8c:0f:e6:18:7b:60:13:7a:89:31:54:5b:9a:c6:
ad:78:dd:97:d7:db:d8:f1:8a:78:7c:52:89:02:27:c8:f2:81:
29:18:d9:e9:c6:23:e7:27:52:c4:b0:f4:bb:cd:13:e8:ef:67:
fd:51:34:b7:ea:40:2f:24:d7:53:81:76:91:fa:5e:74:77:4e:
9a:05:48:c0:76:33:d9:fd:d9:29:ff:26:35:74:70:d2:56:e9:
15:fd:3e:ca:7b:cb:79:d1:43:91:78:36:62:b9:98:96:40:95:
04:bb:68:72:0f:ef:1b:47:12:d0:a7:41:82:e4:d4:50:ac:c9:
5a:b9:be:60:76:a8:10:02:d6:f4:ee:41:ba:56:d0:8b:14:bb:
12:f8:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:42:26 2025 by rpki-client