Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier: 6DtfkeS3Yi81luQ4kOCdCJ/36Sj5C2LghU3KAxT4/Ig=
Subject key identifier: 90:93:1D:E5:3F:4B:E4:D3:48:3D:80:DB:D7:7B:25:B5:30:BE:7A:7C
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 019A51F59659F0923AD9834E48029D7EB698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 03:00:40 +0000
Manifest this update: Wed 05 Nov 2025 03:00:40 +0000
Manifest next update: Thu 06 Nov 2025 03:00:40 +0000
Files and hashes: 1: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: PNIVzjUoPKEHgiNsNoIcPReb40ABQ11ToCS2eXj7Uko=)
2: Z53TKhtsYia8AaAM7SEuxUzomSo.roa (hash: Y9Eq+3ShcYYBqxEHUekT9D2l2UAArlCFvrOoMzpOskE=)
3: cvkG_y1cL0YAHfjQA7tH3oSS1BM.roa (hash: kvaRsBfAFxeZA6gu+TEc8LHfkCny56mAcc6wJSjFdsU=)
4: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=)
5: it7IHvJCQfR1gZTQymCzS9Ta2cI.roa (hash: /axHPc2cp+I2aoPIZLPk+zOh5Faet3AVlxLqRnIEWb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:f5:96:59:f0:92:3a:d9:83:4e:48:02:9d:7e:b6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Nov 5 03:00:40 2025 GMT
Not After : Nov 6 03:00:40 2025 GMT
Subject: CN=90931de53f4be4d3483d80dbd77b25b530be7a7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:94:06:4e:14:98:49:45:be:2a:68:aa:ce:58:
cb:4a:f5:4e:ef:99:cb:89:e2:cd:96:97:8a:2b:0b:
fa:37:07:34:2e:95:7f:80:c0:fa:64:e1:c3:71:09:
dc:4d:93:d0:bb:e6:61:e4:01:99:a5:15:99:e1:a5:
75:d7:0e:9f:cc:af:ff:09:a9:1a:23:99:83:7f:ef:
d0:d9:75:52:b4:41:0c:cf:a1:7c:87:b0:77:a1:d4:
5e:c0:ec:6a:d5:83:e3:a1:bf:e2:58:fc:60:ef:98:
0f:0c:27:5e:8c:4d:d4:be:ff:6b:ea:83:40:6b:af:
55:9c:85:7f:fa:37:dc:d3:08:c0:98:02:d3:5b:40:
7b:29:24:cf:e9:e6:e9:58:29:27:2f:22:50:a1:a1:
a0:43:71:de:ce:64:c8:9a:9b:9f:27:5c:81:bb:57:
09:3c:74:4a:b5:02:2f:3b:17:0f:0e:d7:c9:60:cc:
2f:8e:15:e8:8a:0f:bd:0f:93:eb:1c:da:f3:66:b0:
6c:ee:30:d4:dc:18:40:7e:cf:99:3c:46:64:35:9b:
5d:32:25:4f:e8:06:52:1f:34:af:b5:a1:6e:55:20:
d8:17:29:8c:2a:17:00:6c:b2:d3:58:e8:b2:7f:fe:
0d:ed:f2:01:36:8d:4c:9a:15:3a:43:a9:14:05:34:
83:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:93:1D:E5:3F:4B:E4:D3:48:3D:80:DB:D7:7B:25:B5:30:BE:7A:7C
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:99:9f:58:0a:e4:34:da:86:e5:67:e4:f1:df:89:e2:d2:ce:
11:7a:cd:7f:86:d3:3e:c3:23:0e:c3:35:ab:22:10:c6:53:32:
4c:7b:cc:80:18:01:06:e3:ff:b5:37:ab:22:7d:e0:98:2b:01:
00:03:b3:9d:77:c4:17:4b:d6:3d:14:e7:ec:73:a4:0a:aa:94:
84:b6:7f:74:1a:92:9e:dc:23:a8:19:f5:4d:e3:04:b5:f8:9e:
ce:a2:9b:5a:f0:08:18:88:e2:61:15:ab:20:4c:7d:88:3a:f0:
fd:e4:b7:f6:61:cd:04:99:98:a2:ae:27:32:1a:68:6c:f8:33:
ff:02:f9:74:82:8c:38:76:c1:b9:cd:3f:8e:f2:52:8d:2d:36:
37:63:3d:6f:83:f3:48:06:1a:01:ce:6b:3d:6f:5b:ef:c6:66:
54:ae:83:73:f3:91:b4:a4:0a:10:f0:07:70:61:24:3c:ba:6f:
52:52:fd:82:3e:e8:82:fe:5b:a2:f1:5d:f7:8a:17:34:5a:8c:
f7:91:cb:03:23:4d:32:43:f4:7f:5b:05:b7:f6:d3:76:39:ea:
ea:d2:ad:e4:fe:93:bd:88:cb:5b:59:f1:ab:3e:30:4b:8d:f5:
ce:d5:b1:1a:7e:7c:52:1a:dc:c0:28:21:e3:7a:45:1a:27:2c:
4a:2b:2e:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:32:09 2025 by rpki-client