Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: gzcOv0qC+eswPbwsmknyowqW+mxcM0sKV15/p14N8eQ=
Subject key identifier: 0D:F8:9E:41:71:47:0F:E3:71:9B:25:E9:AE:86:1E:F1:78:C3:A1:AC
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019A4F62A4E5B71B6B5986BFA1B67EDFCE0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 1715
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: 1liBiWcm7rqfKWDTMa0IRSXB91NRc+6GKbAybwEaJ04=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a4:e5:b7:1b:6b:59:86:bf:a1:b6:7e:df:ce:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=0df89e4171470fe3719b25e9ae861ef178c3a1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d0:fa:3f:95:8b:59:b0:95:b3:d0:63:e1:58:
d8:cd:f9:e0:91:fa:9c:a0:5d:d2:f7:99:4e:c6:ef:
27:c2:62:57:1c:62:cc:36:6c:93:91:72:3f:68:73:
4e:ce:5d:1d:37:b9:46:3b:22:17:52:35:04:c2:07:
e2:7c:df:93:22:33:b9:3a:29:f6:b7:c8:cd:01:2f:
fd:50:8c:36:7c:57:d7:86:b7:22:f0:9d:bb:25:4f:
44:13:45:72:b8:68:ce:a0:83:d3:61:a2:ef:84:95:
23:ab:8c:02:bc:e5:18:da:af:2d:f3:b5:bd:de:a0:
51:ea:8c:1c:d1:01:76:e7:81:b9:83:c4:1d:d7:41:
b0:cf:18:ec:00:04:c4:9b:e5:1f:a8:50:ff:29:82:
e3:a6:e4:0c:c2:46:eb:f3:fe:00:c6:48:b6:8a:b9:
24:4d:b8:95:be:4a:4f:2a:3f:d8:07:5d:30:ad:5a:
41:fb:46:38:af:1a:e2:e7:11:25:e1:14:91:0b:cf:
c7:3b:c6:c2:91:70:2d:bd:cb:a9:fa:63:87:44:b5:
a7:40:2d:8f:c9:58:76:2a:a5:86:a7:b5:ec:df:81:
7e:b5:20:46:c0:93:69:b5:aa:d7:16:fd:d9:dd:f9:
ff:bb:ab:ad:0c:e4:63:9b:5b:a3:48:52:9d:9c:5d:
a1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F8:9E:41:71:47:0F:E3:71:9B:25:E9:AE:86:1E:F1:78:C3:A1:AC
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a2:6f:72:9a:2e:59:30:4d:35:d8:cd:00:71:46:d6:9c:45:
57:cf:06:50:4d:72:3d:5d:ee:0b:34:39:cd:e8:43:9e:03:9e:
eb:be:78:5e:a0:f6:51:7d:4c:0d:17:81:e3:e1:d3:b2:51:8a:
a8:79:cf:b6:11:c2:4a:b2:e8:8c:7a:22:61:72:1a:29:97:1d:
25:3f:4b:86:ad:c2:cf:fd:25:10:24:2d:c3:71:af:48:26:b0:
d9:66:12:db:46:2b:12:2e:fb:59:93:3a:63:0b:8a:93:02:85:
d9:44:0e:95:07:50:1a:44:71:60:1c:b1:a3:ef:fa:ba:67:0f:
38:ef:e6:01:2a:4c:18:45:4b:cc:75:c6:f1:cd:95:c4:ee:a5:
0a:9b:6d:90:24:66:aa:32:65:ef:97:40:b3:76:60:be:02:e2:
28:33:f5:77:fb:0d:d4:eb:70:a3:c9:02:66:d9:73:a4:a1:ba:
e8:eb:c0:35:61:59:34:70:57:72:84:15:aa:12:16:93:9b:13:
2b:24:8c:44:cf:a2:88:f1:5c:bb:d4:72:46:c3:76:ec:28:2f:
2c:91:b5:7c:e1:e3:8e:2d:51:59:68:4c:84:17:5b:e7:fc:d5:
f7:a2:73:5b:c8:42:6f:4a:9e:ce:48:90:d1:47:6f:1c:29:d5:
27:18:e6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:00:25 2025 by rpki-client