Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: Wf+NP7iTR9W9n5xQfMH6qDV6mb78MJWF7/pRrbnNOTI=
Subject key identifier: FA:4D:B8:C9:19:E4:4D:90:FC:39:4E:30:EC:10:3F:29:6D:25:19:07
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 019A541B2DDEE16423EAA06B1BBBD745E31C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 15E1
Signing time: Wed 05 Nov 2025 13:00:58 +0000
Manifest this update: Wed 05 Nov 2025 13:00:58 +0000
Manifest next update: Thu 06 Nov 2025 13:00:58 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: PB8CMs885rEOG5wBcYDVHEnc3oSow5zt6+iV3cfIx/w=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:2d:de:e1:64:23:ea:a0:6b:1b:bb:d7:45:e3:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Nov 5 13:00:58 2025 GMT
Not After : Nov 6 13:00:58 2025 GMT
Subject: CN=fa4db8c919e44d90fc394e30ec103f296d251907
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:22:47:49:7b:78:5e:f3:60:a2:fc:2d:86:83:
38:aa:5a:92:1f:c2:13:44:d8:1f:6f:97:1b:1e:97:
b7:94:cd:82:72:93:76:f1:22:34:b5:46:47:7a:c7:
ed:b6:40:70:ce:a8:32:ae:2a:23:cb:88:44:ef:54:
21:f8:87:4f:d2:d8:77:ec:cc:93:bc:3a:fa:cd:e0:
1d:6c:9a:0a:6f:00:75:0c:a6:0f:dc:0e:ec:9d:cc:
2f:5b:c4:50:04:b9:6a:32:d5:d6:50:ae:22:95:ab:
88:df:8d:81:e0:49:a0:ac:3f:91:3e:03:28:b8:2c:
2f:55:02:b9:a1:1b:39:d9:44:ed:1e:5a:e8:84:63:
1f:68:20:76:3c:24:c4:de:65:27:83:a2:5d:79:35:
9f:5a:d9:3b:ed:e2:57:71:45:f8:a4:9f:9a:3b:2c:
5d:9b:f1:6a:10:3f:9e:30:87:e3:91:a6:8f:18:52:
ef:ad:76:d3:da:11:d5:6d:57:08:5f:66:64:63:0f:
8d:72:20:8c:33:d2:f0:ea:f1:25:cd:9c:3e:0d:77:
68:f7:f3:4e:ba:1f:69:7e:58:1c:6e:b2:4d:08:a2:
e2:99:51:93:45:84:e7:71:8b:26:b1:b0:f9:4b:50:
48:e3:bc:cd:0e:21:a8:9a:b9:ee:e5:e1:63:c3:c4:
ff:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4D:B8:C9:19:E4:4D:90:FC:39:4E:30:EC:10:3F:29:6D:25:19:07
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d5:eb:f7:1c:c5:4c:e2:36:07:c6:8d:4f:49:2b:fd:7f:39:
5f:12:8b:36:6f:16:e5:53:2c:e8:3d:bd:d8:03:0e:61:a2:e3:
d4:42:40:29:cd:40:3c:a2:b4:dc:d6:a8:1b:d9:1e:3a:a9:e8:
c7:83:75:bd:b0:d9:ae:75:91:04:c1:24:66:ee:17:62:cd:b2:
fb:5b:f6:32:2d:57:86:55:ef:a1:62:9c:ec:3a:47:da:c2:6b:
dd:36:6f:51:60:20:b3:4d:fc:e8:16:d6:76:53:1f:12:cb:d5:
0a:3c:e9:53:4d:b2:9d:30:36:a3:b9:b4:f6:79:2e:cb:1a:04:
69:51:07:06:84:d1:f3:17:c7:77:c2:d7:ba:2f:47:a2:58:f2:
aa:ce:b0:1b:29:6c:95:b1:9e:da:3c:a1:ff:7e:87:17:90:ac:
b3:12:9a:db:f8:63:97:ca:34:09:7d:6f:2f:2c:85:9a:cd:06:
72:f1:e1:0c:20:f9:62:84:3d:85:c4:90:3e:7c:1e:96:9b:39:
57:9d:67:81:8f:8f:02:47:bc:09:68:43:ee:b0:f9:35:92:0e:
e1:da:3c:bf:07:c3:94:d5:c0:ab:6c:a4:7f:8c:c7:6b:9e:28:
fa:d9:d0:98:0a:92:2d:44:9f:12:ca:f9:bb:21:bd:3c:1f:c9:
2e:a6:b8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:47:05 2025 by rpki-client