Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: 0NYHt9Bs+NcSDi8/698w1yHSGsAOv/H3Jy3a8fn2D9g=
Subject key identifier: 60:E1:31:84:78:29:19:43:4A:93:C0:41:64:43:A5:28:46:CE:0E:62
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 019A4DAB321FF98B7182B7D9569E2CCD0049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0ACE
Signing time: Tue 04 Nov 2025 07:00:56 +0000
Manifest this update: Tue 04 Nov 2025 07:00:56 +0000
Manifest next update: Wed 05 Nov 2025 07:00:56 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: nGPwz2JZvNYX2eN9XIqUoXaZfSZsCPVTlt9Pijx9+FU=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:ab:32:1f:f9:8b:71:82:b7:d9:56:9e:2c:cd:00:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Nov 4 07:00:56 2025 GMT
Not After : Nov 5 07:00:56 2025 GMT
Subject: CN=60e13184782919434a93c0416443a52846ce0e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:5b:81:ff:19:da:83:29:3b:13:74:49:8f:
c7:65:20:9b:a8:81:dd:b7:e4:87:6c:89:de:35:46:
02:83:b2:9d:07:20:0b:71:3b:f2:5e:08:ce:36:79:
bf:52:df:95:63:cd:10:07:be:16:fe:a8:f6:3a:56:
37:b2:76:45:44:37:ad:2a:24:b1:c1:0b:50:03:d4:
06:90:65:f3:4e:b0:37:fc:fd:4a:66:8e:98:07:44:
18:3c:f4:c2:1e:d4:23:ad:33:1f:c4:68:34:53:99:
97:98:6d:54:1e:31:cc:a3:68:f4:14:40:2e:80:1d:
eb:84:35:93:75:d2:c3:cf:05:fe:95:9d:00:97:f6:
ce:fc:00:53:de:94:6d:04:98:e2:28:05:df:fe:dd:
fb:e1:34:a2:d9:98:0f:d7:ef:9a:e1:d9:b6:44:b8:
94:29:bd:64:e1:6e:c5:4d:42:59:96:3e:87:7b:ac:
aa:68:b6:14:10:35:12:df:6b:6f:66:58:ea:f0:4d:
a4:91:d2:b1:1d:c3:19:e1:9d:08:51:19:ea:d4:da:
2a:3c:bf:30:1e:0f:48:98:c3:87:10:d1:6d:6c:43:
f3:32:25:d4:d4:c1:96:ec:0f:cd:3f:97:0f:68:2a:
34:26:d0:80:98:ec:02:3b:8d:d5:44:91:c1:b0:05:
e2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:31:84:78:29:19:43:4A:93:C0:41:64:43:A5:28:46:CE:0E:62
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1c:bc:d5:b4:1f:ff:a0:06:90:f6:aa:b9:42:48:58:fe:da:
12:80:59:06:9b:c0:be:ef:81:e5:c0:fd:7a:34:79:b2:9f:d9:
5a:c7:27:71:ab:83:3b:33:36:b9:12:40:ad:75:47:16:de:0f:
1b:c0:60:1e:89:3e:54:bd:cb:b3:27:e3:af:b1:91:74:45:bc:
3f:e0:93:bd:6e:ad:9a:36:f1:72:15:14:06:38:43:9c:be:4d:
f1:8d:37:13:31:b1:bf:66:21:9f:9b:ab:bd:ee:58:77:0c:d6:
08:0e:6c:5c:dc:85:4a:7e:c8:d4:a4:a8:8b:5b:b2:4f:16:96:
52:e0:e7:80:7c:59:6f:61:3a:bf:dd:80:2f:d4:1b:cf:7b:a4:
d7:9f:95:e3:75:68:de:3d:50:b7:81:2f:d0:48:43:4a:60:fd:
9f:18:dd:3b:a6:fc:c1:49:4e:85:6e:7d:fa:2f:8d:0f:77:32:
34:0f:6a:0e:33:a0:0b:09:57:6f:74:71:71:27:06:a0:c0:22:
67:d8:a7:6c:97:bc:57:26:7e:d7:c9:28:8d:30:e6:03:67:56:
8e:27:70:98:46:cf:a8:27:c3:8e:72:d9:9d:81:20:47:de:ce:
d0:e2:f5:a2:d2:f5:65:e7:1b:da:26:95:c3:21:95:41:3a:64:
55:a8:22:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:26 2025 by rpki-client