Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
File: 4Gkduvo6jeBwsHAi3prfdDQftPI.mft (raw, json)
Hash identifier: 9CLqO8nYnW9Qvch2fF8HABRhhfP58me6Uc6eM1meJJk=
Subject key identifier: 25:92:5E:C6:A9:6E:BC:05:F2:DB:E8:EA:30:16:3B:FE:F3:5F:A6:5A
Authority key identifier: E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
Certificate issuer: /CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Certificate serial: 019A4E4FFA8012E1AE05D37C952CD59BA5FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
Manifest number: 0FCD
Signing time: Tue 04 Nov 2025 10:00:55 +0000
Manifest this update: Tue 04 Nov 2025 10:00:55 +0000
Manifest next update: Wed 05 Nov 2025 10:00:55 +0000
Files and hashes: 1: 4Gkduvo6jeBwsHAi3prfdDQftPI.crl (hash: J+zokAq6/JlU/6K1/zOhU2sCRF40e3wm1TFCw4k2JWM=)
2: ZcIsus6k0U4n68vd2BlSmmX0JTQ.roa (hash: GGkzJjiRy+xG+nAGWUrXuzxUvFxqlSxJYvMRGhTfLjg=)
3: fO5bykwkTB3KiAZuWcyGEBGhJE8.roa (hash: 3HfGLaMktk6F2ghb5LrLG+rGBzaC5K9KjLNpttW6IrQ=)
4: wFM8K8dCgcjVIF6EWdiQdlQNXyY.roa (hash: lm9Zbfc6llKnFMQrYcsYug5Fz4BrAVnfVm1lHsp7Cfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:fa:80:12:e1:ae:05:d3:7c:95:2c:d5:9b:a5:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0691dbafa3a8de070b07022de9adf74341fb4f2
Validity
Not Before: Nov 4 10:00:55 2025 GMT
Not After : Nov 5 10:00:55 2025 GMT
Subject: CN=25925ec6a96ebc05f2dbe8ea30163bfef35fa65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:5e:21:3d:8b:88:40:5a:7f:56:69:3d:77:ba:
c3:44:c6:20:d9:61:7f:b7:32:68:97:3f:03:f1:5d:
4b:93:2c:72:4a:18:8d:fe:f5:a7:3b:05:b6:c8:44:
41:e0:b6:8e:5b:93:94:cb:34:a9:53:4d:77:a9:b5:
4f:2d:44:2e:2c:b8:97:52:6d:f5:80:15:6a:42:3d:
2b:f1:cb:5b:c7:d8:d9:67:10:1b:52:14:bc:a5:5d:
c6:d4:b4:25:6c:b7:c3:c6:72:d6:2b:f5:7a:bd:45:
57:8e:c3:3a:cf:3d:7c:ec:28:78:1a:bc:33:96:19:
f2:36:34:dc:66:00:78:d3:e2:b8:2a:b3:c6:a8:13:
e6:6a:1a:f3:b1:df:c4:db:e3:03:df:61:a7:da:9f:
0c:40:39:c4:41:d2:e6:7f:09:4b:be:01:75:71:60:
aa:c5:ff:b7:8b:92:4e:3a:83:e3:25:92:9c:85:9d:
ec:d5:d6:a9:ce:ac:75:5f:db:d5:8e:7f:15:29:0b:
b2:b6:cc:ce:2b:14:1c:61:60:21:ae:f9:24:c5:7b:
44:4f:bc:2e:00:74:a9:c2:9c:b0:fc:4a:d9:17:e0:
38:06:43:d3:3d:7b:af:24:72:b3:07:38:9d:e0:7d:
ab:c0:0d:52:aa:5a:1a:ce:16:d2:d6:a2:7c:63:c6:
4e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:92:5E:C6:A9:6E:BC:05:F2:DB:E8:EA:30:16:3B:FE:F3:5F:A6:5A
X509v3 Authority Key Identifier:
keyid:E0:69:1D:BA:FA:3A:8D:E0:70:B0:70:22:DE:9A:DF:74:34:1F:B4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Gkduvo6jeBwsHAi3prfdDQftPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/f75c7d-e5b3-442f-a084-fd49eb3f19b1/1/4Gkduvo6jeBwsHAi3prfdDQftPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:8b:68:39:ce:4e:47:47:58:c1:37:d0:47:42:48:35:c4:54:
cb:26:0f:e9:c6:9a:16:86:5f:9c:d2:72:d1:32:1c:bf:78:54:
32:57:f3:a5:dc:93:c2:2a:0c:a4:71:90:dd:b2:58:dd:6f:cc:
f3:b5:2f:05:f8:43:10:93:4a:db:3b:44:da:f3:22:bd:e9:0d:
5b:77:1b:86:32:41:85:8f:64:5c:61:6a:a6:4b:3f:48:4d:d2:
cb:4f:18:d5:27:56:07:a1:16:b9:5d:f2:3b:1f:e9:3e:15:67:
4b:02:fb:2c:08:b6:1f:29:45:4c:e5:8b:5d:36:72:c9:92:ad:
3c:46:eb:b8:ae:e5:1f:2c:ff:90:ee:b5:43:01:30:47:f9:b3:
7d:94:72:0c:05:b8:14:90:57:df:0f:28:97:98:eb:4f:c7:4b:
73:fb:32:25:7d:93:53:83:88:36:23:6b:ec:05:72:71:01:c3:
a0:7b:82:01:4d:6b:30:55:80:0a:1e:1c:41:5e:09:1a:03:c9:
39:53:81:48:80:5d:b5:db:6a:2c:ae:30:15:ae:53:99:ab:d3:
1b:67:da:31:91:ab:63:09:74:d7:60:eb:78:ed:cd:7e:8e:02:
71:f4:0d:5e:e2:01:fe:db:7b:66:44:16:c8:4f:8d:c2:4e:ed:
2f:ab:69:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:05:02 2025 by rpki-client