Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: wzJ4qLePvy3OdgkXJvTeprkzUWCpknOXz56lOj0SyxY=
Subject key identifier: 54:75:37:C6:44:96:E2:65:FB:04:F2:64:85:E5:83:AA:FE:17:F7:9F
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 019A4EF4DEC18531358A3D97200227FF2957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 05FF
Signing time: Tue 04 Nov 2025 13:01:01 +0000
Manifest this update: Tue 04 Nov 2025 13:01:01 +0000
Manifest next update: Wed 05 Nov 2025 13:01:01 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: 1hSVXy1vShuHcXxAWKWmMC+KQuqAtjTisORg+bXeotc=)
2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:de:c1:85:31:35:8a:3d:97:20:02:27:ff:29:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Nov 4 13:01:01 2025 GMT
Not After : Nov 5 13:01:01 2025 GMT
Subject: CN=547537c64496e265fb04f26485e583aafe17f79f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b8:19:80:bd:26:fc:e6:70:c8:65:26:4b:db:
b2:5e:7f:6c:dc:2e:c5:58:5e:33:4d:c5:15:cc:11:
2b:6b:75:ae:af:79:e1:ff:c2:e4:9e:63:e9:a2:31:
a6:9f:1d:cc:17:c3:65:14:10:44:b3:0b:7e:d8:83:
ca:e7:35:bb:28:36:f2:7d:4f:d3:7e:2a:6e:81:54:
f0:9f:99:c8:bc:ae:81:ff:5b:bd:4e:7b:cb:3b:9e:
ee:54:bd:5c:de:39:60:d5:40:c6:60:33:f7:ee:a9:
fa:34:6d:08:cb:fc:e5:3e:10:3c:78:6c:ce:44:93:
1c:c7:6f:c5:dc:4d:fd:92:44:43:da:2f:f8:53:a4:
59:5c:eb:71:ff:4d:7f:e3:43:63:63:8b:4d:f1:6f:
73:be:a0:68:31:33:3a:cf:9d:f9:75:76:90:05:77:
bd:ce:3a:4f:0e:5c:9c:c9:8a:df:97:a5:82:29:41:
ce:06:1c:0b:ee:50:c0:5f:47:3e:dd:62:22:1b:b3:
51:d7:46:5a:c1:b5:4c:21:35:6d:24:85:18:29:92:
71:70:c8:f4:56:23:df:60:cc:8a:db:42:9a:de:a0:
44:0e:8e:ad:18:e9:c4:13:b3:4b:66:35:d8:5d:ef:
61:d8:f1:e5:66:5f:f9:e5:54:c0:8e:e4:05:95:c2:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:75:37:C6:44:96:E2:65:FB:04:F2:64:85:E5:83:AA:FE:17:F7:9F
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:54:b7:9e:5d:9b:af:91:13:4d:86:a5:d4:38:44:2b:2e:ff:
45:7c:97:8e:f3:09:a4:25:57:ad:33:aa:00:4b:7b:48:ee:da:
23:4d:6b:e9:1b:8c:57:29:c2:36:26:df:01:0b:a8:29:7e:36:
1b:f3:5f:11:52:d9:1f:c1:e4:c2:7f:0d:f4:a5:37:09:cb:57:
05:31:e2:e4:98:cd:4e:5d:68:bf:6c:05:eb:b2:77:bc:4e:c0:
96:2e:66:8e:22:8f:d5:4b:58:20:23:db:79:2f:f3:88:9d:5b:
b3:47:22:1e:ab:be:41:2e:6e:81:28:1e:7b:a4:59:cf:8c:65:
ce:a5:50:91:8e:f9:3d:91:8a:6b:47:80:17:ca:cf:11:c0:e8:
84:1b:bc:93:76:6d:4f:70:1e:b4:39:d7:8e:d4:e9:3f:ec:bc:
5f:74:6a:73:da:6a:2c:c4:63:fb:9d:b2:53:91:d9:cb:cb:2b:
89:9c:e0:17:2d:5b:ab:45:25:40:78:fd:72:f4:f8:9c:0a:7c:
47:f2:b2:e3:64:8c:61:e5:51:e7:54:c7:ec:7f:20:af:6f:38:
4a:4f:01:eb:47:57:4c:21:2a:93:eb:ba:92:87:33:cd:2d:20:
83:71:ff:90:5b:03:11:c2:5c:71:11:fd:00:35:89:5f:b4:a2:
d9:d2:4b:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:52:48 2025 by rpki-client