Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
File: _4IIsSnFPofD8NDtG8qFcwFA85A.mft (raw, json)
Hash identifier: EKZbKUlVap6I6FRJSScULIpjwMf+ojhF7bd6FbECBis=
Subject key identifier: 51:29:86:8F:A3:48:03:F7:07:92:C6:51:1A:0F:10:6E:BD:62:D1:B4
Authority key identifier: FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
Certificate issuer: /CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Certificate serial: 019A522BFE0F5F9A3B272F3286FA471C9704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
Manifest number: 101D
Signing time: Wed 05 Nov 2025 04:00:05 +0000
Manifest this update: Wed 05 Nov 2025 04:00:05 +0000
Manifest next update: Thu 06 Nov 2025 04:00:05 +0000
Files and hashes: 1: _4IIsSnFPofD8NDtG8qFcwFA85A.crl (hash: IYRqeZfIVa0+alfDM/Q2zEP5sPsPU2vazkP49wr/uHA=)
2: qGecERglbMsiHMQJoiUSFGALt-E.roa (hash: yLMKR6LctC/w2fvLTclquZCs4hF15ArbhdOh5oCoDz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2b:fe:0f:5f:9a:3b:27:2f:32:86:fa:47:1c:97:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8208b129c53e87c3f0d0ed1bca85730140f390
Validity
Not Before: Nov 5 04:00:05 2025 GMT
Not After : Nov 6 04:00:05 2025 GMT
Subject: CN=5129868fa34803f70792c6511a0f106ebd62d1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ec:2d:95:25:e8:e4:4d:46:c6:6a:24:6f:bd:
8a:28:96:27:69:09:f8:af:52:55:6e:bf:34:1f:fb:
c7:dd:44:55:36:a2:ab:9f:bd:77:c9:88:cd:8b:0d:
7c:79:8e:1b:fc:ec:46:db:2d:1c:af:da:45:13:5d:
1c:9f:5e:2e:a4:64:36:ce:5b:81:81:08:2f:2d:94:
22:57:64:d7:1f:42:8b:c1:ea:36:be:88:02:75:9c:
5f:25:3a:70:18:a7:22:e9:7d:f2:8a:49:6a:84:ec:
08:9c:ac:22:f5:9e:ce:10:a0:e5:58:f3:89:04:9c:
c0:ae:81:9a:d3:d4:dd:48:ab:ae:ce:b9:b6:e6:ed:
21:be:e2:13:ee:01:99:f7:32:19:be:3d:95:98:97:
ff:eb:66:02:8f:82:fd:ae:9d:c0:0c:06:79:0a:2a:
93:6a:12:87:14:b1:b3:b7:ef:3d:c5:13:4e:44:c6:
04:c4:01:b2:e2:cf:46:ac:70:15:4f:18:58:96:9b:
87:31:36:c9:4c:a6:04:ee:30:d1:fa:e5:65:c3:2f:
a7:43:30:55:0a:7b:1f:a6:c2:3a:10:75:c8:d2:4c:
60:6e:a3:b1:59:fa:40:f2:3a:21:e6:76:ec:ff:d1:
a3:88:4f:87:36:06:74:e8:32:83:e4:af:02:6f:55:
f9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:29:86:8F:A3:48:03:F7:07:92:C6:51:1A:0F:10:6E:BD:62:D1:B4
X509v3 Authority Key Identifier:
keyid:FF:82:08:B1:29:C5:3E:87:C3:F0:D0:ED:1B:CA:85:73:01:40:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IIsSnFPofD8NDtG8qFcwFA85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/9680c7-57d7-49c6-8b63-40153c5d0a47/1/_4IIsSnFPofD8NDtG8qFcwFA85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:70:1b:6f:8d:14:d7:4c:c1:5b:44:09:fd:a2:21:6d:28:d5:
d6:e8:ba:18:75:55:bf:ae:e7:8b:6b:d3:12:cb:06:9d:6e:64:
ec:8e:21:6e:69:d2:85:7b:52:08:98:14:93:3d:68:72:b9:04:
96:82:a4:b2:24:c6:52:4f:3a:1b:a4:10:06:1f:a9:d3:6d:71:
79:a5:50:f3:8c:be:96:21:34:08:7e:64:ee:c8:80:c7:17:04:
f3:d2:30:09:a5:60:5d:73:0a:85:c0:67:75:40:c8:d1:36:1e:
c7:23:ad:4a:7b:0d:25:9f:e4:ec:04:6f:1c:9e:cb:89:b6:29:
b2:1c:d8:af:de:f5:77:0a:ea:32:da:3b:52:0b:0c:69:44:02:
b2:7f:a6:19:f8:1b:f0:b0:52:06:f7:40:78:1a:90:41:a9:1d:
86:67:86:ec:57:02:df:2f:a6:2b:05:1f:20:18:4b:e8:de:41:
2c:5a:ad:59:1c:fe:31:bb:d9:d9:7b:fd:52:6e:9e:d3:58:c5:
a9:5c:c9:11:7f:ec:4f:13:2c:a1:e8:41:9d:4f:0b:ef:00:9e:
ba:c0:2f:d5:c2:56:9a:f0:6c:64:5c:b8:e3:f1:93:8c:bd:85:
5c:71:ee:1c:77:73:29:50:aa:34:af:c1:c6:6b:63:cd:5b:66:
d8:af:ab:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:53:38 2025 by rpki-client