Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
File: rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft (raw, json)
Hash identifier: CZK8xj/yXBw3xLRJmTgVocGBGv/cJaVZaVyDp6A6DoQ=
Subject key identifier: 88:2A:A9:6D:1A:F6:A9:49:A2:96:EC:1D:9B:DC:E0:ED:A7:2C:45:AC
Authority key identifier: AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
Certificate issuer: /CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Certificate serial: 019A4DE16B72A0CDECABBAA850DF9C5E69F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:09 +0000
Manifest this update: Tue 04 Nov 2025 08:00:09 +0000
Manifest next update: Wed 05 Nov 2025 08:00:09 +0000
Files and hashes: 1: AwXuQoOBDpLkL6JkvNNI78Almh8.roa (hash: rgsGgbJMkxlD2Xt53P3qCIDlwFDG3I1YNJZMV8rGCso=)
2: rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl (hash: IjkWq2ePTif3aT0FrXIU5+y0xb/Zm4nIvnWlJOpMXLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:6b:72:a0:cd:ec:ab:ba:a8:50:df:9c:5e:69:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6e3e13111439147f65d337d5f0b1bc2ed79434
Validity
Not Before: Nov 4 08:00:09 2025 GMT
Not After : Nov 5 08:00:09 2025 GMT
Subject: CN=882aa96d1af6a949a296ec1d9bdce0eda72c45ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:35:91:00:92:e9:0d:a5:1a:cd:bf:7d:3f:
0c:95:9b:af:54:d7:34:1a:d7:47:1a:8b:17:a5:c1:
b2:be:d9:24:68:c8:a4:a1:94:58:53:86:14:2f:62:
78:7a:bd:4b:40:02:e2:cd:61:d3:1f:0d:1d:14:f7:
70:70:3b:45:82:b4:a4:5d:9b:7c:51:97:bc:8d:d6:
22:a3:79:04:3f:48:6e:98:d7:19:3b:c2:a2:f3:dd:
98:08:08:ed:58:8b:5a:aa:1e:66:4b:03:9f:20:d1:
48:5f:c2:61:27:06:c1:b7:92:ac:fb:83:ca:42:8c:
ea:3a:17:b7:92:e1:1b:f6:f8:2f:26:98:c0:6c:f0:
20:bb:9b:3d:63:e5:bc:7c:20:ba:5c:b1:c6:fb:61:
6c:ae:ab:6c:40:f4:d3:f2:11:74:bd:e1:79:4a:7c:
6e:c3:34:20:e1:fa:77:3e:7f:ee:1f:8d:b9:bf:29:
f7:41:cd:ed:39:54:bd:33:12:79:96:6c:f4:97:6f:
97:6b:29:5f:fc:d7:f8:9d:a4:92:9b:e6:3a:1b:4c:
b3:9d:0b:78:98:e2:40:72:ef:84:d6:91:44:97:86:
b8:2a:cb:ad:eb:86:fd:03:94:8c:56:0f:a4:e1:9e:
ea:03:89:a4:ea:14:97:a4:5c:cb:3b:c0:75:46:56:
06:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2A:A9:6D:1A:F6:A9:49:A2:96:EC:1D:9B:DC:E0:ED:A7:2C:45:AC
X509v3 Authority Key Identifier:
keyid:AC:6E:3E:13:11:14:39:14:7F:65:D3:37:D5:F0:B1:BC:2E:D7:94:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rG4-ExEUORR_ZdM31fCxvC7XlDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/12ba2a-0cca-437a-985d-fefe857fea80/1/rG4-ExEUORR_ZdM31fCxvC7XlDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:81:40:ef:8d:33:2e:69:f6:79:12:8d:bb:d2:df:73:c0:
67:4d:7f:a9:32:48:c1:36:56:12:8f:37:af:5f:1b:47:d9:37:
a2:c1:37:37:83:4e:a0:ae:bf:d7:ae:6a:51:fe:c8:f8:fe:1b:
8a:a3:52:35:6e:45:36:a2:20:47:e6:54:ff:e2:0c:a9:1b:27:
1d:98:cb:95:0b:ee:e0:0a:d9:12:0d:26:41:79:78:58:36:2f:
e0:ea:3b:5b:fa:75:07:a7:08:5b:c0:43:94:a5:ad:8f:32:ba:
4e:e2:9c:35:d0:89:2e:58:a2:62:ec:d6:57:01:f5:56:42:6d:
8b:57:27:a5:03:98:32:b3:72:78:b6:8f:d1:b3:ba:d2:e3:01:
98:41:c0:b0:56:5e:80:0e:6c:09:e3:22:e1:82:bc:40:0d:74:
78:93:ff:49:80:0f:94:0c:d3:e0:23:3b:10:ab:d0:e9:88:af:
73:c7:10:ad:b4:e2:78:e3:71:17:df:20:bd:0e:c1:4a:c2:c4:
85:f4:ea:6f:27:e8:f1:ea:4c:b4:3c:f6:92:9c:ff:d6:24:60:
01:36:42:eb:f9:17:0b:4b:3f:88:87:49:ce:3b:e3:16:5c:58:
42:26:5f:3a:bd:99:b1:73:40:e4:3a:0c:20:cd:de:1a:03:e9:
e8:24:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:56 2025 by rpki-client