Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: GIEoJ7XqMiTktoENHM5bcVOtKcEhmynT0Fy9gS71W5o=
Subject key identifier: 41:3B:B9:78:54:A3:06:F1:2E:41:4D:BF:5A:F5:85:B7:77:43:4F:ED
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 019A4FD01E882E1202BC61B1F8514D392880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:30 +0000
Manifest this update: Tue 04 Nov 2025 17:00:30 +0000
Manifest next update: Wed 05 Nov 2025 17:00:30 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: BF46FgBH9MZevY/1RocF31l241ICOInznstGDg4BOU8=)
2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:1e:88:2e:12:02:bc:61:b1:f8:51:4d:39:28:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Nov 4 17:00:30 2025 GMT
Not After : Nov 5 17:00:30 2025 GMT
Subject: CN=413bb97854a306f12e414dbf5af585b777434fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:39:63:b2:bd:fe:f7:1f:1d:cd:da:60:13:36:
da:6f:4a:29:e4:02:4f:f0:6f:08:af:cd:61:c3:09:
9f:94:f0:cc:b4:f1:77:fa:f4:d5:f4:8c:3e:1a:8c:
b4:f4:c1:54:fb:16:20:fe:89:57:80:6f:c0:b4:67:
73:48:0b:fb:a8:4e:79:fb:5e:d1:95:5c:98:ca:25:
3a:fc:72:09:71:78:57:08:5e:0c:de:61:1d:9f:35:
6d:f7:6f:6c:6d:16:10:e5:2a:d7:1a:7b:70:fc:3b:
7e:d9:07:39:c9:e1:4e:53:8a:45:a3:82:e0:dc:1d:
17:4e:1f:c9:4a:ba:81:4b:68:34:fd:8a:bb:81:78:
d9:dc:35:79:4d:18:48:4f:24:7c:2c:37:59:43:57:
9b:1c:39:64:aa:66:98:15:17:c3:f2:9b:47:e6:a7:
3f:13:e7:1f:00:92:bc:86:4c:39:0f:21:40:cd:cf:
7a:60:07:4a:91:d8:c0:89:49:eb:ac:61:97:9f:99:
76:00:f7:a0:0f:28:f5:da:11:23:1e:27:05:5f:da:
8b:e9:33:51:86:1d:d8:76:f7:27:39:49:65:53:08:
c5:05:21:33:18:66:1e:66:63:83:21:b9:e9:71:08:
22:b3:a3:fa:a5:3c:96:5a:10:8a:9f:0a:ac:22:ce:
4a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:B9:78:54:A3:06:F1:2E:41:4D:BF:5A:F5:85:B7:77:43:4F:ED
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:54:63:d4:a6:2a:73:36:c1:cc:0c:61:7a:7c:02:28:ff:f2:
95:8c:96:0b:b0:a0:ba:8f:25:c2:3e:51:8e:b0:b0:ad:69:b6:
b8:93:19:aa:a0:48:59:f7:3b:f1:f4:ee:98:bf:18:e1:96:01:
0a:83:0e:40:6b:9a:2e:f7:cb:f5:d0:a8:01:ab:64:05:a1:5e:
95:4e:6e:88:88:c8:8d:26:8f:1f:f6:d1:c6:e5:3c:19:6d:fb:
d7:3a:49:7a:e3:f2:83:0f:fb:6e:e8:3f:80:6e:35:c8:93:52:
05:d4:ef:6a:8e:bf:31:ea:3c:09:05:64:35:61:d6:18:b8:e3:
cb:b6:76:83:64:3e:54:91:6f:2e:3b:6a:b0:79:3d:fd:f6:db:
2a:27:42:0f:68:fa:ab:18:81:6c:66:22:7d:b2:aa:82:d5:fd:
24:cc:c3:32:1a:41:26:f2:9d:b4:f3:8b:ff:f3:b1:14:9e:fb:
72:a8:c3:08:db:6a:41:43:df:22:93:d1:da:6a:3f:d5:74:3c:
60:fb:90:69:00:87:0f:7e:ea:be:91:ce:0b:39:4c:bf:f4:c3:
79:ef:4f:73:93:fc:80:04:ea:56:68:fe:dd:84:8f:09:55:1d:
61:d5:0a:bf:d9:c2:ca:0a:ed:6a:30:b6:b9:fe:83:2d:7d:0e:
7f:68:1a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:44:32 2025 by rpki-client