Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: B1l4mxYonBkkj7oVjWnCsV6JRU1hdYq1XA4fK2zL31I=
Subject key identifier: 69:39:DB:A3:74:55:2A:3F:80:94:FD:A1:57:3C:3F:FE:6E:36:C2:D5
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 019A53082633A3AAC114BBA249EA93139460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 064E
Signing time: Wed 05 Nov 2025 08:00:34 +0000
Manifest this update: Wed 05 Nov 2025 08:00:34 +0000
Manifest next update: Thu 06 Nov 2025 08:00:34 +0000
Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: rAQW1mxhJlfOH0EiJFts+WHm81RapxhB9kaivm7GmPc=)
2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:08:26:33:a3:aa:c1:14:bb:a2:49:ea:93:13:94:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Nov 5 08:00:34 2025 GMT
Not After : Nov 6 08:00:34 2025 GMT
Subject: CN=6939dba374552a3f8094fda1573c3ffe6e36c2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:a4:43:00:46:b5:36:d7:13:93:42:bb:e0:
f6:82:76:5d:70:69:bc:7b:6c:7c:66:6b:3c:18:ef:
58:1c:af:64:69:f5:9a:9e:34:c3:a7:8c:0d:53:dc:
04:38:e6:91:94:ea:de:36:52:49:24:74:9c:b6:65:
01:bd:55:39:2a:4b:6b:7a:ec:d0:4e:97:f3:dc:7e:
47:5c:7e:28:2f:64:06:e8:93:bf:36:b4:dd:b2:8f:
04:47:45:3d:b4:70:65:46:94:65:69:3c:37:ac:f1:
5e:5d:ed:dc:61:9d:05:cc:b0:a8:92:5d:0a:ea:e8:
7d:a0:6f:d6:eb:1b:f9:08:b9:22:80:a4:ff:4a:ec:
94:7d:c3:1d:8f:d0:bc:c1:65:95:89:22:53:ff:9c:
e1:b6:f0:6a:52:ea:ed:e5:8f:ba:d4:36:f5:a6:91:
2f:48:81:5a:f3:18:af:df:64:c7:ac:53:f3:c7:35:
10:a4:87:4b:82:77:62:2e:de:24:98:92:9b:5e:d8:
d2:2f:ec:e6:75:49:b3:0e:0e:e1:80:53:55:c5:fb:
3b:35:dd:5d:e5:d2:80:e5:8d:8e:39:2a:5b:79:3d:
cf:b8:76:70:ef:31:01:53:65:0b:ed:14:86:f0:7f:
8f:69:71:17:8f:65:3d:0a:8e:4a:3f:9a:55:10:64:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:39:DB:A3:74:55:2A:3F:80:94:FD:A1:57:3C:3F:FE:6E:36:C2:D5
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:0a:8c:ba:e4:de:97:5f:af:59:14:bf:6c:6f:d5:8d:9e:b3:
c7:06:8e:c5:24:82:5a:9b:1e:57:a4:69:cd:79:37:f6:ac:02:
2b:d6:15:36:bf:bb:9a:0d:a3:a9:2f:66:5f:0f:51:a9:07:d7:
b2:0e:a5:dc:25:be:d9:64:fc:76:41:9d:5a:c9:56:e5:83:0b:
89:fa:27:7a:fd:ce:c0:69:b8:9f:f2:84:04:7d:48:15:55:a2:
c0:07:56:04:fa:1a:7f:ba:a9:85:d3:62:30:e9:84:11:18:cf:
ef:40:c6:a5:ad:81:2f:bc:e9:17:cf:91:bf:f2:4c:e4:6a:de:
0f:91:d4:13:01:00:bc:9a:44:60:79:e5:50:de:38:4a:d8:29:
5e:df:6f:43:4a:a4:c2:8d:ca:27:6f:57:fd:e1:ca:25:db:06:
4c:8e:66:a4:df:77:79:0d:27:61:bc:90:a1:91:27:2b:24:6d:
35:c9:a9:17:6f:19:69:ff:a9:de:0e:7a:be:c3:35:cf:6d:c0:
57:6a:ac:c8:05:e3:d3:8d:d8:1b:a4:2c:a3:2d:9c:96:5a:c0:
47:87:60:b1:b7:c6:a2:f8:ee:20:99:f7:18:62:4d:f4:9e:06:
d8:2a:3b:bf:22:7a:4d:fc:65:2a:a1:46:33:77:53:ca:7e:ba:
8b:71:07:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:08:46 2025 by rpki-client