Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: AK259To6TTpyhgL34Y1/XzgOMnnFMFI9Nor214qifp8=
Subject key identifier: 5D:F9:D8:CA:F0:34:8C:35:90:92:7F:80:C2:43:CA:8A:B8:97:AB:56
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 019A5307C936082D3F59F3726A66B3F442C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 158F
Signing time: Wed 05 Nov 2025 08:00:10 +0000
Manifest this update: Wed 05 Nov 2025 08:00:10 +0000
Manifest next update: Thu 06 Nov 2025 08:00:10 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: qMIk74WLZfTxeyIo94AK7UZKPYVSoaW0bMM6ABEWnSA=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 08:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:07:c9:36:08:2d:3f:59:f3:72:6a:66:b3:f4:42:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Nov 5 08:00:10 2025 GMT
Not After : Nov 6 08:00:10 2025 GMT
Subject: CN=5df9d8caf0348c3590927f80c243ca8ab897ab56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:59:30:14:28:d5:13:cc:14:65:cb:7f:b8:
b6:ea:83:60:0b:77:cd:77:ea:d5:be:94:3f:52:98:
de:5c:be:1c:28:d3:f0:0b:48:ec:fd:c3:ee:11:1d:
c6:3f:e4:44:9f:a9:5b:37:d4:05:2d:9d:8f:f9:cc:
13:76:73:4e:f4:76:64:75:a3:c1:3d:68:b2:02:21:
ff:5a:11:d3:70:aa:8a:70:ee:bb:48:6e:ee:e6:ca:
71:a3:e8:55:7b:56:0d:dc:20:5b:ef:2b:c7:b4:44:
32:f9:ba:7b:0a:b8:27:84:4a:91:61:8c:03:03:c5:
61:a4:f4:93:00:02:e9:16:ba:7a:8b:21:36:17:77:
e4:c8:96:ce:f6:dd:2c:cd:16:0a:85:fd:b1:28:b1:
b4:fa:4a:7a:2f:72:35:4b:04:b4:2a:63:73:8c:9c:
68:6d:3e:3d:c4:76:c5:e1:e9:a1:0a:93:55:ba:41:
d7:38:42:b6:fb:84:0f:50:0e:05:1f:49:08:61:52:
26:45:21:5e:93:8a:bd:0c:42:03:b1:20:4a:f5:ea:
7f:53:ac:ad:dd:1b:8d:7b:df:18:a4:09:dd:9a:c4:
56:14:c8:a1:58:b6:97:25:f1:47:9f:2e:73:fe:eb:
8d:e5:b8:11:e7:3d:06:d2:a1:e3:a0:8c:6f:ba:9e:
c0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F9:D8:CA:F0:34:8C:35:90:92:7F:80:C2:43:CA:8A:B8:97:AB:56
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ed:7c:31:84:a1:7e:c5:92:21:71:d3:43:12:bc:95:a2:3d:
0b:c0:a4:f3:84:c3:12:6c:79:b5:c4:14:58:d4:69:45:25:21:
f3:6f:04:0e:d6:e4:30:bd:f4:8f:80:94:cb:23:91:ec:4c:c6:
3f:15:29:97:40:b2:c2:44:48:6f:a4:c9:55:dd:b2:46:ba:f5:
90:38:12:8f:8e:f3:7f:2b:f8:4b:95:26:7a:8a:85:bb:0e:a5:
9e:6d:2a:f3:3f:6c:af:81:e4:f3:00:72:e5:f8:b3:4c:f5:a3:
1f:06:68:78:67:84:43:19:e7:7e:d7:de:0d:2e:5a:d8:ab:64:
93:c7:5d:6b:3f:5e:d9:ac:b3:dc:dc:cd:85:e0:1e:dd:98:9b:
65:9d:3d:e8:b4:55:7d:e1:22:3a:ad:9b:98:5c:8f:4a:c6:fa:
59:55:8a:be:56:43:6e:2a:a6:7d:12:28:9f:94:08:97:53:e1:
5e:65:bd:d2:59:c0:73:cc:6d:1b:20:7f:6a:67:c1:8b:13:a1:
54:fc:67:78:55:50:d7:41:18:08:c3:30:af:e1:5b:2b:da:9d:
81:0d:2c:28:fd:ce:59:79:54:9d:50:46:a8:30:25:b3:54:61:
b3:08:f0:f3:e3:fe:30:e4:0a:b5:84:3d:0e:46:0f:0d:8e:77:
f2:aa:05:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 16:37:19 2025 by rpki-client