Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
File: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft (raw, json)
Hash identifier: 8H6X+J1XHXPjgl8BDhoLvQJqCZlMDxzsq/AC2UV73aY=
Subject key identifier: 7D:17:D4:B7:F5:6C:E6:2C:F5:4D:40:1E:07:BB:1A:D5:59:89:EE:4D
Authority key identifier: E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
Certificate issuer: /CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Certificate serial: 019A4E18D6C1992CC22FD8D520E2C39F0CEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
Manifest number: 0666
Signing time: Tue 04 Nov 2025 09:00:41 +0000
Manifest this update: Tue 04 Nov 2025 09:00:41 +0000
Manifest next update: Wed 05 Nov 2025 09:00:41 +0000
Files and hashes: 1: 4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl (hash: ThswtyvVn2mEykTsqWzixURxM19BjxI0IFIVg69bUV4=)
2: FDe_pjW_jnnn_wQOP-AVXix4Szo.roa (hash: VtZUc2Nt2trLnWpsaaIqK/XsZumvjhDGxHdBVKEJhRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d6:c1:99:2c:c2:2f:d8:d5:20:e2:c3:9f:0c:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e1dd07466278036ba5cd943d7b0e021cf8628
Validity
Not Before: Nov 4 09:00:41 2025 GMT
Not After : Nov 5 09:00:41 2025 GMT
Subject: CN=7d17d4b7f56ce62cf54d401e07bb1ad55989ee4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7c:b6:2b:f4:cb:a8:b0:c0:68:fa:a6:6b:92:
e7:4f:dc:3d:d5:d4:b4:7a:f9:5e:fe:a5:4b:f5:f9:
0d:25:4c:a8:70:6f:f4:65:b3:d8:06:ec:8d:d6:af:
39:0d:23:4e:03:2c:6b:cc:23:61:43:e8:e7:71:87:
d5:f7:91:74:03:41:3d:c9:e6:54:56:c9:46:2a:40:
09:29:c7:00:95:7f:44:f4:9f:21:ef:9f:af:4a:81:
bf:2b:37:7f:8d:19:60:81:1e:8e:4b:4d:98:1b:84:
63:29:53:89:41:a0:76:ae:c2:37:ec:7d:82:9a:a0:
76:1c:9d:f0:8a:29:3a:30:25:50:97:4c:c3:1f:99:
83:1c:34:ea:50:93:2c:b1:e5:c7:a8:32:59:22:cc:
17:02:87:23:c7:ae:08:fc:eb:54:b1:79:2e:4c:a3:
84:de:e6:48:1f:cd:3d:8a:8f:d0:b6:09:45:aa:68:
dc:d6:35:78:87:98:64:fc:07:ea:87:76:61:11:9b:
07:3a:36:53:46:ee:ea:be:24:e5:e1:43:1c:c3:e5:
89:54:1e:51:d5:de:9e:40:85:f8:e1:04:93:ba:7b:
57:1a:9c:b2:76:26:85:d7:80:81:96:89:28:4c:72:
b3:dd:dc:0f:0a:c7:e2:a0:5e:f2:a5:41:b2:72:dd:
7c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:17:D4:B7:F5:6C:E6:2C:F5:4D:40:1E:07:BB:1A:D5:59:89:EE:4D
X509v3 Authority Key Identifier:
keyid:E2:7E:1D:D0:74:66:27:80:36:BA:5C:D9:43:D7:B0:E0:21:CF:86:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/ae0d8b-4857-4ba7-b342-5ec336bf743b/1/4n4d0HRmJ4A2ulzZQ9ew4CHPhig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3f:13:bc:dd:28:c6:5f:57:d8:67:ca:d3:cf:f1:98:8a:a3:
b7:f7:7d:f3:c2:8a:c4:a3:ec:b5:10:d9:55:ba:12:8c:fe:82:
8f:f5:7c:77:8d:92:18:1b:6f:0c:aa:71:44:bb:53:ee:5e:f7:
77:64:01:12:e8:55:02:f6:f5:0c:3a:64:c8:2b:9a:34:00:a8:
f6:83:67:d7:c7:72:01:5e:3f:8e:39:42:18:21:f7:7e:3a:30:
4a:ff:3d:66:9e:9a:36:6d:db:48:ab:c5:d4:47:70:a5:d2:b0:
60:04:85:7c:67:bc:38:0c:d7:6a:33:fa:d3:f8:93:a4:27:7f:
fe:71:10:86:09:60:93:c8:a0:0a:fd:dc:f9:dd:8f:4e:c9:7f:
a7:3a:a2:3d:0b:1d:df:97:5a:e5:d6:0e:32:1e:56:40:61:ff:
f4:27:5d:fe:90:e4:b9:53:bf:38:12:c6:0a:cc:d7:1d:80:b2:
9f:0d:06:95:c2:bb:4a:ac:6a:0a:e7:e0:5f:97:6b:20:62:3e:
49:9a:90:e5:2f:f6:23:0e:4a:e4:ee:5a:2a:b2:ad:47:ee:5a:
af:aa:7f:fa:e8:2a:e0:b6:57:ce:85:d6:6e:41:f6:41:55:54:
3f:cb:a1:60:46:fc:08:f5:2f:c2:0a:0f:93:86:ea:33:5f:e6:
d0:e8:d7:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:09 2025 by rpki-client