Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: wY8DDkr+KzlDvupUCW5+xFbcvBZj9X5y7on7vwCf/m8=
Subject key identifier: 0D:95:9F:52:D6:2D:8B:C9:0A:18:B0:14:14:D7:FB:84:CC:CB:B5:8C
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019A507503AFB8B558BA6E6B0C26F831FECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 1717
Signing time: Tue 04 Nov 2025 20:00:37 +0000
Manifest this update: Tue 04 Nov 2025 20:00:37 +0000
Manifest next update: Wed 05 Nov 2025 20:00:37 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: eqDOleedUnQ0qDoXmJzDR+cPMy0Nl+KEeA26hh7SCXg=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:75:03:af:b8:b5:58:ba:6e:6b:0c:26:f8:31:fe:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Nov 4 20:00:37 2025 GMT
Not After : Nov 5 20:00:37 2025 GMT
Subject: CN=0d959f52d62d8bc90a18b01414d7fb84cccbb58c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:41:f8:68:f8:2e:5e:10:2b:30:77:7d:3e:d1:
9b:1d:ed:38:68:80:62:95:43:fa:9a:73:af:8d:d1:
f6:d5:ab:a5:82:8d:00:01:c8:dc:91:d1:cc:71:91:
07:e9:4c:99:b7:88:65:9d:be:38:95:d6:f0:2b:f4:
76:57:d5:2f:77:2a:17:fc:f2:da:ca:78:ac:17:4a:
e5:8c:5a:c4:16:4a:45:f3:80:06:3c:f8:b1:23:4e:
83:4e:5f:83:1f:6f:71:9c:fd:f7:28:ee:5c:8b:72:
8d:ea:a5:99:6c:98:1b:dd:b3:72:a4:e1:35:df:8e:
df:b8:84:76:cc:7d:c3:ee:c1:2a:0b:f3:ec:75:9c:
2b:34:d2:59:4a:d7:bb:c2:0c:26:3b:c7:72:98:db:
c2:eb:fd:91:ae:17:c2:01:64:d1:8e:cf:20:1e:13:
e2:a6:76:d6:ac:66:5a:76:e3:1f:79:50:d6:c2:31:
92:16:56:c2:43:34:58:f3:ee:8b:89:c6:50:6b:b2:
3e:e7:a0:1f:e6:4e:44:87:30:15:6d:f1:69:72:2d:
36:8e:00:ba:f2:05:56:ca:46:b9:52:95:fc:3f:2f:
2e:57:26:81:fd:9b:9e:4e:7c:9b:ef:84:fa:00:2a:
70:25:e2:19:94:77:10:68:4f:90:7c:63:a6:c9:36:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:95:9F:52:D6:2D:8B:C9:0A:18:B0:14:14:D7:FB:84:CC:CB:B5:8C
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:87:e1:90:cb:88:67:fa:2a:34:1a:34:47:10:a7:e3:47:1f:
26:6a:cf:b5:1e:7d:f2:96:9f:23:8c:2e:8a:a3:fb:dd:e6:02:
d4:98:a6:0a:af:35:c3:c1:0d:1f:63:3a:c1:19:29:e9:60:76:
14:68:f9:ab:6d:d9:a3:0b:7f:47:8f:40:fe:d3:a6:3c:22:d5:
b4:da:f3:77:ca:1a:d6:71:94:ac:29:7b:58:bb:b0:ad:78:24:
af:b6:9d:55:73:fd:e8:1c:85:41:0b:25:9c:ae:fd:92:ee:28:
90:4f:3a:41:0a:11:5c:24:02:eb:69:89:49:9e:d1:98:52:2a:
90:1b:cd:cc:fa:a5:0a:be:29:d8:71:b3:a7:08:82:fc:e2:47:
2e:13:07:17:7d:fd:35:12:8e:5c:61:a4:2b:3f:d3:21:fc:2c:
b7:14:bc:55:91:c7:72:31:29:8b:81:bf:7a:b1:47:fa:bd:30:
1d:9b:6f:71:f2:7c:b4:f7:3c:ea:82:f5:80:6b:a5:0d:07:91:
80:78:6d:76:9e:b6:db:a6:2d:51:da:60:d9:6c:e1:ec:b3:c3:
37:c4:bb:74:18:60:c8:8c:a3:68:68:d6:81:0c:59:24:23:c7:
ec:97:1e:90:65:b8:88:4e:c3:9b:80:b9:8e:20:56:ec:fd:74:
f3:b9:cf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:48:46 2025 by rpki-client