Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: H+LKrLfZwVEnNxtevFwNorXmRhhEAICkxVLer+u/mCA=
Subject key identifier: BA:D8:A7:B7:91:C3:0A:60:BE:76:2C:49:25:B7:94:76:65:C6:09:3D
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 019A522C2DEEFF9565A702E3C6E775EDDDA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 0537
Signing time: Wed 05 Nov 2025 04:00:18 +0000
Manifest this update: Wed 05 Nov 2025 04:00:18 +0000
Manifest next update: Thu 06 Nov 2025 04:00:18 +0000
Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: xbkv0N+hFBRS/zONdFkMsrGpM465q6VViW1iPglwBmI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:2d:ee:ff:95:65:a7:02:e3:c6:e7:75:ed:dd:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Nov 5 04:00:18 2025 GMT
Not After : Nov 6 04:00:18 2025 GMT
Subject: CN=bad8a7b791c30a60be762c4925b7947665c6093d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e3:62:f5:a9:7f:93:0b:9a:7c:40:6f:3e:b4:
d5:84:61:8a:e5:76:59:2d:33:27:96:b3:1f:02:76:
54:5e:1b:36:f1:66:f5:ba:9f:26:77:92:fe:50:76:
a4:e8:59:b3:de:cc:e6:97:e9:f7:d3:ad:99:82:f0:
fd:f7:91:a5:46:35:6a:32:bf:49:17:fd:26:9b:a9:
d7:3b:ab:8b:21:92:09:12:84:10:2b:56:c4:17:11:
f4:a3:03:a6:56:54:17:94:e7:5f:39:31:07:92:d9:
c6:c2:8d:8c:44:22:d6:43:ad:5a:5c:32:77:c3:b2:
92:52:eb:ef:f3:89:30:10:b1:d1:6d:a6:10:82:c8:
38:4e:b0:bf:8b:3a:b0:d2:bd:ea:4d:af:6a:27:1c:
d5:6f:a6:fd:95:f1:57:34:68:c3:de:58:58:3e:1a:
08:c7:70:53:85:44:53:33:81:90:89:26:45:26:28:
09:f2:8d:e7:dd:e6:f1:8b:c3:ad:b3:9f:b0:f8:e4:
90:82:4e:45:f5:d4:6c:e1:ff:24:b1:e0:90:fb:98:
25:b9:51:07:97:b7:80:47:24:a7:f8:c9:51:0d:6d:
21:88:31:4b:7e:42:94:87:2f:a1:f6:1d:d1:d9:8f:
c5:5a:97:52:c3:d3:2b:ce:cc:6d:3c:3f:de:c9:f1:
35:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D8:A7:B7:91:C3:0A:60:BE:76:2C:49:25:B7:94:76:65:C6:09:3D
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:40:76:4c:1c:96:3b:67:25:6f:45:cf:71:4d:56:85:07:2c:
4b:2b:12:b0:66:22:66:67:b2:90:67:ec:58:01:b0:43:bb:f4:
2c:a4:c5:87:86:89:f9:1d:7f:68:14:8c:3f:97:a7:d3:ab:a4:
cb:93:9b:b0:fa:9c:d3:9d:59:c5:13:55:bc:0e:8d:af:0b:6d:
87:ff:b4:c8:4c:b1:45:54:47:bf:67:b2:28:0b:9a:82:bd:86:
bc:2f:3e:48:ab:5e:2b:a4:62:b9:33:8e:1d:af:a5:e5:a6:64:
d9:45:e8:86:14:55:32:a9:31:8c:cb:44:84:65:4e:a2:30:ef:
fc:3c:10:3f:93:d9:c3:d2:a1:9e:45:9b:5d:c9:bc:d2:77:b7:
37:6b:7d:b8:ea:72:0f:a7:41:78:92:4e:ea:d5:fc:56:12:ec:
ad:09:6c:58:3a:b6:be:63:f7:5f:39:0a:43:74:4f:0f:52:84:
9e:4b:53:0e:0b:57:05:8a:4d:db:bc:39:ec:fd:5d:b7:82:cc:
e0:46:2b:76:de:24:c8:8f:0d:76:5c:71:40:69:a1:d6:27:de:
ef:23:dd:26:98:e0:b5:08:43:98:c6:71:be:96:9b:f5:fe:ac:
86:c3:c0:15:5b:53:9e:d1:89:2f:e5:4b:f8:7f:b7:e9:52:d5:
29:ba:65:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:06:17 2025 by rpki-client