Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: 60FvliHQAoe0pAxOvzgYIOJDitPZq6YD/XzqGF+0L2w=
Subject key identifier: 64:48:59:05:2D:B1:AB:C5:17:26:FD:7C:41:BF:7F:5A:71:41:00:30
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 019A4E5007A9E5FC468FF73970C0CEC943F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 0FDB
Signing time: Tue 04 Nov 2025 10:00:58 +0000
Manifest this update: Tue 04 Nov 2025 10:00:58 +0000
Manifest next update: Wed 05 Nov 2025 10:00:58 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: V6TgS4qLV9GmkGzqHXULmn7/n6CB43aZEvuV6iBR/jQ=)
2: 7wwToY-I4oQ7zD9rX8H-_4Eb5b4.roa (hash: Hl91ZV/in/bxS0Jez/RCMKQB6Lc2qVYsfbP/T+sqKUA=)
3: VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa (hash: GsTYSMVbMlYjzB/yj1A15/Pa7xUVFVUn8yyhUswywB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:50:07:a9:e5:fc:46:8f:f7:39:70:c0:ce:c9:43:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Nov 4 10:00:58 2025 GMT
Not After : Nov 5 10:00:58 2025 GMT
Subject: CN=644859052db1abc51726fd7c41bf7f5a71410030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:fc:fe:34:ed:c9:f9:15:2a:eb:aa:4a:6e:
9f:e7:92:41:f8:05:ec:9c:f3:53:29:5c:a6:fb:bc:
f7:ce:d2:88:13:d8:98:b8:2a:4c:4e:22:98:aa:1f:
3e:4f:47:f5:00:ee:bd:c4:36:d2:87:d2:6a:5a:d8:
f6:5b:ba:7f:12:a7:93:91:86:78:ee:7e:8a:04:5f:
5a:08:77:1b:4b:ef:0e:58:5c:48:57:d2:31:f6:b5:
23:86:2b:61:bf:2e:29:b1:ad:7a:40:95:92:b9:2d:
ea:ad:00:a6:36:3d:ad:55:e4:2e:88:3b:85:a8:e2:
bf:0b:f2:c8:7a:26:7b:fe:5b:0b:a6:4a:91:a9:74:
82:db:b3:47:06:fa:73:bb:1e:41:c1:35:87:66:00:
92:1d:71:ba:62:6f:92:c3:33:66:ff:cc:cb:43:99:
a1:52:bf:ee:cb:3e:ec:37:4b:d4:fc:e6:c1:96:5c:
e8:9c:d3:c6:1f:ac:a1:50:7d:79:36:e9:66:f5:a9:
94:c1:96:01:c7:0c:d4:7d:dd:d6:f8:37:d9:18:5b:
1d:2b:e9:72:3d:fb:ee:5c:c8:b4:11:3f:30:b2:63:
79:85:18:89:d5:1b:9a:03:9f:fa:c7:07:3b:de:bd:
bc:d5:0c:eb:7c:60:b7:b7:a9:f9:64:7e:06:f5:3f:
43:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:48:59:05:2D:B1:AB:C5:17:26:FD:7C:41:BF:7F:5A:71:41:00:30
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:dc:23:d9:15:2e:00:6d:39:64:f1:25:fd:41:43:75:8b:45:
6e:dc:89:81:ef:04:79:85:18:0a:05:25:fe:c1:18:03:ac:35:
c0:0c:76:7e:09:7d:0f:2b:71:98:c6:36:5e:86:4e:c7:54:78:
e3:8b:9a:1a:16:08:e0:5e:51:2e:16:72:18:7d:27:4b:f0:5b:
21:f6:32:bd:61:f8:e7:82:b9:a2:29:d9:f6:50:4d:67:d1:fc:
ac:af:d0:a2:bc:38:8a:80:fd:df:32:b4:5b:e2:4a:da:f5:a9:
f7:23:d3:64:0f:3d:a7:f6:cb:12:77:5b:6f:04:b6:78:5e:76:
30:90:a1:26:02:6e:d3:11:53:ac:4e:85:4f:59:cb:67:9d:12:
d8:23:ad:fc:ac:9a:44:4e:54:15:4a:7f:2d:96:ab:b8:fb:60:
aa:5f:fd:a1:00:29:54:05:7b:bb:32:82:0c:12:ab:3f:c9:fa:
c6:04:fa:d5:75:b8:ff:a1:45:35:8d:fe:f6:8c:42:f5:e6:16:
3d:97:85:70:2e:95:47:ab:f2:46:49:97:19:3e:bd:ea:14:75:
b5:e4:10:cb:45:05:6c:8a:c3:08:9f:f1:43:b2:da:b3:04:e8:
c9:a4:33:65:14:b9:9a:9d:89:ba:9f:4e:48:3d:71:72:97:4f:
c6:c7:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:32 2025 by rpki-client