Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
File: 4NXVYedu8lnEoC3zDzUGTe3t8tc.mft (raw, json)
Hash identifier: 0RnMv0tCZooDVgyXqME5ll+diUrRZywax5mKFsqHfpQ=
Subject key identifier: BF:6A:9B:76:D0:91:E4:7B:49:FC:50:1A:96:53:6D:67:18:5A:2D:D9
Authority key identifier: E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
Certificate issuer: /CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Certificate serial: 0199FC8F534AC626DC8779D39969915308B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
Manifest number: 05AE
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: 4NXVYedu8lnEoC3zDzUGTe3t8tc.crl (hash: o3MAy0L9if4d0m/pej5O0ze5f4TWlXKa2xnWAQkzsS8=)
2: 6pWip88KFCQlBaqpP5OAyYyKKL0.roa (hash: 2kxcH3Ha1RRmUiGnKMePTKTFBssB2qkinO67e/D6ssU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:53:4a:c6:26:dc:87:79:d3:99:69:91:53:08:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0d5d561e76ef259c4a02df30f35064dededf2d7
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=bf6a9b76d091e47b49fc501a96536d67185a2dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e2:83:92:1f:89:f5:37:81:c1:2f:6f:77:f5:
53:64:a9:ad:77:b0:47:16:fa:80:9b:c8:de:d8:8b:
ed:d8:f0:db:21:0f:24:7c:4d:66:92:47:e6:e7:ff:
eb:65:fa:b3:42:30:79:86:c0:f9:f9:87:2b:77:6f:
f2:e4:eb:7e:44:3a:e3:f3:4c:6d:7b:90:a1:de:ac:
54:cc:2e:b1:cd:b2:aa:19:37:17:cd:16:7a:ca:a5:
a3:b4:d1:9e:27:a8:10:f4:ed:da:e7:a6:c0:44:f1:
92:c1:02:67:cc:e7:cb:cc:3b:83:cd:7a:ef:a9:a6:
50:25:95:9a:94:0b:66:c8:86:ab:9f:48:61:5e:a9:
fe:59:bd:81:fd:52:7d:df:33:27:26:7a:22:36:c1:
b7:30:7b:c3:b9:7b:cc:ad:17:19:00:46:4d:64:b2:
e0:40:86:f6:c0:d0:66:3f:b4:44:eb:21:c1:60:73:
3d:95:a3:db:24:a1:c2:75:5a:26:14:81:5d:e6:b4:
64:71:d5:83:19:17:a8:fb:21:ad:46:87:0c:e2:fa:
95:73:c8:d9:8f:d9:6f:91:43:ea:6e:4c:e2:9c:f5:
fe:13:4e:3a:f8:1a:9c:48:e9:b3:a0:10:da:0a:ff:
9d:e2:a6:19:b3:9a:89:cd:f4:2c:ce:fe:a4:d1:db:
b2:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:6A:9B:76:D0:91:E4:7B:49:FC:50:1A:96:53:6D:67:18:5A:2D:D9
X509v3 Authority Key Identifier:
keyid:E0:D5:D5:61:E7:6E:F2:59:C4:A0:2D:F3:0F:35:06:4D:ED:ED:F2:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4NXVYedu8lnEoC3zDzUGTe3t8tc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d45469-0c7b-4410-bb5e-7dc528aa5d4e/1/4NXVYedu8lnEoC3zDzUGTe3t8tc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:5e:38:1c:17:95:95:fd:07:5f:48:e8:0c:3e:8e:a3:f7:27:
a3:44:da:2f:91:f3:83:7b:f2:41:ca:6f:0e:c1:6f:4f:13:66:
fc:e4:09:07:55:9e:a4:25:27:d7:9b:d0:30:7d:10:63:2f:ed:
7d:4a:19:5e:dd:58:77:b3:1a:5f:df:c0:8b:eb:5a:a2:3d:d9:
7b:ba:25:da:09:4c:d5:58:06:2e:06:87:e9:09:f0:48:07:1c:
b5:cd:b4:34:ba:46:70:35:20:22:c7:52:bc:80:a8:f0:57:27:
51:ad:9b:d4:18:54:53:d0:e8:65:60:e3:5d:da:46:6d:ac:02:
1d:c8:cb:b7:19:a5:31:58:78:61:5f:29:ee:40:b1:ec:ef:5f:
fd:ad:0c:29:1f:87:85:0b:d7:a2:af:2b:1a:14:e5:37:3b:43:
a0:13:54:43:6e:e8:88:d0:2c:65:d7:02:da:d5:03:31:e2:a5:
b7:9e:aa:15:5d:5a:d4:4f:25:9f:2e:cb:b7:84:37:f5:fe:7d:
e5:2c:ce:86:6e:15:75:5a:3a:c6:28:2a:b6:2f:aa:c8:15:2c:
dd:24:a0:c1:8a:a9:e8:e4:2b:f1:fe:5b:05:7d:98:6d:62:d1:
27:f2:3a:47:ac:93:94:a5:72:13:ca:2d:78:bc:78:4f:06:a2:
b9:2e:7d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:50 2025 by rpki-client