Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: 62z9G99IAURo/gcH/gSnVKPFNDyewfLcm2sliyff8oA=
Subject key identifier: B4:DC:6A:9F:2F:DA:D1:47:DC:32:A2:3B:98:EB:4E:9D:0D:3C:7A:D3
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 0199FC21887321AF66C3A84F94A6D286A52E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 069D
Signing time: Sun 19 Oct 2025 11:01:19 +0000
Manifest this update: Sun 19 Oct 2025 11:01:19 +0000
Manifest next update: Mon 20 Oct 2025 11:01:19 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: zTQsEVGwHd/fTNkQZHtRnuX8yyfPu+eXsGgFud5WhU4=)
2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:88:73:21:af:66:c3:a8:4f:94:a6:d2:86:a5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Oct 19 11:01:19 2025 GMT
Not After : Oct 20 11:01:19 2025 GMT
Subject: CN=b4dc6a9f2fdad147dc32a23b98eb4e9d0d3c7ad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:08:46:a6:44:02:b5:81:35:75:3a:93:e5:9d:
ba:1f:00:19:9b:10:da:ab:d0:cf:c6:76:91:17:ec:
8f:81:db:c9:07:e8:e4:0a:70:36:65:a3:9d:c7:25:
d2:e8:86:8f:a2:83:b2:58:c4:d4:aa:1a:dd:24:da:
13:d1:15:cb:31:48:2d:97:c1:81:71:31:08:8f:09:
14:62:00:ad:a2:7f:eb:4c:6b:40:13:e7:a4:84:eb:
4d:f0:df:66:c1:c9:db:54:64:36:5a:fc:fc:05:d9:
69:03:2c:63:69:b0:03:50:a8:e5:8d:16:29:53:d0:
05:24:be:a7:f9:d4:bd:be:01:b3:cf:c5:5a:48:0d:
7e:15:a1:93:b4:89:8b:3e:9f:f0:c7:65:02:4a:99:
e7:4e:f4:45:02:d2:c2:34:6b:18:5a:3f:97:76:f2:
b4:e2:ca:34:6e:7b:41:b3:3e:9a:1d:25:ef:21:ba:
b0:0e:7e:fe:5f:fa:95:42:26:ba:ac:ae:01:3a:bb:
5a:78:de:72:07:bb:25:28:30:82:f2:cb:33:50:ca:
b4:13:48:cc:e7:41:e6:7b:fd:4f:16:39:f0:87:14:
b8:fb:ef:6d:5f:c4:01:bd:05:98:be:47:69:fc:18:
f2:c0:21:79:5b:b7:f8:7d:4e:15:43:14:22:a5:7a:
35:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DC:6A:9F:2F:DA:D1:47:DC:32:A2:3B:98:EB:4E:9D:0D:3C:7A:D3
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:03:81:f3:2e:da:6b:73:16:4e:0b:05:fd:96:87:6a:5a:9a:
f1:d7:2d:14:91:d6:88:32:35:d1:b3:93:98:49:8f:e6:1b:67:
ef:3e:53:08:da:a4:29:85:71:77:3c:b9:a1:bb:f0:7f:8a:4b:
4d:67:42:ea:3f:af:91:c7:83:5e:d1:a8:71:b1:54:2c:fc:85:
00:ef:b1:06:cd:68:e4:12:c5:50:6c:93:27:d0:9a:64:f9:de:
f9:1f:a7:fb:18:7e:67:a4:fa:27:cd:34:b8:2e:a8:3c:f4:d4:
5c:6d:16:22:1b:3f:36:6c:09:a5:12:b5:8f:54:2d:b7:f9:e2:
06:c8:5f:8e:2f:1f:5b:d6:53:71:3b:d9:af:60:7f:90:04:48:
e6:c6:1c:3d:7f:e3:28:8f:dc:15:2e:30:61:f3:73:bf:21:9c:
cf:de:74:ca:83:bc:bc:38:03:66:96:eb:5f:a3:48:26:5b:8a:
40:d2:33:0b:be:86:1b:35:71:0f:41:51:bb:96:a7:28:fc:15:
64:fb:65:dc:b6:14:2d:96:93:0b:1d:3a:40:95:0b:5a:11:1c:
32:10:9f:09:a3:3f:c1:c9:f5:ff:37:54:d6:98:dd:b2:78:75:
73:b0:06:63:cf:f3:81:04:5d:2f:c6:b1:41:91:3a:d3:6a:3c:
6c:04:07:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:47 2025 by rpki-client