Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: H2TlgUPV7ZoGu0PFi31xPJxWTJHvK0oObMdNwyRWw2s=
Subject key identifier: 70:E4:34:95:90:50:22:E9:1E:1B:2D:96:D0:B9:EE:85:88:12:B3:BA
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 0199FF22E0C4EAF88DC5351041D871102A73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 06AD
Signing time: Mon 20 Oct 2025 01:01:39 +0000
Manifest this update: Mon 20 Oct 2025 01:01:39 +0000
Manifest next update: Tue 21 Oct 2025 01:01:39 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: WhyEpGyRJiAPNvfeyHxjnyYpE3ClSNCMv5BKMIZQ8Uk=)
2: IrEzCg-L6ChV6NO0z_pSKTvObkE.roa (hash: BAxTmTfKNgnausi613sLgqp7n2C4MuqhHvDS7/1g8aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:e0:c4:ea:f8:8d:c5:35:10:41:d8:71:10:2a:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Oct 20 01:01:39 2025 GMT
Not After : Oct 21 01:01:39 2025 GMT
Subject: CN=70e43495905022e91e1b2d96d0b9ee858812b3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:c8:a5:c7:18:7a:b7:88:cd:dc:b4:80:3f:fd:
ad:c2:17:bb:a8:9c:0a:d1:fa:7f:42:56:61:d4:64:
45:78:13:86:49:3e:c5:6c:11:7b:80:2c:98:29:a8:
51:f9:a8:d1:54:70:52:06:6e:6c:cc:a5:0d:e9:d6:
11:30:e1:4e:4c:ac:a1:a6:7b:f7:5d:bd:f5:29:9e:
ad:fa:de:74:77:67:87:70:49:11:ca:3f:69:c2:57:
e9:1e:11:10:ec:ce:59:15:5a:34:be:49:fc:d7:38:
d8:bf:07:1d:b1:6a:9e:b3:fb:fa:76:f1:9c:8b:43:
67:6e:64:cf:48:56:2c:2e:0c:6c:c0:e6:6d:f6:84:
73:91:1a:11:e6:67:43:d1:ec:e5:58:f5:23:dc:aa:
2b:bf:24:24:db:6c:7c:0b:b2:68:6f:e2:81:35:72:
91:3e:3c:9c:ca:42:fc:26:be:93:ef:ad:6e:bc:42:
0c:1f:85:c9:cd:01:b7:8b:9c:89:fe:a3:d5:93:83:
28:b1:46:fe:bc:7b:30:9f:65:68:a6:43:ef:83:f7:
11:06:e7:79:ec:79:fa:93:c0:d4:b4:ae:e9:c3:f4:
34:3f:35:13:33:88:04:ef:4c:73:8c:14:c0:68:06:
2f:26:7e:96:1e:60:82:59:64:61:9a:f6:39:d7:e9:
90:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:34:95:90:50:22:E9:1E:1B:2D:96:D0:B9:EE:85:88:12:B3:BA
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ba:42:ff:0f:6c:7a:b7:35:03:84:eb:59:24:87:9c:04:91:
67:86:6f:8d:70:a6:a9:38:70:1b:91:53:e3:ca:07:f6:dc:20:
53:11:71:e2:a8:e2:fa:d2:23:14:21:9b:7b:a2:b6:4e:6c:a3:
d0:70:85:b2:71:c7:2f:00:29:4d:9a:5e:3a:ae:ea:b8:25:a9:
47:ab:1d:81:bd:35:f5:bb:01:d8:a9:5a:51:d6:5f:16:c2:92:
f1:17:e8:f7:8d:69:3f:cf:59:56:30:54:de:6c:eb:3a:4d:e3:
6d:51:2e:9b:e6:43:2a:a3:a4:81:4a:b7:24:64:7c:b2:19:f9:
7a:f4:1e:f3:39:72:bb:28:3b:a3:a0:5c:69:88:12:80:51:5a:
9f:b8:7c:e0:c4:74:61:16:d2:b0:19:ef:cc:6a:8f:b2:86:68:
a6:b9:b2:b4:1b:23:72:8a:02:05:67:f0:78:76:db:57:60:79:
bd:a7:08:2e:45:2e:b0:fa:96:ec:78:ae:ac:33:fb:3e:15:b0:
a4:e6:15:5f:3a:45:10:be:7b:0e:0a:91:0f:54:97:a8:17:bf:
9b:f5:20:30:d2:dd:bf:c3:ee:f0:f0:47:a7:33:b8:db:a6:73:
db:25:6c:a3:73:64:07:d5:bc:b9:1a:df:50:fa:8e:6f:b6:25:
d2:ed:6e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:30:42 2025 by rpki-client