Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
File: 4koD-A9i2oZjUuGZCZfx1GzrL7A.mft (raw, json)
Hash identifier: 8VfnLHXFON4CXvUUIct0q2ZWdLy7Vd92PaNzJnxNbNo=
Subject key identifier: D1:AF:88:47:E8:6D:FA:DC:C3:8E:D5:2C:22:F9:3E:0D:A4:05:6B:18
Authority key identifier: E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
Certificate issuer: /CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Certificate serial: 0199FCC646B1506DFFD8F04D217076C00E8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
Manifest number: 139F
Signing time: Sun 19 Oct 2025 14:01:16 +0000
Manifest this update: Sun 19 Oct 2025 14:01:16 +0000
Manifest next update: Mon 20 Oct 2025 14:01:16 +0000
Files and hashes: 1: 4koD-A9i2oZjUuGZCZfx1GzrL7A.crl (hash: VJdPYQ89e0K/yMw5NZ46K0ay9QOkJfRaK4dopfpA0ps=)
2: _SDGNnpAJAI5c9TTproSlcDE1Ew.roa (hash: FWM2UQvUNqFuHmMAV7nZEdUtqbqVwiTq2Q2yh+QWjTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:46:b1:50:6d:ff:d8:f0:4d:21:70:76:c0:0e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24a03f80f62da866352e1990997f1d46ceb2fb0
Validity
Not Before: Oct 19 14:01:16 2025 GMT
Not After : Oct 20 14:01:16 2025 GMT
Subject: CN=d1af8847e86dfadcc38ed52c22f93e0da4056b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:90:d4:70:9f:de:c0:84:bb:14:25:56:63:8e:
f9:a0:4e:b5:c1:01:11:98:2b:91:9e:22:31:1c:be:
65:64:7c:9a:d3:39:36:6f:ac:a0:b0:1e:a0:bf:29:
0f:73:02:7c:42:8f:69:2c:9c:a7:2a:2c:97:94:a9:
27:f6:7a:93:06:89:2f:d0:28:bd:d5:d5:32:24:d7:
3f:4f:01:b4:5a:20:cd:47:c0:c7:9c:69:26:8f:0c:
14:4e:d6:72:51:a1:6b:27:c9:3a:69:e0:c1:3c:21:
87:d8:13:c3:ae:52:8e:f0:99:2f:2c:8e:76:50:e8:
b5:00:8a:8f:3e:39:61:7c:ac:33:60:91:d2:3a:ea:
b7:c4:04:47:48:4c:f8:3b:d4:d6:12:3c:7e:7b:ce:
b8:9e:71:b4:6a:85:cc:a6:1f:85:90:2b:f1:f2:10:
10:99:0b:8d:f5:ac:d7:ec:77:1d:93:bc:f2:de:f3:
d8:e5:b4:c2:83:77:b8:cc:e4:10:74:17:78:df:ec:
e7:84:64:17:1d:cd:99:ba:1d:fe:b4:80:0a:b8:13:
6d:5f:0b:e2:e6:98:85:80:44:a4:e9:ea:77:c9:26:
d9:94:02:75:29:c6:85:e2:f4:62:56:e4:e5:d0:25:
b5:4d:56:38:a8:d2:5b:50:9d:07:59:d7:d6:cd:c4:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:AF:88:47:E8:6D:FA:DC:C3:8E:D5:2C:22:F9:3E:0D:A4:05:6B:18
X509v3 Authority Key Identifier:
keyid:E2:4A:03:F8:0F:62:DA:86:63:52:E1:99:09:97:F1:D4:6C:EB:2F:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4koD-A9i2oZjUuGZCZfx1GzrL7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/540c5f-a2a2-44e4-9287-41b54500fdcf/1/4koD-A9i2oZjUuGZCZfx1GzrL7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:97:ff:43:6b:42:e4:ac:38:5a:1d:3f:cf:53:9a:1c:f2:ef:
12:67:c2:3d:5a:03:31:22:44:32:84:6f:2c:d3:d4:2d:47:70:
fd:64:e2:ad:18:0a:36:75:f9:44:64:c7:1a:2c:9a:1a:aa:e0:
c6:4f:e5:8f:54:2c:de:53:e9:e9:c3:61:89:18:ab:88:d7:18:
33:ef:e9:d1:d2:4d:3a:46:c4:bc:12:46:3d:d0:fb:8f:8c:ff:
3d:39:04:09:16:e0:2b:e4:66:e9:ad:e0:f5:f4:11:a8:3e:5b:
e9:cb:99:d7:38:0b:78:4a:f4:79:4b:79:e5:a9:3c:e6:9f:b6:
cd:d5:fd:6b:ab:31:b6:58:92:9b:03:8b:92:4f:e5:7a:cf:66:
27:78:6c:12:6a:1f:7b:b1:ef:f1:8e:2d:6c:fa:b0:5e:e6:70:
f9:f6:ed:0c:27:6d:6c:97:0c:fe:9e:47:b2:b5:15:e1:ca:49:
22:73:cf:34:d1:8a:b7:23:22:5c:78:0d:ec:cb:96:42:a2:17:
b4:c3:18:63:85:e3:4a:90:4a:75:f5:01:89:0d:22:73:6b:67:
47:c0:a0:60:03:eb:bc:b8:7c:7e:7b:41:16:ca:31:9c:09:ea:
da:71:09:84:c4:9a:65:4c:12:92:b6:82:04:ea:ef:50:62:6e:
d3:c5:7c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:59:53 2025 by rpki-client