Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: CtjLsklHo8j9A1D9knYpTYb9W9gc5QocSAkZ5BRIlLc=
Subject key identifier: A3:56:F8:E8:D2:11:00:7F:94:A1:59:76:9E:0E:BA:C3:E7:C0:CE:0A
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 0199FC58F5A0AFDEDD4B985F7A06D5583257
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 116C
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: ZTx00CtvOuEGY6Sy9ywc/4wHYkezh35ScOks1M9m7W4=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f5:a0:af:de:dd:4b:98:5f:7a:06:d5:58:32:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=a356f8e8d211007f94a159769e0ebac3e7c0ce0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c0:8c:d6:d3:75:b3:bc:14:0e:97:02:a1:0d:
ee:94:99:a5:5d:fa:89:03:f7:ad:db:9c:44:28:f0:
62:3f:22:91:7f:c7:fe:24:71:e4:fd:65:16:2a:93:
a2:14:85:a5:ce:8d:31:41:db:51:9f:f0:c1:52:82:
c1:e6:2b:48:16:f5:42:58:8d:0d:2c:84:66:b4:8a:
f7:2d:03:34:6c:95:28:4a:af:45:f5:9d:4c:2a:f7:
10:c4:20:96:87:8b:0c:92:a7:42:f8:8c:19:df:55:
5a:ca:95:39:1e:07:d1:81:a5:2a:26:d9:47:e1:6a:
cd:de:1c:cb:3a:58:61:f0:ad:62:52:56:b9:69:5a:
32:23:c9:26:d3:1c:3a:a9:57:5f:d9:f9:6d:5b:5a:
6e:78:70:b2:88:cd:f9:c1:53:f3:e4:e0:87:92:0e:
68:c3:29:88:82:b8:fc:84:1e:f5:c5:7d:1a:ba:bb:
41:a4:6e:9e:1f:5d:90:b5:9b:2f:3e:cb:bf:5a:d9:
6f:71:56:b2:63:da:b2:23:2a:3d:f5:2e:85:65:7d:
9e:cb:6d:a4:af:1d:67:71:9b:22:b9:d1:fd:4b:d5:
02:a2:57:44:a2:d9:58:f1:12:2b:12:e8:71:9f:9f:
d4:1c:13:f1:c9:44:15:ef:23:0e:41:1a:e0:c1:21:
fa:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:56:F8:E8:D2:11:00:7F:94:A1:59:76:9E:0E:BA:C3:E7:C0:CE:0A
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b8:5d:3e:30:16:ea:0d:ee:ec:ba:a7:e2:5e:65:de:63:26:
3b:dd:79:b5:8f:93:b9:12:5d:91:8f:e7:8e:90:d1:07:93:11:
b9:e6:37:c7:27:9e:d1:48:cb:88:06:21:fe:99:68:fa:c4:75:
c0:5a:3d:37:df:dc:33:02:59:02:73:06:9a:40:38:5f:53:53:
9a:76:87:3e:ff:cc:4a:98:a1:45:20:ea:4f:24:3d:1d:40:37:
67:39:70:13:a2:48:25:d7:d6:f0:e7:3a:b4:e0:b4:b9:04:49:
50:cf:5b:d3:67:4c:e8:10:28:0f:f4:bc:c4:8b:d2:a3:10:60:
2c:20:1c:84:5b:dd:84:78:fa:e5:0a:8c:b0:9a:89:bf:5b:9c:
b4:fa:84:39:67:f8:c2:ce:3e:52:d0:22:18:b7:2d:7c:14:56:
a3:5f:2e:28:b9:35:6d:0e:22:5c:88:47:3e:bc:d8:6f:64:34:
8d:cb:10:fd:23:21:75:d2:f3:03:19:8c:9f:d8:a6:00:be:c7:
37:67:bc:0e:70:d9:3b:e0:d8:31:96:4f:79:65:fa:ce:d4:1f:
18:cb:02:54:ef:01:96:90:11:17:2f:70:a4:ae:7d:b8:72:46:
b8:c3:b0:b3:11:d5:02:af:c8:8f:a6:1d:22:d9:ee:59:e7:22:
9d:ea:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:46 2025 by rpki-client