Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
File: S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft (raw, json)
Hash identifier: YwWgcP72tE8qDvgKFWj5l2cTk2UGb5hcz0J+gvfnAI8=
Subject key identifier: 3E:99:FA:97:8B:3E:42:58:32:3A:13:84:E5:9C:23:AD:12:2B:17:3E
Authority key identifier: 4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
Certificate issuer: /CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Certificate serial: 0199FBEAC30D9DE6BCCF611C8046CDB5968F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
Manifest number: 0F52
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl (hash: aMitVcBkzRpz04saHoYn46XMu+PXlkdU2jnB2YPvhcE=)
2: crOsrOXIXenqmjjK7E42FO9nzAY.roa (hash: FavBc7FYhPnbTZq/1FuhdovJ2d7YJv+63Ene4V7HX3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c3:0d:9d:e6:bc:cf:61:1c:80:46:cd:b5:96:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b89d87f8e41b5082d38916015e059e56dd0114e
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=3e99fa978b3e4258323a1384e59c23ad122b173e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:e2:77:fe:ba:ce:ec:d1:30:9b:11:d4:1d:f9:
b4:d3:6f:b5:ae:c6:5e:74:d2:d0:36:07:1d:14:0f:
c7:ea:d7:b1:81:5f:08:c5:75:a0:78:9b:3c:bb:dd:
73:78:8d:b5:ef:29:29:33:bb:31:e2:e3:44:b7:af:
d8:e0:ec:38:d8:3b:c3:2e:79:b7:92:80:76:2b:fc:
69:10:8f:bc:fb:ee:d8:08:1c:7a:b7:d0:50:43:67:
68:1f:a6:f2:bd:66:3d:85:b3:88:bf:91:a4:b0:18:
00:2e:2b:97:b6:8b:63:dc:41:67:a9:52:74:44:10:
c3:8d:bc:2e:fa:d2:e7:8b:be:01:be:d6:c5:ac:85:
ca:76:0d:59:66:a2:3d:fc:ac:35:eb:f7:97:a7:d4:
4f:7b:21:62:47:71:dd:f1:7e:40:29:ae:da:40:91:
11:cd:4a:75:22:68:2b:29:09:67:73:a0:59:0b:24:
db:1b:4e:d3:99:f0:62:38:fd:00:bb:ea:f3:95:36:
da:49:70:6a:34:14:88:89:7f:ab:2c:bc:d7:99:ee:
13:4b:54:7b:b7:25:25:a2:2d:eb:1e:68:c1:93:50:
64:a1:a3:38:50:19:dc:4c:cb:c2:f1:4e:26:b8:36:
4e:8f:3a:d3:bb:04:5e:b3:ad:bb:a9:10:ed:27:41:
37:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:FA:97:8B:3E:42:58:32:3A:13:84:E5:9C:23:AD:12:2B:17:3E
X509v3 Authority Key Identifier:
keyid:4B:89:D8:7F:8E:41:B5:08:2D:38:91:60:15:E0:59:E5:6D:D0:11:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4nYf45BtQgtOJFgFeBZ5W3QEU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/4ba973-0e9f-4352-9838-642dc9127680/1/S4nYf45BtQgtOJFgFeBZ5W3QEU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a4:bf:a4:29:4e:02:d7:e9:a9:db:a1:27:13:47:09:e8:87:
6c:4b:96:81:8b:d2:fa:06:a7:6a:0c:eb:56:ad:f1:21:68:be:
e4:40:cb:ab:a2:23:50:2d:ed:bb:e2:cc:29:d8:9c:6c:8a:a4:
b4:c4:67:7b:40:1d:df:4c:f5:86:80:44:ee:2e:4e:7c:d8:4d:
cd:53:06:f8:33:8b:e4:93:39:08:04:41:8b:cc:2e:cb:80:b3:
27:6e:02:b7:15:09:87:7e:ea:1f:5a:af:dd:a7:45:d8:64:a0:
df:b3:45:59:d7:a5:75:56:a2:56:52:69:a0:1d:b5:e2:a9:9b:
55:97:a0:28:36:24:ae:01:83:e7:b8:6e:a7:62:ae:c2:39:74:
c4:58:35:6a:4f:d9:36:88:6e:22:0e:93:99:3f:79:0e:49:c6:
d6:87:c0:5b:5f:38:f7:da:22:0b:d2:03:b5:6b:82:ec:af:72:
34:db:a7:25:16:38:80:52:db:c3:e2:d9:54:b6:50:7a:ca:20:
a7:42:f3:65:4f:f7:9b:83:a7:7b:9f:23:bb:95:7a:cb:b8:4e:
30:bf:32:ee:86:94:40:58:6e:d5:f0:0b:ad:d8:aa:49:65:f3:
5d:a9:a9:59:5d:02:05:8c:67:44:de:12:c8:e3:a4:29:e4:03:
4a:1c:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:24 2025 by rpki-client