Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
File: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft (raw, json)
Hash identifier: g7eMkEAyhT8DmGq+HHOfDut7NKQUmgCdSg3pOFmSNsw=
Subject key identifier: A8:45:55:DD:C5:57:59:30:DF:A1:3F:81:30:6D:81:AD:A2:F8:F9:6F
Authority key identifier: E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
Certificate issuer: /CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Certificate serial: 0199FDDA425F4FE2F0F31868DC59658D1F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
Manifest number: 16F1
Signing time: Sun 19 Oct 2025 19:02:43 +0000
Manifest this update: Sun 19 Oct 2025 19:02:43 +0000
Manifest next update: Mon 20 Oct 2025 19:02:43 +0000
Files and hashes: 1: 4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl (hash: 7weXrLj4T+wJG5cIXphTFazYYZhdDSsCoJoLdj39Vag=)
2: 9le1peACXBsZiHPrKGecXIwJa-c.roa (hash: abfbtZOYUj++vuicVi05zrp5kGNnF9HGnL5WTr/9qlE=)
3: AP7i3LahdsovYM70eVMlu0H0VyQ.roa (hash: gGYT6xMXK+q6XWFTZbqb5glJj73Q26Rxlysft5i280U=)
4: De0WCETpJfbN-_KAZM7Z5RJy8Ss.roa (hash: Kcw5neScj8y714DABjN4V/ktwunea0zBp9yHTOn8VeE=)
5: WCta5h-gHZZ_q49m5T2AptEQh0A.roa (hash: UEF6WvkAssJSXqYGaMl3u6THXq5hVmf7y+Pa60Tl3Bc=)
6: WIgYr5JYPXYMftdONSWv5Do5-Gk.roa (hash: Z2h27NPSq0u/AueWae1+/QX3Wc6gNsL5Ji2s5jEoznc=)
7: fLAxf74rd6UX3gfivf6snrbKhmg.roa (hash: 2y9JcTYhuslVBan0BBae3TsVIsvndLj/5tEYAdt92BQ=)
8: oSdrWOCaJ0gBbDhOrwzjpvj5kgk.roa (hash: fLc644uvb/7KJE5lOwMGlDoVjD+MslKnwZyZQoL0QcU=)
9: obrA-ZoCgk0zS8hgJpmT67NaB2Y.roa (hash: z5uErOAwohXeLePMQPhb50zJXMj4qbujXHMXCoCiW5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:42:5f:4f:e2:f0:f3:18:68:dc:59:65:8d:1f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e138ec242a43e9c9d4ceb25dc90e5453373d3f46
Validity
Not Before: Oct 19 19:02:43 2025 GMT
Not After : Oct 20 19:02:43 2025 GMT
Subject: CN=a84555ddc5575930dfa13f81306d81ada2f8f96f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:5b:1d:77:37:59:c3:8c:85:e0:f8:32:b8:
31:77:b3:0a:a9:43:fa:ff:18:7a:c6:84:fd:01:e9:
c9:86:1e:74:a4:2d:e9:ba:f0:78:ed:d6:83:5f:2e:
e9:96:ad:48:10:85:a0:10:ee:6d:39:58:ed:51:90:
60:29:25:7f:ad:aa:21:65:b5:27:b7:42:4b:13:22:
93:8c:c0:18:82:55:55:00:02:e5:48:40:44:b4:5e:
52:67:5a:19:4e:87:f5:14:35:5a:5e:6d:b3:ab:f4:
de:4f:fa:ce:88:92:f1:9e:bf:01:b9:88:63:09:61:
63:77:58:9b:78:e6:41:c5:a1:bb:5e:6d:6b:f4:a9:
87:a7:8d:d0:bb:a6:ad:64:73:66:62:77:40:10:ac:
a6:98:27:c5:b1:cf:c2:2b:c3:4a:00:fd:d8:df:42:
7a:ab:c6:92:07:26:f2:41:3b:b5:6c:f6:ce:85:45:
7c:31:78:9d:da:7b:23:ea:2c:b4:01:d6:81:c5:1b:
ce:a8:b1:5b:a3:c3:ec:9f:87:13:69:53:56:d9:78:
f1:ff:a5:ff:5f:80:f1:8c:2a:8f:4a:94:c8:69:b4:
7e:aa:01:1a:49:de:12:2a:f7:3c:4d:31:e7:21:28:
2e:56:7e:6d:44:46:b3:d1:a9:47:b6:dc:fb:95:14:
55:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:45:55:DD:C5:57:59:30:DF:A1:3F:81:30:6D:81:AD:A2:F8:F9:6F
X509v3 Authority Key Identifier:
keyid:E1:38:EC:24:2A:43:E9:C9:D4:CE:B2:5D:C9:0E:54:53:37:3D:3F:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0b7fd3-90f0-45d1-8a58-6785cd456871/1/4TjsJCpD6cnUzrJdyQ5UUzc9P0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:a3:f2:f7:69:a5:d1:82:21:c8:b2:35:fa:2c:41:db:1f:be:
8c:84:47:60:ed:cd:a8:a7:2f:01:43:4c:97:00:d2:8c:0b:c3:
56:2d:55:52:1a:f3:7d:62:09:b3:63:ab:27:ee:ca:21:35:04:
c6:0d:a4:08:05:71:b5:17:c2:1d:59:5a:6d:3e:a4:de:d7:ec:
2e:b3:1b:40:b3:1c:80:25:e8:22:e5:ec:e5:1d:db:e1:8c:09:
3a:fe:98:0b:19:1a:b6:8e:6d:84:ab:1e:3f:ad:eb:e9:b8:ed:
98:6b:d9:c3:21:8e:11:bd:42:8f:ff:28:72:e1:19:3d:0c:3a:
fc:21:2d:39:6b:bf:fe:76:0c:95:ca:2f:21:0d:a7:c2:26:9a:
36:5f:28:16:87:29:b5:47:e5:8d:7c:09:86:ba:a9:87:cc:b2:
74:c5:d2:47:07:6c:94:eb:e2:c4:48:ca:e2:05:4a:58:38:5f:
2e:3a:4d:d7:55:2e:93:01:39:2c:d5:54:33:f1:50:ba:b5:21:
9a:16:20:73:05:f2:f3:e9:32:87:2b:17:5d:48:b0:c8:94:a5:
b6:1b:4a:b5:fb:b4:be:4b:50:d7:a0:29:00:b7:47:5f:f2:fa:
b2:d0:d1:4f:ec:a5:d2:c2:6a:28:1d:a5:ef:70:28:98:8b:44:
dd:fd:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:03:58 2025 by rpki-client