Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: +1FH1Fb/UcoUVmh20EKKFgido2fSuxY+iwIMnUGkprQ=
Subject key identifier: 6D:94:18:04:24:AC:BB:F3:07:0E:2B:5A:5F:6A:9A:1F:69:25:1B:6D
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 0199FFC78C0DCB0A5F725342609AA763EBAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 06FE
Signing time: Mon 20 Oct 2025 04:01:31 +0000
Manifest this update: Mon 20 Oct 2025 04:01:31 +0000
Manifest next update: Tue 21 Oct 2025 04:01:31 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: a9DqtzfTM3dcSGlgVzNSLLn6Rzg65CEtmEOnt5ujPGo=)
2: 6QTOObZCJD1chm-ODo_uH-86-lI.roa (hash: PPt6OC48BVzBGzWbhNau2lL/cgNIrrJFP+rxLWVwYyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:8c:0d:cb:0a:5f:72:53:42:60:9a:a7:63:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Oct 20 04:01:31 2025 GMT
Not After : Oct 21 04:01:31 2025 GMT
Subject: CN=6d94180424acbbf3070e2b5a5f6a9a1f69251b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:a2:14:14:6c:74:7e:f5:07:44:8b:2e:6b:
4a:0b:64:b5:74:f2:e2:6a:07:3d:96:34:68:fa:f5:
16:d9:c1:55:f7:ca:e2:02:e8:d2:81:05:25:53:be:
e5:58:1b:3e:e8:58:aa:15:7a:6c:ca:ed:9c:83:86:
f6:5f:3e:ad:69:8a:21:2c:1a:51:16:c1:3f:da:f9:
bc:b7:e9:e2:8a:77:4b:ea:f5:77:91:eb:d7:2f:fd:
48:ba:fe:43:de:99:13:cf:bd:b6:a2:f5:8b:0c:ce:
4d:34:fb:ce:5e:c2:22:ff:ae:7d:60:ea:8a:33:a2:
20:f4:ab:bb:19:9d:8b:d4:d5:bf:79:4f:5c:33:5b:
fa:5b:d7:03:02:92:04:85:54:18:df:43:60:de:7f:
87:01:13:50:22:5c:0c:87:17:46:fa:dc:2a:21:3f:
1f:42:2f:ee:db:8e:56:c5:07:ca:3f:be:d6:36:38:
fd:54:44:c4:41:90:e1:8b:3c:03:e0:74:45:a7:ca:
49:2b:e1:67:1f:39:bb:11:e5:c6:07:45:fd:19:96:
74:7d:b7:73:4d:ab:d5:35:c4:db:4d:b6:11:01:4c:
7b:01:ec:71:27:30:b9:92:de:6b:78:6d:21:e9:50:
5e:f2:b7:99:0b:1c:56:77:14:ab:b2:c4:e4:de:98:
96:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:94:18:04:24:AC:BB:F3:07:0E:2B:5A:5F:6A:9A:1F:69:25:1B:6D
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:0e:ad:59:33:ee:a7:4e:2d:0a:19:96:03:89:86:fd:9f:a2:
05:98:2b:2b:dc:a8:b0:db:17:2e:0e:6a:82:db:a1:b4:1f:f2:
79:2c:a3:4f:62:a5:43:fc:25:cf:fe:34:98:fb:0d:39:00:59:
ad:51:6e:8e:12:f6:68:62:88:34:e4:80:3e:39:04:70:1a:fb:
10:9e:83:dc:c2:88:01:40:ba:17:be:5f:80:ae:de:62:cf:90:
ee:af:13:31:84:75:80:4f:9a:54:1e:be:f0:1c:f5:41:42:51:
09:c9:af:dd:09:d0:00:45:5b:6d:06:5c:4e:08:39:84:be:f2:
e6:8b:91:42:08:d6:fd:7d:7a:9f:94:bc:67:e0:14:fc:21:28:
74:27:41:56:b0:4f:17:ba:e3:38:b5:ec:b0:b5:d3:85:f9:e7:
c1:bf:a3:83:f8:64:9b:ad:75:2d:13:a9:b4:4f:20:23:dd:e4:
fa:8c:23:ef:a6:75:66:09:b5:79:ef:3a:65:c3:15:29:b7:03:
a5:4c:c3:f3:f3:e8:70:96:5b:a7:4f:9a:3b:00:5b:f2:eb:a7:
bd:a4:a7:b3:9c:33:a4:10:bd:a6:8d:a4:c8:ff:97:dd:55:ef:
c7:7e:c5:df:6d:f8:3d:80:32:5a:24:d3:09:9c:83:cb:f5:3a:
fe:42:73:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:01:02 2025 by rpki-client