Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: QsTRHexwY7Blzlo5U2thdSul2Vd+A88blAntoduD/U0=
Subject key identifier: 10:93:7B:6B:93:0E:88:5C:D3:89:D5:CB:CE:4B:91:45:7C:F9:0A:57
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 0199FB7CA15D838D833F8C35B2FE82745A62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 13F2
Signing time: Sun 19 Oct 2025 08:01:12 +0000
Manifest this update: Sun 19 Oct 2025 08:01:12 +0000
Manifest next update: Mon 20 Oct 2025 08:01:12 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: 8ikB77PVbfEV93IA6hoctZMaNVlX2nXqmdvCxnfkddk=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:a1:5d:83:8d:83:3f:8c:35:b2:fe:82:74:5a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Oct 19 08:01:12 2025 GMT
Not After : Oct 20 08:01:12 2025 GMT
Subject: CN=10937b6b930e885cd389d5cbce4b91457cf90a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:c0:ae:50:b9:2a:01:af:e4:c6:22:29:15:
2b:0a:af:e5:b6:03:8b:49:0f:44:d8:34:0d:75:19:
02:c3:ee:28:f8:34:ce:14:4b:c9:6f:b0:b8:35:47:
98:16:d8:33:83:c8:d6:51:21:47:97:3c:0d:ff:96:
ac:c3:00:db:fc:18:01:26:97:47:81:fc:c2:de:95:
41:36:05:4c:f3:8e:f8:fd:70:94:c4:2f:59:d8:9d:
0e:1f:2c:4f:ff:e0:b2:b5:bf:b3:f1:92:c6:01:1c:
e9:a8:8d:83:02:5d:72:b4:82:ee:05:8a:39:82:97:
ed:a5:25:07:21:b3:a9:9e:16:dd:0b:29:88:ef:ff:
4f:15:e1:b4:ae:d9:1a:62:16:8c:22:3a:06:04:0a:
a0:4c:31:5f:05:c5:4b:66:4a:d8:43:e6:b2:19:84:
b8:ac:17:79:0e:ac:59:92:59:8e:bd:7e:bc:04:55:
cc:2b:58:65:30:4f:cd:a5:0a:c5:c2:62:0b:1b:e8:
7a:80:0a:df:48:61:44:c6:dd:7f:7c:50:de:f8:16:
e2:93:8a:ab:d1:c7:16:7f:60:64:fc:a1:f3:67:35:
bf:32:90:10:1b:23:d8:e7:04:a1:0a:40:e1:f3:f6:
ea:66:10:97:6c:5d:52:6a:4a:df:3e:7e:d7:21:c1:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:93:7B:6B:93:0E:88:5C:D3:89:D5:CB:CE:4B:91:45:7C:F9:0A:57
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:11:1f:aa:36:4d:a2:1f:85:31:15:fe:d9:95:01:41:29:f9:
db:06:18:90:ec:65:19:b4:f2:b9:30:33:06:52:3b:88:2f:6e:
20:a3:48:e6:94:9f:48:72:75:55:c5:8d:b7:a7:e1:a4:f6:32:
89:b9:60:9c:dd:75:4b:e9:42:9b:f3:02:86:9e:3c:43:a9:80:
a0:ad:6e:d6:25:f4:b0:ce:fc:23:a7:41:77:79:55:c3:bd:7f:
5b:d3:7b:7b:ec:06:e0:d6:2c:40:7d:2c:62:ec:8b:45:5c:9e:
a3:b0:e6:7c:6f:1c:6c:3a:6e:d1:75:50:53:7b:93:f6:dc:03:
a4:e5:b2:7e:a9:7f:ea:48:71:07:3b:48:ca:09:52:bc:d3:9a:
30:de:59:2b:a2:f3:a9:0d:60:de:18:de:20:25:62:83:52:28:
30:ca:fe:5b:7d:35:7e:69:db:7a:e9:49:79:e7:6f:2c:43:cf:
df:8f:6d:56:a3:1f:68:89:25:ca:ae:cd:52:33:86:66:10:95:
f0:5a:aa:7b:b6:10:95:ca:7e:a6:79:62:94:fb:b9:d4:cd:8d:
2e:97:57:10:f6:97:dd:4d:e7:e1:16:6d:1c:50:63:0b:40:a7:
d6:83:80:7e:d5:cb:75:35:a8:d4:c8:c0:3d:a6:48:77:21:6a:
96:c9:f6:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:37 2025 by rpki-client