Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
File: Zp4hLXARG0TeZvV1An4ADNRB_c4.mft (raw, json)
Hash identifier: Ecl6ttjrB+qFDjQM9D/L1FOK6gGRW8hfIM1OYX8BUZg=
Subject key identifier: CA:39:88:73:B3:63:8F:1B:F5:3E:1D:02:13:93:19:9C:56:79:E4:AA
Authority key identifier: 66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
Certificate issuer: /CN=669e212d70111b44de66f575027e000cd441fdce
Certificate serial: 0199FC21DA2F46860DD41694945C7B43B580
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
Manifest number: 45
Signing time: Sun 19 Oct 2025 11:01:40 +0000
Manifest this update: Sun 19 Oct 2025 11:01:40 +0000
Manifest next update: Mon 20 Oct 2025 11:01:40 +0000
Files and hashes: 1: DPBiMkfZcMPnWu4HuBAMRqRAx3E.roa (hash: RRc9ujZ9wYKMEBB2jrXKo0UcJxSJ/KgGd/cdw5jOUv0=)
2: Zp4hLXARG0TeZvV1An4ADNRB_c4.crl (hash: VhaYXPZBoW2JGxO3ZBatEHwS/RhgV7SsAt8VoruCS0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:da:2f:46:86:0d:d4:16:94:94:5c:7b:43:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=669e212d70111b44de66f575027e000cd441fdce
Validity
Not Before: Oct 19 11:01:40 2025 GMT
Not After : Oct 20 11:01:40 2025 GMT
Subject: CN=ca398873b3638f1bf53e1d021393199c5679e4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:54:bf:d6:7f:e0:31:72:54:d8:1b:c5:04:3c:
ee:e7:10:4f:53:1f:47:1a:0f:67:c3:25:e0:78:42:
17:38:db:d0:ad:7a:6d:b0:c9:a9:d4:09:5f:65:f2:
7d:9d:57:c6:da:cd:b7:4d:eb:a1:7d:58:d9:e1:5d:
f1:41:da:75:58:80:a8:54:e8:ce:61:19:10:64:da:
b4:e5:6b:c5:3b:55:20:d5:79:c9:89:92:77:8d:a0:
2e:64:f3:a8:a7:3c:ec:13:43:a8:d1:cf:65:26:ad:
b6:ba:3d:0f:bb:5b:b2:54:59:f7:3b:d5:73:4c:ed:
9c:c7:16:69:c2:b9:8b:09:fe:50:cc:28:4b:a9:b8:
06:b8:3b:58:34:4c:e8:a3:60:d7:0d:70:14:a1:f7:
ab:9f:9d:ec:dd:3d:25:9e:0d:41:fb:81:7d:b4:a8:
a5:ad:c6:cc:af:b5:18:82:1a:b7:cc:b4:3d:72:f3:
a2:d3:cd:48:b1:22:34:d7:7d:fd:a2:bf:8a:a5:95:
44:d8:83:6e:3a:ba:76:44:bd:96:7b:70:24:ce:cf:
52:5a:b7:e5:74:64:65:02:26:09:2c:77:00:55:de:
7a:9f:30:ef:c2:a0:d1:32:98:e4:1f:1d:6b:5a:e3:
74:a3:a1:ee:95:15:01:b2:34:d1:a3:6d:9e:2e:09:
66:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:39:88:73:B3:63:8F:1B:F5:3E:1D:02:13:93:19:9C:56:79:E4:AA
X509v3 Authority Key Identifier:
keyid:66:9E:21:2D:70:11:1B:44:DE:66:F5:75:02:7E:00:0C:D4:41:FD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zp4hLXARG0TeZvV1An4ADNRB_c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/746055-223c-4ca2-87fa-e1508e0a8836/1/Zp4hLXARG0TeZvV1An4ADNRB_c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ef:25:bf:92:92:3d:2f:77:1d:67:ac:07:86:5a:d6:6c:6a:
30:83:a6:b6:4e:6a:a9:6a:eb:de:55:e2:59:81:0a:5c:d0:20:
82:c6:fc:98:80:a8:1d:1a:2f:d4:d2:c2:bd:31:3e:4a:cd:4c:
73:c2:e5:6f:9c:0a:c3:33:56:e3:93:50:15:98:51:0a:3e:fb:
df:ae:d0:92:fc:cd:1e:83:0c:96:38:a4:68:d6:56:57:1c:84:
16:ef:42:6e:8e:51:47:2d:68:ae:71:00:69:f7:59:5c:f3:cd:
e7:14:9b:21:eb:56:4a:75:0d:d0:af:89:24:33:5a:c3:6b:26:
37:39:ea:1e:60:23:d9:10:d7:fb:7d:e1:d0:b1:85:d2:5a:e0:
69:f2:5f:0c:0c:2b:10:50:ff:a2:1e:fa:fa:9c:20:88:1b:9f:
6d:bc:a4:19:97:76:f6:ce:2c:27:f6:b5:72:1a:c0:74:d3:66:
56:22:62:00:7f:a2:cc:58:30:a9:c8:b8:47:85:aa:97:2a:2c:
be:35:05:b6:bb:eb:a9:6e:bc:2a:1f:1b:d1:1b:4b:f8:e0:a5:
89:49:19:a3:9f:04:1c:a5:18:0d:3c:3d:ea:1d:dd:95:ad:38:
aa:bf:87:ca:e9:8a:88:08:b5:aa:5a:33:7f:c6:87:23:71:30:
2b:36:99:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:38 2025 by rpki-client