Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
File: 4qv2099Tm7fBaE-09GF50NoGsIM.mft (raw, json)
Hash identifier: CF4Fkr26s0xJs1z/vcGh5+d+Z5hPkWDI2ToVD1LU50k=
Subject key identifier: DE:3C:B4:CB:08:85:CE:82:F8:7C:D4:8F:23:7D:D6:9B:1A:6C:2B:43
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial: 0199FEEBF67E1D8A73CEE1FCD694A16AFAA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
Manifest number: 0DC4
Signing time: Mon 20 Oct 2025 00:01:40 +0000
Manifest this update: Mon 20 Oct 2025 00:01:40 +0000
Manifest next update: Tue 21 Oct 2025 00:01:40 +0000
Files and hashes: 1: 4qv2099Tm7fBaE-09GF50NoGsIM.crl (hash: MQUJMwSlGOHmMR1IYWdiTiM96apme3jhpu4Zq15acpc=)
2: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (hash: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:f6:7e:1d:8a:73:ce:e1:fc:d6:94:a1:6a:fa:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Validity
Not Before: Oct 20 00:01:40 2025 GMT
Not After : Oct 21 00:01:40 2025 GMT
Subject: CN=de3cb4cb0885ce82f87cd48f237dd69b1a6c2b43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:3e:cd:01:0c:92:91:39:6f:a2:cf:98:92:
89:6e:98:ef:ed:23:46:b5:d8:f4:6b:e3:95:3a:7d:
b5:57:3d:47:62:9c:b1:5f:16:7b:20:4b:f5:54:a3:
29:01:67:77:bd:2f:94:eb:39:c6:70:e6:de:29:45:
4d:b2:31:d7:b2:20:64:4b:a8:ff:bf:94:41:4f:41:
a0:09:6a:51:93:92:96:42:8b:0b:1c:1e:f6:c5:bb:
6a:31:53:dc:06:b3:b4:95:6d:88:d1:60:b6:c6:f7:
26:2e:4b:0d:c5:3f:e6:48:53:73:0b:24:d2:7c:d9:
63:ef:a1:c8:1d:c8:f4:11:60:ed:ff:46:6c:aa:e6:
0a:55:e0:63:58:24:9a:58:fb:3e:3f:81:47:e9:80:
ca:01:f7:db:bc:48:86:63:f0:72:c6:ac:92:c0:19:
5f:fd:68:46:7c:21:8d:b2:44:06:1e:4f:05:de:0c:
b3:22:a8:cf:69:3f:4c:17:34:1f:ec:87:9a:1e:8e:
b6:9f:e5:84:ee:06:c2:5b:c4:8a:55:a4:1f:4d:38:
a4:5a:9f:e0:fb:d4:fa:1c:20:fc:a0:90:2c:06:f9:
b6:3a:36:05:a4:e1:45:a6:02:cb:ac:b9:1f:0a:2c:
5d:45:e8:bc:77:d3:8d:84:fd:73:52:b0:d4:ca:dc:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:3C:B4:CB:08:85:CE:82:F8:7C:D4:8F:23:7D:D6:9B:1A:6C:2B:43
X509v3 Authority Key Identifier:
keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:6d:fe:c8:46:9d:dc:16:44:7e:d7:17:31:3e:4c:1b:9c:5c:
69:e9:cd:e9:2f:bc:9d:bd:4e:62:8d:0e:1b:cb:c0:b6:d1:98:
b5:ee:7d:86:c7:ec:bd:7c:48:fe:92:6b:a3:a6:0b:14:4e:78:
b9:18:8c:1d:0a:4e:78:c5:d4:7d:07:e5:b5:f6:15:ec:64:0e:
f6:64:fd:3f:a1:c4:52:a2:75:cd:49:57:3e:85:4c:d6:8d:0f:
60:bb:38:59:aa:31:d7:3a:ae:c5:db:d1:72:fb:b8:ee:42:54:
21:aa:c9:b2:68:59:b4:0f:4b:8c:ef:11:87:e1:69:e5:75:ba:
83:f0:b7:58:ea:a3:5b:24:76:99:87:48:8c:8f:75:df:0c:35:
26:f4:4e:6f:96:01:41:8c:43:e8:2e:3b:10:a5:b6:ea:4a:a6:
bc:a6:14:51:ad:2f:2f:cf:a2:fc:f1:ba:7e:91:ea:bf:93:10:
d1:44:e9:1b:b9:6e:9f:53:99:f1:87:ed:0b:2b:28:ec:38:fb:
bb:a4:2a:dd:a3:a2:a7:8b:12:a3:45:44:82:34:a0:a8:fa:14:
2e:f7:84:b4:4a:d6:ee:63:46:e2:af:6f:16:5a:1d:33:72:02:
e6:31:98:42:cd:53:26:5a:6c:75:25:23:42:09:71:59:dd:61:
87:22:f6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:26 2025 by rpki-client