Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
File: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft (raw, json)
Hash identifier: +OfU7gzvKwcQ7cdZ1CZ8ByI5XuAKpkDg0pMhtMUWdME=
Subject key identifier: 16:46:21:AC:2F:1E:5A:F5:B0:C2:08:C6:75:C4:85:68:36:BD:E5:40
Authority key identifier: E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
Certificate issuer: /CN=e22277fdf65828ef40b58ce101946595507f1330
Certificate serial: 0199FBEBF39EA2F5EF068E988DB0B0740DCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: 4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl (hash: p6+zEkgmofzosfD96NBkXH9x8jLUkTOMqIXa0EIAEw4=)
2: aWUQzBuRutK2_qLKMIBREYhWNS0.roa (hash: EEbZn4pmevKGtGGTKH3kqnYuG7haulAx42CNa2YJjd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f3:9e:a2:f5:ef:06:8e:98:8d:b0:b0:74:0d:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22277fdf65828ef40b58ce101946595507f1330
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=164621ac2f1e5af5b0c208c675c4856836bde540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:a4:c9:14:fb:a5:b7:29:1c:61:31:48:99:
56:03:86:a2:1c:90:0c:d7:a3:93:2c:4c:25:b7:3c:
a0:4e:61:7b:f6:ac:83:9a:5e:7a:be:f4:0c:99:70:
d8:cc:85:3b:d0:ee:02:4d:6e:04:71:d6:16:0e:7c:
00:59:e8:06:17:61:31:ed:60:22:3d:8e:b2:0e:3c:
bf:80:fb:05:0a:46:ba:e1:ec:4c:f0:64:90:73:68:
0a:9e:f2:83:29:b5:65:2f:5c:cb:25:fa:06:7b:c9:
38:d3:7a:e5:b0:ba:d5:6a:e3:f1:5a:90:5a:59:2b:
92:55:35:b9:3c:cb:f1:70:01:6b:f8:fe:33:3f:4d:
3d:c8:d4:c8:6d:38:af:f0:fc:2f:71:4a:3b:f8:ae:
fb:e5:3f:36:e0:a4:fa:bc:19:20:a7:bf:b1:ad:a0:
00:fb:7e:84:1c:b9:ad:90:4e:7b:67:47:e7:a7:04:
b0:e7:3b:89:80:73:b2:ac:7b:19:f7:9f:8c:c3:94:
8b:38:9a:92:3d:79:c4:12:d2:fb:f4:5a:a4:fb:cf:
d8:11:c3:9a:38:a8:75:80:9c:d3:74:34:7a:4a:c7:
9d:9c:f8:1d:a5:cd:29:02:4e:be:8f:9d:2f:a1:58:
d7:67:35:6d:28:b8:7c:f9:0e:7c:d1:cb:0a:1f:c3:
0f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:46:21:AC:2F:1E:5A:F5:B0:C2:08:C6:75:C4:85:68:36:BD:E5:40
X509v3 Authority Key Identifier:
keyid:E2:22:77:FD:F6:58:28:EF:40:B5:8C:E1:01:94:65:95:50:7F:13:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iJ3_fZYKO9AtYzhAZRllVB_EzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/481786-77fd-4316-96ce-822b842c3c0e/1/4iJ3_fZYKO9AtYzhAZRllVB_EzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:29:71:e9:d7:a8:c0:5c:ce:4d:ce:69:cc:cc:4a:c2:ab:ff:
95:aa:7e:30:ad:b7:a6:b2:54:cd:2c:43:ce:c7:12:8d:34:85:
4c:12:3c:ed:aa:1c:4f:0d:06:67:f9:f3:f3:c7:b8:5d:5b:32:
38:cf:e0:ab:ef:b2:36:5c:6f:c8:4d:74:fe:cb:85:ea:20:58:
92:3b:f1:09:c3:50:5d:52:3d:bc:a8:f8:f6:26:71:0b:0d:06:
72:5b:f8:6b:89:ff:8c:63:44:a2:58:3d:18:3f:56:a5:fe:b6:
15:bc:50:21:88:b3:47:d3:5b:09:82:9f:37:a0:68:19:8d:39:
d6:e1:85:b9:a5:83:dd:1a:13:e0:a5:f6:69:d2:e7:7b:78:9d:
46:ef:10:28:a9:72:d5:f6:3a:96:39:40:e2:72:ec:b9:81:03:
86:3e:9a:dd:27:cb:74:b6:ed:62:54:58:4e:7b:c3:65:a4:33:
57:2f:b8:ff:a4:af:de:71:54:34:17:64:c4:4b:38:61:3e:1b:
17:97:47:a0:ce:97:d7:55:d3:33:03:26:b6:d7:77:c0:bc:a2:
12:e7:bc:9c:f7:49:d9:0d:d8:d9:b9:f4:7c:97:f5:96:55:3a:
f0:bb:bf:fb:19:c2:e5:d1:7d:fe:c7:b1:32:5d:63:b8:1a:c4:
ec:0e:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:38 2025 by rpki-client