
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier: Ng+6UxtCfQU46MbAN2mKPh3cpzCS1hVHr4VEgK2W3II=
Subject key identifier: 5B:0E:CF:08:F0:B6:75:85:0F:FF:12:DC:0C:68:44:1A:C0:F4:87:4C
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 0199FBEAAA0F9B8B3224BA29C2E1A964953D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number: 03E5
Signing time: Sun 19 Oct 2025 10:01:24 +0000
Manifest this update: Sun 19 Oct 2025 10:01:24 +0000
Manifest next update: Mon 20 Oct 2025 10:01:24 +0000
Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: o7RAwW6fsTMwvmuSm4EwKpIn02IQKR19bW5bTcDt494=)
2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:aa:0f:9b:8b:32:24:ba:29:c2:e1:a9:64:95:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Oct 19 10:01:24 2025 GMT
Not After : Oct 20 10:01:24 2025 GMT
Subject: CN=5b0ecf08f0b675850fff12dc0c68441ac0f4874c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6b:73:c7:44:2a:ee:2c:a3:1b:08:9d:a0:ef:
51:94:fa:75:39:f5:ee:c7:c4:08:eb:52:30:9d:b8:
c4:9a:11:d1:9b:d3:a8:1a:d0:bd:5e:8d:b3:06:1b:
15:d4:29:52:39:6b:7b:68:18:f8:3f:67:dc:de:f7:
45:99:b9:10:ce:67:b1:ae:d4:33:b8:6c:0d:07:c9:
32:59:ff:9a:c6:e9:58:9d:41:da:e7:b0:ff:0f:c5:
4a:73:a5:d2:ba:1c:1f:31:41:8b:09:f7:95:86:ff:
2e:83:db:3d:a8:c9:b5:49:1c:78:93:f6:b2:ff:9c:
8c:6d:25:3e:a5:23:0e:d8:4a:9c:4c:24:e4:46:1c:
e0:7a:f6:0b:81:c0:c5:52:5c:46:e9:3a:ab:51:24:
20:e6:8a:47:52:49:fc:b9:e9:5d:f6:4e:e3:fb:ba:
ae:80:a3:cf:fe:bc:c0:73:74:3b:51:52:db:c8:8c:
50:f4:ec:cd:1e:f3:84:8d:ab:b2:1b:1a:45:89:f0:
3d:c1:10:e0:53:d6:7f:1e:a8:7a:40:0b:54:f4:d4:
23:62:90:39:91:ac:7f:79:b6:23:a4:f3:2d:88:c2:
d2:ab:1a:44:a4:fb:cb:fb:b5:3c:da:a8:40:a6:34:
23:fd:16:0c:d5:51:17:4f:22:aa:3c:88:56:fe:97:
cc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:0E:CF:08:F0:B6:75:85:0F:FF:12:DC:0C:68:44:1A:C0:F4:87:4C
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a1:88:3b:e8:46:1d:15:c2:c7:80:b5:f6:15:18:5a:ab:d1:
0e:34:0d:b0:45:21:f2:fb:01:4e:64:4e:77:f1:6a:d5:80:ed:
69:ab:18:13:93:c2:32:05:8f:78:00:56:de:72:e8:53:23:fb:
44:02:15:61:fc:55:fb:cd:d0:aa:83:5d:07:1b:b3:b0:82:1e:
89:98:6a:3a:59:ec:3e:fa:03:af:bc:52:e5:a9:2d:24:79:ae:
27:59:5e:f4:2b:8d:c3:b2:53:bd:f5:5e:59:0a:89:66:a6:c3:
9d:ca:22:78:51:34:be:5e:aa:00:38:31:a1:c9:9e:c3:80:96:
79:ca:b0:62:6c:73:22:63:56:0f:ae:46:b0:f6:3c:87:aa:ac:
4b:e4:5a:4c:aa:44:84:29:3d:54:6b:dc:9c:4c:d2:fb:1e:79:
65:9c:91:c6:c7:75:38:e5:ad:80:99:a8:c6:2a:9b:79:87:23:
4b:8d:6b:4d:31:f4:ef:b4:f3:35:31:74:70:78:f8:b7:b0:11:
b7:f6:d3:78:21:64:57:b7:90:f2:9a:ee:dc:c7:35:11:e5:0b:
b9:aa:df:95:80:cc:f6:5d:02:a0:1e:63:b3:ce:d6:d1:18:66:
bc:8f:ae:a9:2f:b6:fb:76:a1:50:39:ee:a4:f7:ca:2d:d4:cf:
50:77:b4:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:11 2025 by rpki-client