Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
File: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft (raw, json)
Hash identifier: uxoAGxIAGVKYT6RB+6eP72L+Gc80I+zBfFaatNcg5xE=
Subject key identifier: AC:0F:13:5E:7B:E7:16:70:2F:29:F8:A5:AC:35:D8:E1:47:3E:80:8F
Authority key identifier: E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
Certificate issuer: /CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Certificate serial: 0199FBEB6A7347DA3EE41EAAE680644166A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
Manifest number: 0D2A
Signing time: Sun 19 Oct 2025 10:02:13 +0000
Manifest this update: Sun 19 Oct 2025 10:02:13 +0000
Manifest next update: Mon 20 Oct 2025 10:02:13 +0000
Files and hashes: 1: 4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl (hash: b7w2SXsEpbxAWeXP69Efm5oDIOFK8WZ/ZB8lzCiEvVQ=)
2: f9bSypnQ1K1dn8AOmITCAE2WfeM.roa (hash: laJDW9FEQ26/eBw7OzSphhRdw2m3zDOPQril8cOuxC0=)
3: qF1Sjwc0E4igMvbiTG0GFEV_V8w.roa (hash: C2rdzoCh63UKjy4imOMfxu3Z/XTp23zoXQCrUfaLgrk=)
4: wr0uj1SbyF4a3afbyHifWHkLV18.roa (hash: whbGKVVedV+YGL/Rez8V9NgGyEYM+j686HKrZpVv8SA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:6a:73:47:da:3e:e4:1e:aa:e6:80:64:41:66:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c137106c1a46aea07c24b11729fd7d216a24f5
Validity
Not Before: Oct 19 10:02:13 2025 GMT
Not After : Oct 20 10:02:13 2025 GMT
Subject: CN=ac0f135e7be716702f29f8a5ac35d8e1473e808f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:16:02:e9:e6:b4:6f:50:1e:ad:fc:d5:0f:1b:
92:9b:37:7d:df:64:94:de:90:ed:e0:f8:46:31:eb:
28:c5:db:e1:19:fc:05:4b:ae:a1:b1:c4:6e:9e:3b:
df:a1:64:62:72:e9:df:f2:c3:c1:cc:95:20:ae:54:
b6:87:2b:b7:8a:18:36:1c:27:6b:aa:3d:32:2c:72:
c5:4e:3a:87:83:9a:18:1b:d2:42:4b:b1:6f:98:9b:
6c:0a:95:11:40:39:28:e5:e4:ce:f3:84:1d:ab:25:
2f:b8:e6:a0:b1:d3:3a:ba:28:a9:cb:9c:26:9c:d5:
a2:74:8e:03:e6:c5:3d:48:48:e8:f8:2d:bb:e2:8c:
cf:dc:0b:df:b1:db:64:cb:e7:7c:96:68:2c:ed:58:
75:76:59:88:0e:88:58:05:41:2b:b7:55:d2:64:58:
e5:22:a0:97:88:f0:62:fe:08:5f:b6:d5:06:bd:2c:
be:61:0f:46:d0:22:4b:2e:cc:78:c2:1f:ab:d9:d4:
99:e1:6b:9d:cf:fe:22:79:c6:53:fa:04:e0:0c:4a:
a3:ac:c6:5a:99:a6:0c:97:e0:8e:a6:6a:ae:09:29:
c1:c6:99:85:e7:9e:34:ab:69:4d:f9:bc:05:bb:b5:
7f:a3:6f:5b:dc:63:e1:48:50:96:3b:16:ae:4d:24:
98:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:0F:13:5E:7B:E7:16:70:2F:29:F8:A5:AC:35:D8:E1:47:3E:80:8F
X509v3 Authority Key Identifier:
keyid:E2:C1:37:10:6C:1A:46:AE:A0:7C:24:B1:17:29:FD:7D:21:6A:24:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sE3EGwaRq6gfCSxFyn9fSFqJPU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/2435cc-5533-4f70-bb82-9caf25a499d7/1/4sE3EGwaRq6gfCSxFyn9fSFqJPU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:f4:39:bb:8a:72:7f:14:93:1f:ec:85:9e:43:dc:02:2f:b9:
91:4f:bc:42:a7:da:e1:82:71:ea:f1:95:c4:f0:f5:38:46:a8:
3b:c7:6f:3a:69:3b:a7:50:c1:bb:a7:eb:2b:f6:09:c0:4c:d8:
35:dc:10:cc:d0:10:ba:fc:d3:0d:0a:a8:b1:29:8b:f7:01:0d:
b2:db:ae:b6:95:83:c2:16:50:06:2d:a0:07:d0:80:49:4a:83:
09:ce:4a:4f:5c:31:76:54:df:d8:fe:48:dc:39:bd:90:e0:93:
4d:60:8e:92:44:94:4c:7d:2c:8b:b3:9f:72:66:e0:94:b7:f4:
94:30:01:fa:60:d4:a0:9f:49:51:ff:2b:27:f6:64:45:23:71:
44:04:39:a2:5e:0f:1e:64:c4:3b:32:f0:5a:8c:ba:43:b8:b1:
59:e0:ed:ec:e8:9f:fc:57:7d:b3:1f:1a:36:8e:99:d6:15:ff:
66:e6:fb:e8:af:13:0d:16:4a:df:e0:6f:d8:05:01:16:51:31:
b7:45:fc:e2:b9:48:da:3b:d9:41:11:75:82:ef:4a:a4:a9:e5:
21:e3:e8:f8:65:99:20:dd:f9:e7:36:7e:a7:05:c5:7c:ed:2a:
87:80:9d:3e:23:58:74:fd:bd:9e:b7:29:8e:a7:e1:25:93:4d:
1a:73:6f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:56:07 2025 by rpki-client