Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: G+6j5Ywc+6RrqJ9V5jjLi80kdbqzAHZSt7g6HA9CviQ=
Subject key identifier: 4C:C8:3C:FE:72:D1:38:3F:BE:06:98:F2:8B:1D:B2:86:33:4E:3D:EA
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 0199FC58CED111AF86367229CAA69B35E36F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0B0E
Signing time: Sun 19 Oct 2025 12:01:42 +0000
Manifest this update: Sun 19 Oct 2025 12:01:42 +0000
Manifest next update: Mon 20 Oct 2025 12:01:42 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: ZMA+82Tudqto50kAmf3kK5MuYSbXgsxdKx3SKjFcZV8=)
2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ce:d1:11:af:86:36:72:29:ca:a6:9b:35:e3:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Oct 19 12:01:42 2025 GMT
Not After : Oct 20 12:01:42 2025 GMT
Subject: CN=4cc83cfe72d1383fbe0698f28b1db286334e3dea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:d4:ce:cb:30:fe:fd:a9:b2:29:62:f0:81:f9:
31:fb:00:1d:8c:7c:8c:67:c5:07:11:f9:1e:7d:68:
2e:68:c3:a2:e1:d4:8b:9a:ff:9b:09:b9:29:ea:1d:
5b:ee:dd:83:f8:a3:e7:a9:ed:6b:75:e6:22:db:8d:
18:4e:33:8a:a9:b7:e2:33:f6:3c:76:d6:7d:cf:ae:
1c:1f:f9:53:a4:26:d2:2a:65:e7:b4:2e:9d:cc:11:
a5:54:de:95:6e:bf:71:4c:70:4c:a6:cd:fa:f5:54:
12:df:08:b8:82:eb:6f:ca:1b:95:b7:eb:48:64:b9:
66:dc:1b:43:3d:ac:47:d4:4b:25:7f:66:97:05:d0:
2f:5e:35:91:80:63:04:ef:04:14:ad:ab:2e:ca:ec:
fe:7b:18:cd:de:0b:b7:a2:2f:a8:6d:fb:9a:09:18:
4f:bd:e6:c5:d6:ee:a7:02:3b:86:f4:da:6e:cf:79:
e9:f4:c6:5f:f6:91:cc:1b:7d:ee:d3:3e:b7:91:be:
26:0f:1b:b6:03:3d:85:58:43:5e:ce:6d:8e:7b:b6:
19:6e:f2:39:20:e1:7c:d2:ac:b6:ae:c0:3e:59:61:
e0:ac:44:d9:cb:e8:28:7a:b5:83:43:ef:76:c2:f4:
03:db:7f:85:b9:2a:e8:2c:9a:b8:0b:76:50:0b:08:
3e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:3C:FE:72:D1:38:3F:BE:06:98:F2:8B:1D:B2:86:33:4E:3D:EA
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b2:98:a4:f5:de:6d:fe:84:d9:a4:4e:9e:7d:4c:a7:4d:4b:
c7:37:1f:eb:2b:ae:c6:59:c6:de:2d:12:12:83:c7:18:be:89:
0f:8e:94:9a:2c:f2:7a:48:15:39:20:61:75:5e:7d:86:80:82:
4f:22:d0:50:18:d5:60:59:d5:11:60:d8:c0:9a:10:84:c5:f8:
05:2c:ee:a6:6a:cb:a3:11:1e:83:c1:bf:63:a9:0c:4a:35:92:
32:2a:31:87:08:e3:69:11:89:83:c5:2a:eb:64:30:7e:2a:8a:
ce:2f:2b:73:35:c7:1a:52:12:74:7f:df:c3:af:c1:dc:50:e3:
c4:73:6d:44:44:b7:ff:32:bf:b7:64:0b:96:cd:3e:4e:9b:93:
2d:45:1d:bb:ad:77:e6:9d:b4:85:53:a4:1a:a4:8a:2f:15:84:
e2:ca:1e:b2:12:af:86:9a:39:02:27:b6:08:ed:83:5a:d9:85:
d4:38:52:b9:03:ca:86:8e:d8:e0:1a:f4:33:39:36:46:37:1c:
a7:35:88:77:0c:d1:05:a6:53:c2:f5:40:43:47:04:6c:e8:56:
55:16:b0:d2:84:be:c6:ee:07:5c:55:dc:44:48:5e:a1:b7:d8:
7d:ab:47:8c:4e:1e:f6:b2:58:d8:b5:12:9f:bb:8b:3f:76:98:
bd:2c:9d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:26:32 2025 by rpki-client