Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: j9NHVvoyG2/VDDwC3Tt+FyjtaBSRAsh4LnbbBgHwsCs=
Subject key identifier: F1:F5:3B:6A:E4:1E:C3:5B:11:38:84:20:E6:16:FD:DD:CE:08:CA:4E
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 0199FEEBE8F96F92C4049ED9B1D093AC472C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0F51
Signing time: Mon 20 Oct 2025 00:01:37 +0000
Manifest this update: Mon 20 Oct 2025 00:01:37 +0000
Manifest next update: Tue 21 Oct 2025 00:01:37 +0000
Files and hashes: 1: 0mSInaOcQzcUaKnk3U9INfBb53Q.roa (hash: qM+YFRRYDhlfBg0HbT486tTWhmPISPFkNx0SGBRbZjE=)
2: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: yGDRTMYLJyxNshGHBD3hNfpDMJ7t39nl9b9b3aywXq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:e8:f9:6f:92:c4:04:9e:d9:b1:d0:93:ac:47:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Oct 20 00:01:37 2025 GMT
Not After : Oct 21 00:01:37 2025 GMT
Subject: CN=f1f53b6ae41ec35b11388420e616fdddce08ca4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:32:b6:a5:97:64:6c:34:c9:09:13:0f:a8:19:
fb:9c:e1:21:7f:3d:c1:8e:cb:ab:d9:16:cb:b4:0c:
78:04:72:77:4f:13:17:7c:34:56:76:29:52:78:9c:
d0:51:cd:91:2c:f6:d4:58:fa:fe:04:fc:d6:00:07:
48:b8:bd:48:d4:1b:e9:f8:7c:4b:26:5f:f8:5d:31:
e0:e2:a7:e1:cf:3d:5a:b3:42:f2:c4:43:d0:26:c7:
01:b0:f6:39:42:84:fb:ef:22:98:89:3f:1a:80:50:
9d:80:d8:fb:4c:9f:fa:36:95:c8:b3:23:29:03:66:
09:c7:70:ef:25:b9:b2:d1:25:56:3f:86:a0:2a:c6:
95:9f:b2:1a:15:2f:3e:40:8b:69:97:ab:92:97:fe:
01:9c:ec:f9:a1:72:b0:7f:06:6b:54:d5:db:fa:da:
9c:58:51:ad:9c:e4:b3:9e:53:db:31:16:61:f1:48:
d8:77:2f:c5:26:a1:bc:3d:16:4e:39:a0:21:d3:56:
fb:5b:95:40:50:22:b8:c8:ca:fc:a5:f7:28:54:d9:
36:4f:dc:56:12:b3:8c:ea:70:8f:07:6e:5f:8c:2a:
ef:2b:8b:d2:28:0e:f5:96:09:24:bb:c0:e3:71:76:
4b:13:11:2a:a0:47:48:34:88:a4:b9:cb:05:78:cd:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F5:3B:6A:E4:1E:C3:5B:11:38:84:20:E6:16:FD:DD:CE:08:CA:4E
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:29:f7:be:1f:f7:2b:26:bc:da:fb:ef:6c:bb:8e:ac:f8:a8:
c7:c7:f5:82:2b:10:74:c7:ac:66:41:84:b2:89:b2:13:98:a6:
61:d6:3f:10:f0:55:5b:f1:91:d2:11:82:e3:52:5a:80:ad:c3:
75:14:9c:90:22:4e:9c:25:82:39:97:1e:17:f2:e4:fb:31:a2:
ee:36:9d:5c:7e:06:33:f0:b2:38:cb:7b:6a:93:84:cc:d5:f3:
6b:6a:24:be:e6:58:31:60:65:a7:37:ec:96:1a:ef:61:d4:64:
39:0c:0b:cd:f0:7a:c5:43:55:94:a2:ad:b2:33:4d:a1:ea:80:
e9:fd:33:d4:68:0a:eb:00:01:ed:9a:06:0b:62:ab:98:2c:31:
54:f0:82:f9:29:87:06:ee:6e:d5:61:4d:ba:2c:4e:af:5b:fd:
fd:7a:2c:1c:10:a7:ad:b4:76:20:d3:de:2d:b0:c5:fa:f9:19:
2f:b3:e5:04:3d:e4:9d:8a:62:da:d6:ef:bf:ce:bb:1e:1b:1b:
a7:1f:36:bc:ac:fc:e5:37:9d:b0:26:43:a3:ff:2d:09:90:df:
e8:f3:38:54:66:23:8b:a2:22:83:59:27:70:9c:74:6d:92:d3:
26:e8:e5:df:7f:7b:63:79:41:d9:dc:99:af:c3:e7:e4:95:6b:
49:f9:0d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:20:59 2025 by rpki-client