Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
File: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft (raw, json)
Hash identifier: UOg7I41Iue4IfM6bqoSBZ6Nu5LVKvrRZoddsOTfo3Dw=
Subject key identifier: 30:93:BA:83:38:0C:6D:33:CD:8B:7F:32:5C:4A:04:C9:5E:B2:B1:31
Authority key identifier: E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
Certificate issuer: /CN=e1874a887aa288dab72c658e93694ed5dafd2026
Certificate serial: 0199FBEABC9A79F3A712CCA70920A9DECC79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
Manifest number: 123D
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: 4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl (hash: VOviH2HCGDxkiDS7gxc4Zj1QlZZT7s5BKX1J5vlZwQs=)
2: jnxiRSp6LL1UuZSH55PRoBU9Uug.roa (hash: EzydjgFzmvXFQDadZtYOhUDG1+kFGRWU2sNIMDhFrQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bc:9a:79:f3:a7:12:cc:a7:09:20:a9:de:cc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1874a887aa288dab72c658e93694ed5dafd2026
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=3093ba83380c6d33cd8b7f325c4a04c95eb2b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:df:36:a7:36:10:9d:52:94:83:88:0f:74:
c1:a6:ce:ba:27:de:38:ab:72:1b:71:c4:e6:ae:ed:
57:fd:8e:23:16:24:a0:08:45:1a:7a:7f:39:ca:9f:
1f:3f:3b:15:25:4c:07:47:a7:3a:2a:de:af:bd:68:
ef:c5:36:f5:29:cc:9f:35:3e:fa:ac:37:62:f9:2c:
c1:ca:36:64:be:99:f7:9e:8d:fd:49:d6:2d:ed:6b:
bd:31:7b:97:42:26:1c:61:7f:38:87:4f:03:a0:88:
a7:09:08:86:83:17:a0:08:67:ec:48:cd:18:05:f3:
dc:f7:16:47:7a:b1:50:5a:e9:2b:ea:ab:fd:b9:40:
fd:73:87:35:df:f9:e5:30:0d:70:bb:94:42:05:07:
fc:4c:d2:36:14:dc:6d:99:a7:22:bf:1d:21:be:4b:
d2:22:57:f1:b0:4d:27:7c:9d:df:25:94:41:37:8c:
5e:31:8e:b7:b8:b2:76:c2:f5:65:3f:5c:93:88:a6:
d1:6c:1c:7d:16:67:db:24:3f:55:0d:99:0d:0b:55:
3e:c4:50:2a:0b:f3:da:41:d9:38:d1:a6:6b:f3:9a:
dd:cc:1d:bd:06:6d:52:3f:05:89:7c:5d:bb:a6:40:
40:16:ef:fa:7c:10:5b:c4:b9:63:ff:ea:85:61:d0:
6e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:93:BA:83:38:0C:6D:33:CD:8B:7F:32:5C:4A:04:C9:5E:B2:B1:31
X509v3 Authority Key Identifier:
keyid:E1:87:4A:88:7A:A2:88:DA:B7:2C:65:8E:93:69:4E:D5:DA:FD:20:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YdKiHqiiNq3LGWOk2lO1dr9ICY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0fc7e5-b1f6-474e-99a7-eda23f2f17e9/1/4YdKiHqiiNq3LGWOk2lO1dr9ICY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a3:d6:51:8a:ee:c9:aa:09:3d:95:75:ad:6d:98:fc:df:aa:
ff:b3:32:44:10:55:51:52:30:29:34:ad:f5:8c:84:f3:91:ab:
0d:15:53:6f:e6:50:02:f3:3d:1b:5a:0b:62:9e:09:4c:99:21:
b4:f8:b6:65:7f:81:92:ec:6b:9b:b8:81:83:1e:6a:8b:55:04:
26:7e:80:cd:f4:8d:97:35:1a:22:cd:d1:e2:02:84:6b:5d:7b:
b2:ef:e4:64:ce:7b:a1:89:9d:12:88:87:bd:c1:a8:9f:44:b6:
be:71:95:0d:4d:63:7b:dd:3f:da:51:40:cb:95:2f:5e:d9:80:
2d:95:92:1a:db:68:ff:3b:d7:3d:43:54:81:7b:f1:15:35:a2:
95:4b:a1:4b:68:0a:3d:7d:e7:27:c5:2a:f7:9b:f9:a3:00:39:
20:87:c9:74:00:4f:15:b6:02:23:cd:7d:78:71:a4:61:8b:30:
c6:ee:bf:87:d1:e0:b6:56:c6:81:d6:35:15:76:6a:c8:5d:a6:
e5:f4:38:83:21:78:4d:ae:cd:a2:26:33:ad:1a:c0:43:a6:e7:
cf:50:96:f4:d4:80:a3:bc:85:a4:89:b5:bb:20:96:e8:d3:09:
76:26:2e:90:87:18:91:44:62:01:85:60:e5:9d:0a:c3:7f:ee:
71:c5:74:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:06 2025 by rpki-client