
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: mBQkfgSW3ip0LIqHlJ8ANBBggzczjs7+Ogzt9iIgZkA=
Subject key identifier: F6:4D:18:00:48:33:F9:9C:76:98:6F:4C:7C:E7:29:B1:B6:06:F3:EA
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 0199FE7DD41237CCCB74A368D8765AA570A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0A3E
Signing time: Sun 19 Oct 2025 22:01:23 +0000
Manifest this update: Sun 19 Oct 2025 22:01:23 +0000
Manifest next update: Mon 20 Oct 2025 22:01:23 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: ZRHOZThd+ec40HRcBmKkYoFIY/9jb1jM93BGdrGUrd8=)
2: mhXII1TmoI3urvchZmrd238HnqI.roa (hash: ymkQlbzHXOVaEGzGKdRpU2whYkKkdIgkhGPuabVJPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:d4:12:37:cc:cb:74:a3:68:d8:76:5a:a5:70:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Oct 19 22:01:23 2025 GMT
Not After : Oct 20 22:01:23 2025 GMT
Subject: CN=f64d18004833f99c76986f4c7ce729b1b606f3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b1:10:23:be:84:1b:05:61:94:5a:b4:2c:68:
48:26:6d:ba:84:36:8c:14:be:69:46:6a:1c:d2:73:
7d:a4:94:4d:1f:e5:9e:eb:0e:64:2d:9a:e2:ec:d5:
6e:28:06:2b:45:be:1e:de:82:a6:5b:1a:a3:36:0a:
d5:9f:4b:9b:67:4d:ba:20:d5:9e:9e:7a:ab:9d:44:
0e:7b:84:e1:a2:b8:28:f6:a0:3f:e4:40:a6:f2:f6:
19:b1:ff:c7:ba:5a:b4:e6:51:8d:9b:7b:9f:81:c3:
de:5f:de:20:b4:0c:06:87:7d:a6:b5:39:2f:5a:c3:
db:8a:ab:1f:9d:c0:b8:7a:d6:20:6e:9e:4b:97:a2:
bb:22:74:a0:4e:81:2b:47:6b:8a:d6:88:5f:d7:30:
98:37:d4:82:29:b7:0c:17:3f:f8:47:f3:da:3f:8b:
c6:5e:44:d0:3a:4b:62:a8:c1:9f:f6:30:11:b0:77:
ae:ed:df:a3:0d:7b:87:28:a0:7d:4c:ed:8f:10:65:
f7:33:b4:a5:f0:96:39:f1:ed:b6:7b:2a:02:9d:66:
6e:40:35:48:f3:3c:e9:5d:6a:dd:af:d3:40:65:37:
5a:0e:78:77:5a:eb:69:c6:78:88:e0:da:57:e8:8d:
0f:e8:86:94:8a:46:ac:eb:75:9c:23:58:40:f3:cb:
02:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4D:18:00:48:33:F9:9C:76:98:6F:4C:7C:E7:29:B1:B6:06:F3:EA
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:38:ff:98:fe:a2:ad:c8:e8:24:68:73:b0:23:7d:89:a6:97:
35:0e:97:17:d8:25:4a:3e:4c:03:08:1c:26:ea:56:d2:17:f3:
0a:4a:b6:c0:c5:30:ea:c7:3e:fd:3f:06:0c:ee:29:9f:87:7a:
f6:76:0e:0c:95:9b:a7:88:72:74:74:f2:2d:e3:8e:5f:0d:30:
52:f7:65:4e:bc:cd:ab:c0:5b:16:ed:67:a6:d6:d0:be:4b:13:
5b:52:bd:eb:98:b2:46:a7:f3:98:d0:05:37:2c:85:ae:f2:ce:
cd:a4:ff:9b:9f:5d:38:eb:85:c2:95:25:cc:30:16:dc:2a:a8:
75:d4:ab:30:62:0a:bd:aa:60:6b:b6:eb:2e:eb:e7:f3:b7:2d:
40:07:55:76:71:91:d6:da:61:bd:d3:44:8c:bb:ee:c9:c7:07:
33:16:c5:8e:51:04:b2:0c:0c:b1:dd:f4:d8:02:25:b3:30:9e:
32:81:bd:c2:22:e7:6b:31:56:1b:7f:d9:2f:97:58:15:49:a5:
a5:da:cd:49:39:ce:a2:7b:c8:6c:9c:0d:d2:9a:b6:d6:c4:c8:
47:de:58:d0:30:78:ca:ee:fb:b7:16:03:c3:dc:3b:17:13:5d:
20:c1:4e:ba:8f:61:25:28:8d:ce:44:43:6e:45:f6:ea:eb:3f:
9c:41:59:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:41:54 2025 by rpki-client