
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier: 6kcLkgbxmO12GzQCgk/yUj5KtvZHjbeEzi9Xef/4sUs=
Subject key identifier: 9B:15:C2:D4:01:F5:30:28:31:D8:87:BF:73:3F:F2:D3:50:06:AA:F8
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial: 0199FD33F55508D75EC57F6D69257703CF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 16:01:04 +0000
Manifest this update: Sun 19 Oct 2025 16:01:04 +0000
Manifest next update: Mon 20 Oct 2025 16:01:04 +0000
Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: JV7cFq9ipMGyJdb0sePmmUAT1swNHDI181Pqg55EzrA=)
2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f5:55:08:d7:5e:c5:7f:6d:69:25:77:03:cf:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
Validity
Not Before: Oct 19 16:01:04 2025 GMT
Not After : Oct 20 16:01:04 2025 GMT
Subject: CN=9b15c2d401f5302831d887bf733ff2d35006aaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:97:7b:ea:61:c7:35:b4:b3:da:a7:5f:f0:f3:
52:1c:65:95:19:f4:b2:60:08:58:6b:cc:fe:73:a4:
1f:88:b1:09:6a:5b:74:a1:6d:6f:75:06:89:4a:e6:
5b:12:ee:d5:bd:50:b1:b8:6e:1b:4d:80:ec:4f:b3:
01:d7:12:0a:42:1d:4e:bf:15:79:f7:4e:2f:ae:41:
4a:96:84:22:66:a0:00:86:b8:cd:06:24:97:ab:88:
d9:98:2a:b5:25:f6:eb:24:fc:ef:d6:7c:46:4a:39:
68:26:ba:73:c1:21:83:e1:70:b5:20:e5:80:d4:29:
41:91:05:00:a7:ac:04:84:3d:fa:97:b4:5b:93:6e:
85:ba:d1:bd:c7:95:f5:a8:59:26:9f:ac:f5:ff:1a:
b6:e0:2a:48:a0:ae:64:15:9f:b0:b1:c3:ed:65:b0:
ca:f5:56:d6:cf:87:35:f9:81:ca:b8:d9:5e:dc:e6:
cf:a3:ab:0f:53:73:c9:86:bb:b0:80:7b:ff:a8:b2:
db:8c:50:15:d0:75:c7:5a:2f:44:b8:2f:cc:a7:b6:
9b:40:e8:b1:dd:87:c9:b5:9a:ec:ec:b2:4b:35:56:
c6:fa:00:24:f4:c0:a4:1c:bb:b7:3d:3a:ab:6e:c2:
28:22:62:4d:05:c6:e1:1f:0b:ed:f2:96:7b:ac:59:
06:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:15:C2:D4:01:F5:30:28:31:D8:87:BF:73:3F:F2:D3:50:06:AA:F8
X509v3 Authority Key Identifier:
keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fd:1a:1c:59:b6:30:3f:c9:e6:de:30:c6:19:4d:f3:d8:36:
29:17:d7:e5:0e:d8:6c:e4:04:f8:75:9c:1b:4c:5d:57:73:de:
85:f4:84:0d:80:0a:eb:96:5b:dc:f7:b9:60:8b:b3:f5:c1:0c:
14:c9:ea:76:0a:80:9e:cf:36:c3:cd:be:3b:c6:1a:f6:ed:d4:
b3:27:e6:72:a6:40:7d:50:e9:81:1f:30:ea:c0:5d:5c:c1:70:
be:28:db:7f:07:c7:4e:f8:36:31:95:be:da:78:2c:b6:ae:31:
e2:5b:1c:6f:e5:41:8f:4e:23:34:59:08:48:3f:51:b4:8d:c5:
b5:96:db:f5:ae:f5:83:70:ce:ba:c4:9f:a5:87:0c:62:5f:3d:
9e:d8:4c:c7:74:f9:69:4c:b5:69:bb:6b:d8:2f:6d:85:94:a6:
04:69:7f:bc:74:fc:2c:b7:56:11:5e:7d:9e:7e:77:70:0f:ee:
29:e3:4a:b0:65:bb:a5:3c:b8:6a:c1:ce:75:84:77:bb:36:06:
81:33:14:89:20:47:6a:a5:b6:c3:d0:70:37:ac:b3:76:3f:ad:
3f:db:e4:80:eb:aa:11:57:63:22:af:03:52:36:6b:90:ec:31:
68:ee:1c:d4:9d:dd:16:a2:f1:6a:c1:41:cb:ef:71:06:32:d5:
3d:18:7a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:31 2025 by rpki-client