Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
File: 4KE7ki7n67muzeGacNDiW3d1DQI.mft (raw, json)
Hash identifier: wkprxZ8EQ4epGSvC5ihG8dLe6Fo7LvMo78TJASU4BBk=
Subject key identifier: C5:00:D9:40:BC:57:07:C5:D0:87:8D:2D:37:88:4B:66:A5:32:7A:6E
Authority key identifier: E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
Certificate issuer: /CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Certificate serial: 0199FB7C86988022EDD92F31D7256667EB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
Manifest number: 0CD5
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 4KE7ki7n67muzeGacNDiW3d1DQI.crl (hash: BFgnNxpVXNKYdY2oYrZKo5/8uUSmoQYZjanxwfz49y4=)
2: Y8AXUYDP-qGUFi9hzn6P0gBawaM.roa (hash: PbgeAgI/Sj2ZS05Cb4sm9ySYZjOm8LnX+ij5E01wZBw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:86:98:80:22:ed:d9:2f:31:d7:25:66:67:eb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a13b922ee7ebb9aecde19a70d0e25b77750d02
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=c500d940bc5707c5d0878d2d37884b66a5327a6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:04:3e:c5:3b:25:cc:08:97:ed:45:e0:d6:59:
cd:df:5d:77:53:78:ea:90:6f:e6:f4:cc:88:76:32:
c3:67:02:e2:9b:01:0f:cb:8a:89:73:55:e1:ac:f8:
92:6e:82:da:14:1d:2b:c1:9f:1a:db:c9:dc:5b:52:
db:31:81:f2:82:e4:22:7f:54:b3:83:5d:2e:4c:5e:
ba:0e:88:d7:c5:63:bd:28:46:24:ab:59:d7:1a:61:
da:fb:39:9f:82:cd:ab:0c:61:24:ed:fb:9e:28:e0:
9a:82:f2:9b:a7:1b:49:66:9a:ac:b4:f1:f7:a4:19:
26:3d:89:1d:6a:31:dd:81:54:bb:1b:00:b4:b1:bc:
cd:df:de:fe:36:92:f9:1b:08:84:ea:96:e9:9d:1c:
08:60:62:0d:49:9c:da:26:0b:e6:78:78:7e:e2:68:
10:d2:06:b3:25:4a:07:a5:32:09:1c:56:29:2c:78:
17:b7:af:9b:18:99:ed:7e:0e:a7:51:df:d1:3c:45:
22:e2:f3:76:47:4c:ff:3c:c4:9b:2c:3b:eb:a7:d2:
27:21:25:0e:c4:66:3b:e2:85:d0:b7:31:04:f5:26:
df:1a:db:6d:95:95:96:df:9c:49:b8:22:6f:52:36:
ce:6d:c0:e7:af:6e:cf:5b:40:1b:0f:28:c3:d3:cd:
7b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:00:D9:40:BC:57:07:C5:D0:87:8D:2D:37:88:4B:66:A5:32:7A:6E
X509v3 Authority Key Identifier:
keyid:E0:A1:3B:92:2E:E7:EB:B9:AE:CD:E1:9A:70:D0:E2:5B:77:75:0D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KE7ki7n67muzeGacNDiW3d1DQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/f77c5b-19b2-4bc1-8faa-10b0211d96fc/1/4KE7ki7n67muzeGacNDiW3d1DQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:7b:36:f7:96:5e:b3:9d:d1:90:13:70:da:6e:32:d1:34:54:
36:83:06:e6:d4:83:c1:d5:0d:4c:f3:c2:23:86:2c:94:79:b3:
4f:a7:4b:f9:c6:97:d0:d7:62:d7:3e:b8:c9:61:18:8b:89:f9:
4a:d9:56:51:77:55:b5:09:08:f2:ab:5f:93:1d:d4:ba:6c:66:
05:a2:c1:4d:96:63:e6:d3:bb:ba:a7:cc:2f:85:12:cf:af:ae:
67:72:2a:de:66:89:6c:75:ae:65:2e:11:cc:4c:78:78:2a:18:
30:62:ee:c6:5e:5c:51:1a:f0:71:77:71:07:9f:1f:1e:1c:8a:
c7:e7:23:94:83:49:78:c2:69:82:e1:8a:dc:3a:a5:e6:3c:5f:
d8:40:e4:28:f1:96:54:42:8a:b1:f0:df:48:bb:5c:71:21:46:
1f:4b:ec:9e:85:bf:0b:21:3c:7a:28:64:10:c0:a2:fa:f1:ae:
18:c5:3e:8b:37:b1:c2:fa:3d:d6:33:f5:d7:fa:f7:2f:7c:32:
2d:3c:c4:af:3b:4a:ec:2f:39:83:d4:a8:3d:15:47:db:74:ee:
60:3b:a3:55:29:fc:6a:85:2f:c0:db:57:70:d8:a1:9f:9f:c8:
9e:ce:5e:27:31:91:14:d8:07:e1:36:77:68:15:26:23:02:60:
23:38:cd:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:49 2025 by rpki-client