Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
File: ii4u4759dSXtdLeq4H6Srsr4STY.mft (raw, json)
Hash identifier: iazQ/gFRpnKSn4LRwoCBIiAbZlidwDoMysfCMwZY/us=
Subject key identifier: CC:41:36:FD:33:14:7E:90:18:D4:8F:D6:C8:43:38:B1:DB:96:DD:D4
Authority key identifier: 8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
Certificate issuer: /CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Certificate serial: 0199FC582E3DF7F7E2E1C40C9902981C5EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
Manifest number: 0570
Signing time: Sun 19 Oct 2025 12:01:01 +0000
Manifest this update: Sun 19 Oct 2025 12:01:01 +0000
Manifest next update: Mon 20 Oct 2025 12:01:01 +0000
Files and hashes: 1: ETp4ram_5wDX-QYsHkSwfey16LY.roa (hash: fc9E3PvcS1jfb9J0ZMzkrwdWGh4l1nHW4cyDiTGJbiU=)
2: ii4u4759dSXtdLeq4H6Srsr4STY.crl (hash: irXFznyrhNrEib07mdEKNspKHmk2lXdKhGIhdpQrti4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:2e:3d:f7:f7:e2:e1:c4:0c:99:02:98:1c:5e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a2e2ee3be7d7525ed74b7aae07e92aecaf84936
Validity
Not Before: Oct 19 12:01:01 2025 GMT
Not After : Oct 20 12:01:01 2025 GMT
Subject: CN=cc4136fd33147e9018d48fd6c84338b1db96ddd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bf:92:b7:b0:9a:af:cb:46:bf:8f:99:ce:b0:
6f:bd:32:31:ed:cf:0a:84:6f:e2:cc:f7:58:e4:18:
52:54:5d:2c:0e:dd:bc:31:39:86:47:64:b9:53:eb:
44:3a:18:44:ba:74:69:7a:ca:85:2f:46:33:5c:83:
34:3e:bd:33:2f:7e:04:40:8a:b4:65:c0:77:df:a1:
60:61:eb:35:3f:8d:89:54:18:ba:e4:20:56:31:ef:
f1:e0:de:a8:be:f0:ba:6d:7b:97:6c:05:ec:50:fe:
d3:1d:69:7c:d6:4f:f8:c6:e4:bf:63:6d:8b:04:47:
b0:e5:ae:72:ba:50:8e:ba:65:f9:41:39:ec:7d:32:
cf:75:ec:df:42:fc:37:16:b3:e0:cb:6b:31:71:9b:
0e:4f:79:3f:ae:ec:43:91:97:80:57:00:fc:ab:e1:
3c:8d:8b:2a:c5:3b:02:77:c1:64:90:54:29:7a:fc:
6d:fa:5c:18:20:85:38:13:99:65:8f:9c:38:05:8b:
d7:d5:11:85:9e:7a:88:85:a1:0a:3e:ee:51:51:24:
40:11:3a:e9:45:a9:9b:db:f9:f2:27:ee:a8:7a:b1:
4b:c6:3f:90:c0:38:02:d6:13:f9:e0:29:f5:c9:13:
26:cc:7a:47:e1:92:06:9f:eb:af:7a:4d:ad:6d:63:
ff:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:41:36:FD:33:14:7E:90:18:D4:8F:D6:C8:43:38:B1:DB:96:DD:D4
X509v3 Authority Key Identifier:
keyid:8A:2E:2E:E3:BE:7D:75:25:ED:74:B7:AA:E0:7E:92:AE:CA:F8:49:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ii4u4759dSXtdLeq4H6Srsr4STY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/1197f2-7f8e-48e4-bda9-f5bb2b2d63be/1/ii4u4759dSXtdLeq4H6Srsr4STY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ea:4c:69:fd:73:1b:9b:92:6c:9b:84:a3:ca:b0:82:aa:83:
d0:8c:18:ac:52:80:98:44:53:15:d3:88:71:f3:42:b5:4f:c2:
fc:41:bb:0b:3c:46:26:58:95:32:5b:54:f0:42:cd:e5:f8:3b:
ac:45:a8:eb:09:e7:f1:2c:23:b2:8c:1a:2a:15:12:8b:6a:e7:
36:be:66:f9:f2:ee:6c:cd:cb:56:c6:ec:6d:4f:bd:b4:75:06:
00:af:02:d3:6b:62:d6:04:46:08:0b:b4:b5:75:92:74:5c:48:
f8:5d:3a:42:46:b9:57:b9:7d:71:dd:1b:9a:b8:d6:00:f3:2b:
a4:38:41:6c:fa:4f:b8:e5:0f:47:f4:2f:3d:09:95:27:30:68:
de:4f:f9:c3:1a:76:d0:e1:aa:1f:c3:6d:1f:ed:93:d2:ff:5f:
c9:14:d0:7d:21:78:28:32:3f:5d:7e:10:ce:d9:05:a5:ea:9d:
ba:c4:a8:fb:7c:72:1c:39:0a:82:2b:63:44:bd:dd:8b:dd:0e:
a4:2a:4b:d3:9c:81:22:a0:a6:f9:7a:ae:96:46:ac:2b:6e:24:
a9:9f:da:58:77:0f:79:66:41:58:79:83:c6:51:e8:d0:fb:aa:
b3:c9:34:5e:85:82:ef:42:7d:d4:cc:95:f7:c1:a7:c2:7d:53:
0e:e6:4a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:19 2025 by rpki-client