Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
File: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft (raw, json)
Hash identifier: Jjc/YkkZ9ljWbWmRv1zEazOZqYkHXV4FYLOQNRP6t58=
Subject key identifier: D9:1D:02:9C:FA:5C:C6:AC:2B:24:C0:96:94:31:52:C8:74:EB:2E:91
Authority key identifier: E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
Certificate issuer: /CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Certificate serial: 0199FCFD46B38F932B5096EA0A5F4FF3907F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
Manifest number: 12DB
Signing time: Sun 19 Oct 2025 15:01:21 +0000
Manifest this update: Sun 19 Oct 2025 15:01:21 +0000
Manifest next update: Mon 20 Oct 2025 15:01:21 +0000
Files and hashes: 1: 4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl (hash: tSY4DiXm0VKieCrTJUjpq00s7duUtS823UP9GXGW5dk=)
2: t1ORbdksbr2p1B59lFrh9IkJsfE.roa (hash: JVz20kQAYF9u2DMBNNZhgOePGcGoxFfVOgHdTdf+BvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:46:b3:8f:93:2b:50:96:ea:0a:5f:4f:f3:90:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e12a2795b6e4df265f65df0a00cb7c7e45deef
Validity
Not Before: Oct 19 15:01:21 2025 GMT
Not After : Oct 20 15:01:21 2025 GMT
Subject: CN=d91d029cfa5cc6ac2b24c096943152c874eb2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f1:84:93:91:63:cf:39:bc:ff:49:be:54:f1:
58:5c:ce:b0:e0:03:ed:cf:1f:59:0f:f5:42:7c:96:
dd:cf:d1:0e:ef:b2:2a:a7:25:65:13:d4:f7:4b:e5:
25:81:64:9b:d1:c0:4b:5b:18:8d:a8:b7:5f:84:91:
6b:9d:b5:f5:bb:3e:35:04:11:68:e0:de:13:8b:d6:
e9:4b:ed:78:67:0b:61:8d:8e:00:11:94:85:8f:06:
06:2e:96:51:44:f9:d1:3d:5a:14:4d:e3:e1:6e:62:
c1:ec:7b:52:98:5a:83:09:c7:62:91:a8:33:8d:35:
70:5e:a1:4c:3a:0a:99:25:e4:8b:0d:f6:74:df:83:
65:ea:43:a7:ea:ad:4a:e0:01:c1:e6:b1:8b:eb:a7:
d8:13:f6:9f:e3:69:a1:f9:d0:18:36:ff:20:33:dd:
be:da:0b:f9:f8:be:65:a1:83:2c:12:8b:09:dd:6f:
3b:99:be:f9:67:2f:6e:92:68:45:7c:0b:46:b5:79:
a2:e5:fa:c6:b9:5f:7b:64:04:60:9a:1c:54:ac:84:
49:07:e8:f4:12:fa:40:84:ad:a0:1a:a6:f7:75:1e:
e4:97:58:7c:41:48:b9:f5:bb:1c:70:58:51:4f:a0:
83:63:48:0b:51:87:3d:5d:69:1d:f8:41:06:e6:47:
0d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:1D:02:9C:FA:5C:C6:AC:2B:24:C0:96:94:31:52:C8:74:EB:2E:91
X509v3 Authority Key Identifier:
keyid:E1:E1:2A:27:95:B6:E4:DF:26:5F:65:DF:0A:00:CB:7C:7E:45:DE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eEqJ5W25N8mX2XfCgDLfH5F3u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/dd5c15-815d-411d-8a56-82c6cf14dfe2/1/4eEqJ5W25N8mX2XfCgDLfH5F3u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:c7:b9:53:30:dc:71:95:c7:77:2c:e7:c3:1a:de:24:12:2c:
12:fc:e7:3c:4f:81:ff:82:bb:ae:1b:f2:25:1d:13:81:00:e3:
f5:3a:5e:5c:ab:37:df:1e:af:b7:32:b2:f0:dd:e8:54:18:0f:
f8:54:db:f8:8c:70:ff:f3:6f:f6:0d:a6:f8:27:13:35:94:10:
de:27:86:2d:23:ae:7b:09:6c:fd:34:14:6e:28:b8:49:72:45:
68:17:e8:36:c6:10:d1:0f:a7:cf:4b:7b:f8:7e:ba:cb:3d:82:
03:6f:d5:84:37:ee:0a:1d:f0:91:49:f3:f6:bf:e9:dd:1c:aa:
9a:bc:f2:61:a6:72:e9:17:ab:7c:77:36:fc:ed:3e:7d:40:cf:
09:6b:87:52:b0:ad:81:78:b2:4d:18:98:61:3b:21:c3:1f:41:
e4:21:2b:4b:b2:d9:6b:54:1d:36:a7:ac:51:15:e4:45:ee:0e:
ea:06:6e:5c:7f:be:af:28:26:62:5a:2e:b1:2c:53:c3:ca:50:
4b:be:66:b8:33:e9:2e:20:25:54:b9:88:81:22:70:bb:42:60:
71:6f:ae:18:64:01:2f:49:e3:45:27:69:49:74:05:48:2c:d1:
8d:8c:b7:68:16:60:4c:e0:9c:d5:ea:e7:d4:d5:99:03:f1:7a:
98:9e:4e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:00 2025 by rpki-client