Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
File: 4D9VAK7-arTb3hJAc6N7wNwzHoA.mft (raw, json)
Hash identifier: CV4HAYHMW71hdJjj26IgNHgX5JLrERB0g849xNW3myU=
Subject key identifier: B5:81:5E:B2:16:1B:C0:41:AF:4B:B8:D3:5A:0A:BC:35:26:3F:3E:59
Authority key identifier: E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
Certificate issuer: /CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Certificate serial: 0199FC2168790B7BF7AF6DB9E07A098F8838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
Manifest number: 95
Signing time: Sun 19 Oct 2025 11:01:11 +0000
Manifest this update: Sun 19 Oct 2025 11:01:11 +0000
Manifest next update: Mon 20 Oct 2025 11:01:11 +0000
Files and hashes: 1: 2l62dAKm04WNCR-je-bPkSJnLtk.roa (hash: nr1ofanqNDye36o5ymwo4drebXuJubRmduTbD4ErXCA=)
2: 4D9VAK7-arTb3hJAc6N7wNwzHoA.crl (hash: /ImVgw81q2XWiaJSVOHS4t+kpiM99C0XtFIIlF4V0tk=)
3: KZbQxsiRHs5YN9o-TB41tup8grs.roa (hash: lbxZF46nVuZIlOO3tq5CMkFz19fAyL6hszjHRAwWgM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:68:79:0b:7b:f7:af:6d:b9:e0:7a:09:8f:88:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e03f5500aefe6ab4dbde124073a37bc0dc331e80
Validity
Not Before: Oct 19 11:01:11 2025 GMT
Not After : Oct 20 11:01:11 2025 GMT
Subject: CN=b5815eb2161bc041af4bb8d35a0abc35263f3e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:46:a1:da:19:fb:85:12:58:88:fa:ef:b6:33:
54:7d:21:f3:fb:57:f9:6f:32:5d:0d:98:6d:86:96:
e5:c1:70:2a:ac:59:67:9c:08:0b:d2:cc:71:4f:f8:
23:89:a2:48:a3:79:3b:9d:e3:97:60:45:9e:c5:d5:
ad:d8:2f:c3:e9:4c:af:b8:ec:ae:63:3a:38:5d:e2:
6a:8b:95:dd:6d:8b:1d:36:84:88:9a:96:f2:40:85:
37:02:f3:32:d9:ef:e5:3b:c5:74:ca:91:a1:06:a4:
ff:2b:a4:a6:d6:29:49:1c:b0:04:99:f5:29:6f:e2:
fe:da:9a:09:fb:72:a4:75:cf:bd:bb:13:d2:48:ec:
4f:5e:89:10:21:82:bc:c6:69:8a:35:7a:5f:82:f2:
94:95:43:7c:1f:3f:a1:92:3a:20:4d:fd:25:56:45:
28:31:99:23:59:4b:48:2c:9b:57:0e:51:43:be:7f:
0c:4d:41:45:5f:f0:f5:59:3c:2f:73:1e:45:63:4d:
0f:a8:74:9d:6e:3c:ed:6a:91:2a:0a:3b:53:3a:f0:
6f:55:12:4e:4a:a2:ba:9b:c1:8a:6f:51:0d:bf:b2:
30:7f:81:47:78:a7:bd:81:6c:25:96:07:d9:ab:7c:
f7:f8:63:bc:68:dc:fa:c8:b7:f7:58:41:37:14:b0:
03:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:81:5E:B2:16:1B:C0:41:AF:4B:B8:D3:5A:0A:BC:35:26:3F:3E:59
X509v3 Authority Key Identifier:
keyid:E0:3F:55:00:AE:FE:6A:B4:DB:DE:12:40:73:A3:7B:C0:DC:33:1E:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4D9VAK7-arTb3hJAc6N7wNwzHoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/27db7b-c0a2-4892-9047-3ac565dcdf73/1/4D9VAK7-arTb3hJAc6N7wNwzHoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ff:32:3a:ed:88:42:94:e5:0f:ee:94:81:1d:73:b5:8a:05:
3c:c4:2e:6e:74:b8:ab:be:65:ca:4c:04:d9:a9:d0:ca:de:ef:
87:b1:74:38:5e:03:ae:e8:8c:71:22:82:fc:16:60:de:ed:7f:
1b:9b:37:cd:9f:6a:15:d1:f7:a4:5d:af:64:a6:92:d1:b3:72:
bd:75:1e:f9:7a:40:a6:c9:f3:26:75:b1:68:b5:14:64:71:2e:
c8:14:f5:a7:4c:1c:7a:0c:f0:0b:94:1a:d8:4d:f3:0a:17:89:
53:c4:12:b0:a0:87:7c:d6:56:c4:30:b0:4b:81:f6:3d:b5:43:
1d:4f:4b:ec:c6:00:b4:3d:ad:d9:8c:20:7a:24:b8:d0:3f:51:
03:20:94:43:26:9a:ee:8f:e0:57:ce:b2:29:eb:83:2c:11:a3:
a9:dd:d5:95:74:4d:da:58:08:0d:da:19:0d:1a:46:b5:42:32:
76:3b:81:49:4f:27:98:1d:ea:aa:73:c0:1f:8c:91:2b:d0:97:
af:de:15:b1:bb:29:77:60:93:38:0d:b7:3e:16:6f:ed:19:68:
e5:c1:46:dd:8b:11:6f:7f:dc:de:86:9f:88:3e:ad:59:de:ff:
90:22:23:c0:ac:4d:60:86:93:43:0a:45:81:49:dd:0f:50:74:
ed:9e:bb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:25 2025 by rpki-client