Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
File: 4awDIrPqtlcuzioKxavxZKW7_yA.mft (raw, json)
Hash identifier: X2Guu8ax2sXP2S2UOrH5S01EEZZMAkh+Wt/byfTOh6I=
Subject key identifier: 3B:6D:68:74:32:C3:9E:33:2E:93:CE:CE:25:CF:4B:86:FA:E2:A2:08
Authority key identifier: E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
Certificate issuer: /CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Certificate serial: 0199FB7CCA5EFE3E7C1E2896CF82D2D09F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
Manifest number: 16EC
Signing time: Sun 19 Oct 2025 08:01:23 +0000
Manifest this update: Sun 19 Oct 2025 08:01:23 +0000
Manifest next update: Mon 20 Oct 2025 08:01:23 +0000
Files and hashes: 1: 4awDIrPqtlcuzioKxavxZKW7_yA.crl (hash: C9v9zOgqKfNVt4zcJMbKjPD5gY/NumBd59VcA95r+f4=)
2: 6L9DAlbkXK81Q7l3f78qPgHOMdg.roa (hash: H7lXA9IHNO8CGxsceOfFah+3Pwu6dBzOzorUprp44zU=)
3: AoQHR-c0TNu8hCvrBSny9rtvc-s.roa (hash: OjMzYAMFYdPVuu7HxYZKXpI6mzGVW1BBR3UyiRLx1pA=)
4: EQbezCZuZ92DkuV3XJNIJgpMcwQ.roa (hash: ouC7+qG8m6kvP27Cs9N1FzVBn73sZt27mXI2ZqqBOYg=)
5: LDm4Z6KcMo2VYx3_khyYeC8O4Iw.roa (hash: zcLdl9fx/6GOLrBrDhcPW18T+TQSB2ZgDSkWNEHGluY=)
6: OVTjGADJ7YYJwQ0oJOwTN2X0vSY.roa (hash: qsBTTkXpQxhgbXJV5zUDTdGyL3Kcpnnbr12OpzsF9V0=)
7: eXkwSgVPS9XZOX05ekvLiV3Hea8.roa (hash: hwC7YsLscA1OGWq1yDoBRShx/gTjgCqvH47aihQduUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ca:5e:fe:3e:7c:1e:28:96:cf:82:d2:d0:9f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ac0322b3eab6572ece2a0ac5abf164a5bbff20
Validity
Not Before: Oct 19 08:01:23 2025 GMT
Not After : Oct 20 08:01:23 2025 GMT
Subject: CN=3b6d687432c39e332e93cece25cf4b86fae2a208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:21:10:f7:e1:49:83:ae:13:b5:1f:b7:ce:6c:
8e:46:e7:d2:ee:1e:58:49:db:69:93:6e:0a:e0:c1:
38:6d:9a:67:86:54:55:99:94:66:ad:c0:20:b0:a1:
3e:c9:ec:61:ab:27:7f:00:a9:29:b9:83:6c:d6:f3:
95:4b:4d:36:ea:18:7d:3f:c3:2f:2d:2a:d3:b4:04:
86:a4:a9:36:2e:0d:16:53:ea:d9:31:53:b4:31:ec:
f1:47:a9:78:33:42:bd:64:dc:0d:d0:79:6b:cb:bb:
d1:51:bf:cb:3d:f0:13:93:d4:26:a1:93:31:3f:1a:
98:5e:6e:e8:b3:27:37:d1:0d:95:3d:a4:89:88:11:
f9:79:f0:37:0d:34:98:f4:2c:51:f2:26:34:ab:0a:
ad:bf:07:b9:57:92:22:bf:25:7f:68:b9:bb:37:82:
b3:b1:e6:d9:f5:cd:6c:04:84:43:9b:32:29:3b:e3:
f8:94:36:25:0e:c8:e4:b0:c4:df:3e:f0:c4:27:6d:
7c:c3:7a:26:9a:9b:0b:92:f1:97:22:d1:97:ab:b5:
91:2b:d2:d8:d1:e4:de:10:91:3f:21:83:1d:c7:35:
22:5c:aa:10:47:29:80:23:ad:2d:93:4b:32:bf:c6:
2d:66:82:9c:bb:14:83:b8:a7:21:75:9a:e7:25:2e:
91:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:6D:68:74:32:C3:9E:33:2E:93:CE:CE:25:CF:4B:86:FA:E2:A2:08
X509v3 Authority Key Identifier:
keyid:E1:AC:03:22:B3:EA:B6:57:2E:CE:2A:0A:C5:AB:F1:64:A5:BB:FF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4awDIrPqtlcuzioKxavxZKW7_yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/ff0036-8313-4b3d-ad7f-8d81fdc6f170/1/4awDIrPqtlcuzioKxavxZKW7_yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:89:c7:39:cf:80:78:41:e0:d9:84:e3:0d:d2:e3:95:4d:0c:
2e:44:f6:3a:aa:e7:bc:cb:1f:ce:f0:d4:be:7b:4c:5c:b9:d0:
0f:1f:f3:a5:26:bd:1f:da:6c:09:fb:1e:ae:ba:0f:f4:68:5e:
78:7a:2e:81:bc:4f:48:e5:73:c4:a1:f7:5d:e3:a0:db:d0:a1:
70:49:b6:89:c1:b8:49:dd:bd:da:fe:ea:1e:71:52:c0:2b:60:
69:1a:cc:da:88:85:15:84:23:d6:06:ec:c4:12:48:96:80:bd:
27:22:d3:89:d9:55:9d:f2:8b:30:a6:01:6b:c7:54:11:5b:36:
cc:5e:a5:1a:b7:7e:60:24:3b:10:ce:d1:50:36:bf:19:04:f1:
89:b3:39:70:b0:3b:73:91:20:c5:1a:b3:1a:bb:97:66:a9:8a:
ad:4a:f4:ff:96:c2:06:6b:82:53:11:b7:3f:03:71:c5:e6:8d:
7e:cb:38:08:31:10:f7:ae:96:41:68:cc:e3:58:b2:d6:86:e0:
a9:1a:3a:84:c2:2c:9e:c5:9a:50:fe:d8:46:8b:12:0d:4c:96:
33:b2:bb:0f:77:f8:73:b5:6b:1f:d2:5b:4a:5c:02:15:b2:6e:
f3:e5:77:b8:6f:03:8e:a5:e0:e3:66:95:62:69:a6:2a:45:13:
d9:c5:4f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:45 2025 by rpki-client