Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
File: 4T0_tqhjrA-k0f7v467DntjTiVw.mft (raw, json)
Hash identifier: HQ2QaHrWYkmEIvK8xS5ECDEIX+pTqmqJG7M7FvIO6UU=
Subject key identifier: 70:86:7C:92:A6:FF:73:57:1E:F1:C1:AF:F1:F0:44:C9:31:CC:5F:D0
Authority key identifier: E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
Certificate issuer: /CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Certificate serial: 0199FCC6EAAB760B601907B6C6DC2207E045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
Manifest number: 1636
Signing time: Sun 19 Oct 2025 14:01:58 +0000
Manifest this update: Sun 19 Oct 2025 14:01:58 +0000
Manifest next update: Mon 20 Oct 2025 14:01:58 +0000
Files and hashes: 1: 4T0_tqhjrA-k0f7v467DntjTiVw.crl (hash: eCIlQUkGoGBJzicqj6/fQiEPtf61isetKXJhyo8gnt4=)
2: C_W5uFOffH81U1XB_VG_eFr8n_A.roa (hash: kM5BT5a8AHJ+VqwyNcuISudnKqdFzEc+qETwFrySAkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ea:ab:76:0b:60:19:07:b6:c6:dc:22:07:e0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13d3fb6a863ac0fa4d1feefe3aec39ed8d3895c
Validity
Not Before: Oct 19 14:01:58 2025 GMT
Not After : Oct 20 14:01:58 2025 GMT
Subject: CN=70867c92a6ff73571ef1c1aff1f044c931cc5fd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:88:80:a1:df:85:8b:8d:d1:37:ed:71:9a:a0:
8e:4f:f4:f7:1f:4d:57:e4:d0:4f:c7:7b:66:f1:24:
9b:f2:76:9b:22:bc:51:4d:c2:fd:ef:14:2a:cb:a2:
d3:27:16:2d:de:18:f9:2f:1c:b2:61:68:56:ed:9c:
76:da:53:65:69:da:f0:ad:88:ae:f1:06:4c:6e:1f:
a3:67:ab:26:df:c3:d2:ab:85:30:9f:01:da:f2:48:
d1:4f:4d:a0:fd:3a:a4:20:5e:e1:6f:20:03:4d:a5:
2c:8b:61:d9:76:83:80:b9:86:24:5e:3c:ab:af:5f:
1c:0e:cf:22:42:af:40:80:98:d4:3b:63:9a:a8:ae:
2c:90:33:07:2e:f3:76:2c:4c:d1:f2:6f:a1:6e:55:
83:58:59:40:da:bf:bc:56:89:bf:db:2b:77:c3:7a:
cd:47:5d:57:5a:a7:0b:4c:4b:41:b5:58:9a:20:d3:
d4:bd:59:49:30:24:93:b7:51:a9:af:f7:84:e0:be:
22:06:c6:73:a8:20:d0:6c:38:b9:88:32:78:bd:ff:
95:5d:60:fb:46:ca:eb:4b:63:06:39:68:58:a4:eb:
e2:b5:45:a2:f2:5e:e5:a8:e3:c4:a3:c0:7c:44:1b:
a8:71:df:48:82:d8:60:24:fe:13:d7:6d:8e:bc:f3:
99:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:86:7C:92:A6:FF:73:57:1E:F1:C1:AF:F1:F0:44:C9:31:CC:5F:D0
X509v3 Authority Key Identifier:
keyid:E1:3D:3F:B6:A8:63:AC:0F:A4:D1:FE:EF:E3:AE:C3:9E:D8:D3:89:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T0_tqhjrA-k0f7v467DntjTiVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/a5f498-6c76-4230-93d1-a39e009627ef/1/4T0_tqhjrA-k0f7v467DntjTiVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:33:72:f1:23:8e:13:cc:36:3c:f8:48:4b:7c:55:ca:3b:b0:
fb:be:d9:64:50:7e:19:f9:ac:db:16:dc:d1:b2:50:db:2d:61:
39:84:84:56:fe:77:ae:60:bd:5b:7f:0f:a5:72:ca:6d:f1:17:
ee:8a:22:53:0e:ed:1a:73:c8:2d:bf:77:19:6c:63:56:d5:f9:
6f:89:b1:c3:7f:0f:94:c3:28:b4:91:91:98:80:7f:58:95:02:
6f:22:2a:f3:1a:15:44:b8:f5:8b:04:a5:a6:48:29:e7:bb:02:
7d:ec:4e:2d:06:3a:97:dd:bb:b0:ae:43:20:bd:48:ff:21:f7:
fa:62:43:ef:83:2b:b9:77:26:c9:da:28:38:f1:e5:bc:b2:2d:
44:dd:81:bc:7c:2b:ae:c5:0c:60:51:67:75:6e:73:66:39:ff:
41:6f:4b:1a:93:56:84:74:f5:23:61:06:19:e8:37:94:63:0a:
fa:e1:31:97:c7:04:7a:e4:c6:86:b4:c5:37:dc:5e:50:a7:7f:
91:57:dd:f1:e7:d9:46:45:1a:5b:e1:5a:79:c9:78:2e:06:c1:
63:f2:f2:04:e8:66:df:e5:87:83:03:71:16:2b:f0:0d:a7:91:
48:cb:fc:8c:bb:b7:2f:ce:7a:80:83:03:14:59:cd:a7:ab:86:
17:05:4f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:42 2025 by rpki-client