Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
File: 4jSU4MwSx1rtHQHesVvk4mYrSFo.mft (raw, json)
Hash identifier: vlmxD/SNeA8yOY5JNY3l6CFriHbfyJsjdVV3UrdcCCU=
Subject key identifier: 4C:15:9C:F8:75:B7:4E:AE:BB:14:10:F0:E2:11:43:A8:43:0D:06:27
Authority key identifier: E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
Certificate issuer: /CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Certificate serial: 0199FEB4D075564A089199887761DFD8E63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
Manifest number: 0999
Signing time: Sun 19 Oct 2025 23:01:26 +0000
Manifest this update: Sun 19 Oct 2025 23:01:26 +0000
Manifest next update: Mon 20 Oct 2025 23:01:26 +0000
Files and hashes: 1: 4jSU4MwSx1rtHQHesVvk4mYrSFo.crl (hash: OynOVdUKcydnLg56kQm0UxahqiUB/cK+mlXqsishCvs=)
2: LASSugvVGOxlTSqLMMa1Fpo5qcI.roa (hash: 7gLhtiJHn2UN7WnAAMzittKwA7y319dAzNsYcYCU/0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:d0:75:56:4a:08:91:99:88:77:61:df:d8:e6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23494e0cc12c75aed1d01deb15be4e2662b485a
Validity
Not Before: Oct 19 23:01:26 2025 GMT
Not After : Oct 20 23:01:26 2025 GMT
Subject: CN=4c159cf875b74eaebb1410f0e21143a8430d0627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:7f:fe:dc:03:e7:85:42:5d:cd:da:26:1d:
fc:6f:8b:9a:87:19:b4:62:9e:fe:ba:b3:a2:61:38:
8c:7e:b2:c6:69:ef:f1:a9:35:42:c4:f1:d0:6d:48:
e6:e0:25:a8:d5:e5:a1:c8:36:eb:f2:51:60:16:1b:
e1:c7:1b:07:49:4c:2d:c3:78:d7:15:69:ea:0e:37:
9a:65:d5:16:85:63:0b:79:5a:ee:83:ad:e6:f8:45:
43:a2:08:c4:f0:5b:a0:d0:e1:c5:6b:71:48:7f:b3:
ba:ff:c6:41:c6:60:53:40:80:70:9e:e0:34:6a:7f:
ec:db:32:e0:99:52:9c:ed:65:b7:85:ec:fb:2b:bb:
44:c9:86:21:13:85:0b:e2:c4:d7:fb:49:01:fa:3c:
e1:f8:cd:9c:3e:b1:7b:ab:25:f2:cb:8d:4a:a4:4d:
32:e5:79:b4:ac:1b:45:f1:22:f8:52:c0:94:b1:9d:
bf:06:02:e1:a1:95:ef:4b:da:a7:2f:e2:9c:28:0a:
28:8b:5e:b3:75:b9:de:af:46:1f:19:61:fe:81:4c:
78:a3:4e:22:75:22:53:40:49:40:83:f9:5a:d1:b1:
c9:cd:6d:a9:97:49:7b:3c:4a:ad:86:42:8b:34:b8:
0a:65:a2:52:af:cf:4d:09:0c:45:7c:01:0c:40:d3:
fc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:15:9C:F8:75:B7:4E:AE:BB:14:10:F0:E2:11:43:A8:43:0D:06:27
X509v3 Authority Key Identifier:
keyid:E2:34:94:E0:CC:12:C7:5A:ED:1D:01:DE:B1:5B:E4:E2:66:2B:48:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jSU4MwSx1rtHQHesVvk4mYrSFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/0db5e6-867c-4c3c-bb4e-22740bf2d5ea/1/4jSU4MwSx1rtHQHesVvk4mYrSFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7b:86:b1:44:24:53:e5:2c:b7:16:8a:ea:3b:c4:9d:2e:c8:
de:80:a6:db:43:29:23:6e:6d:82:34:48:7c:cb:8d:c6:18:67:
13:47:b3:ec:a0:24:1b:56:0d:a4:30:8b:45:9d:d4:b0:ba:e7:
50:7a:41:fe:3c:49:4c:86:03:c8:54:6d:04:40:c9:2a:19:68:
6e:79:47:e5:12:3d:b0:f4:ac:2e:7d:0d:80:7a:24:5e:4b:d6:
86:a2:83:fe:2e:3f:3e:28:21:0a:4e:e4:42:76:41:a9:a2:36:
e9:bd:63:10:6f:24:1e:e9:9c:a1:1a:37:b1:20:91:ae:8e:29:
e5:84:58:16:97:26:f9:bd:02:c8:79:bf:f2:e8:8e:8c:2c:8e:
1b:15:18:a0:ce:8a:f4:0b:a3:d4:02:e6:84:74:41:3c:13:ac:
ee:81:e5:a7:07:a4:a1:19:d4:c6:ab:63:17:42:e0:2d:01:24:
10:51:e9:a4:a6:4b:4b:aa:5e:63:3c:c3:31:f6:e6:20:11:1c:
fa:b8:c2:7f:6e:5f:82:2f:07:b8:37:2c:69:fa:40:6d:7f:18:
ac:84:30:a8:19:20:ea:87:e9:1c:a4:f4:d5:56:f5:41:22:be:
6a:da:9b:da:dd:8c:2d:96:57:65:3f:e6:74:99:12:47:36:fe:
51:e6:a4:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:54:54 2025 by rpki-client