Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: AdWbsNf30igC3EAvzZ/fv7fYlxhAbyhdROpUZ3efWgk=
Subject key identifier: FA:A4:C0:F4:59:8A:8C:31:8E:84:12:A6:2A:D7:4E:40:27:5A:6A:80
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019A00355592B2CD8E07734B127662778E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 07AA
Signing time: Mon 20 Oct 2025 06:01:26 +0000
Manifest this update: Mon 20 Oct 2025 06:01:26 +0000
Manifest next update: Tue 21 Oct 2025 06:01:26 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: PJcD1ug47m3I4bBP4Y3iiwQdA/ANL6iasfJsLGEunXc=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:55:92:b2:cd:8e:07:73:4b:12:76:62:77:8e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Oct 20 06:01:26 2025 GMT
Not After : Oct 21 06:01:26 2025 GMT
Subject: CN=faa4c0f4598a8c318e8412a62ad74e40275a6a80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:14:46:90:6e:31:23:95:88:94:93:93:a9:ff:
4b:c4:ee:ff:07:64:f1:94:e4:b7:4a:6d:d4:aa:5e:
ce:2f:c3:bb:28:ef:4c:17:20:6f:9f:86:43:44:be:
55:cd:83:1d:dc:5f:a2:72:ce:fd:17:49:f9:6d:b6:
8e:e8:ea:7c:5e:8d:f2:da:b6:0b:ac:6f:76:71:3e:
dd:7f:28:a9:5a:56:97:2b:33:6a:fe:6a:16:27:5d:
8a:c1:2c:ab:ab:bf:8f:ee:11:b8:6a:17:9a:4b:b5:
8d:d6:f3:3f:0e:af:16:8e:49:ac:d3:ab:e0:64:ad:
ff:97:bd:c7:69:f7:ce:bb:f8:52:99:54:8e:c9:fc:
7b:7d:11:69:3f:48:07:e0:9d:66:06:ab:0d:70:20:
52:53:30:93:5b:c1:09:43:c6:4c:6b:48:4e:3d:86:
0f:9a:58:f8:4c:31:f6:8f:d7:8b:16:13:38:62:b4:
2f:24:3d:aa:3b:fc:fa:a7:f3:80:57:3f:40:6a:de:
20:cd:c2:fa:e7:05:92:d4:9a:80:69:06:18:f8:c4:
f1:84:43:f7:b2:03:59:31:42:65:42:96:e1:3e:b4:
97:a5:2b:49:c0:bb:8c:9c:ed:96:20:9c:1a:ac:bb:
f1:c2:41:bb:2c:93:f4:0f:75:94:0c:48:a4:54:50:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:C0:F4:59:8A:8C:31:8E:84:12:A6:2A:D7:4E:40:27:5A:6A:80
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1e:3c:da:b7:24:da:68:7d:86:92:06:6e:7f:cc:b8:98:ac:
5b:06:34:46:1f:e9:65:b8:68:88:9b:7e:36:a4:b1:4d:06:54:
75:ed:8c:f6:99:d9:35:6b:97:08:ac:87:cc:11:32:a4:ed:55:
6c:63:bc:14:be:22:79:8e:68:97:5a:53:02:71:9c:c9:ef:fc:
06:46:33:56:c0:a7:0f:5c:41:d4:44:4e:03:55:c8:d6:da:6f:
31:0d:22:bb:24:44:a4:ce:5f:e0:b3:43:8a:b8:7c:05:f8:5b:
1a:d9:57:0b:b6:c5:44:fc:cd:62:4f:1b:00:fa:f9:94:da:42:
87:71:08:70:82:84:64:ae:8c:5d:d4:62:30:9a:71:e6:47:c0:
05:cd:cb:db:7d:ce:f9:ac:1c:a9:a2:c4:8d:99:6c:9b:ba:c8:
77:91:0b:34:60:41:fc:93:ef:4e:92:29:97:2f:17:cf:53:2e:
c3:24:86:f2:ed:8a:27:ac:f4:ec:80:b2:a8:62:52:44:f3:52:
df:c3:1d:fe:1c:96:b8:3c:3e:7d:c2:30:2d:48:d6:c2:2c:fc:
12:43:c3:46:d6:06:e7:e7:5c:7d:ff:1e:a0:20:0f:e9:89:0d:
e4:c2:ea:0b:2e:4d:a8:00:29:c2:52:9c:e2:69:81:bc:8c:72:
d6:df:b5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:31:08 2025 by rpki-client