Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
File: 4a7RSE6W5L95k-m4Z7NMNNaorjY.mft (raw, json)
Hash identifier: UYVA7ZkNjR6RpIX7/isOAgHCr3HZ8jiKJiwssl62tLE=
Subject key identifier: A3:3A:54:61:31:D8:FB:53:D9:37:F2:A0:52:C5:91:93:16:D7:27:F3
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 0199FC8FAD76E43D7F57AB1ADC70C4A386AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
Manifest number: 0D9A
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: 4a7RSE6W5L95k-m4Z7NMNNaorjY.crl (hash: Yt+I7wOV+wx9VtlT3fllfUPmoty2g9EIieja6Zi4EJI=)
2: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (hash: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ad:76:e4:3d:7f:57:ab:1a:dc:70:c4:a3:86:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=a33a546131d8fb53d937f2a052c5919316d727f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:19:02:87:00:1f:58:fb:a2:84:57:6f:39:
74:4a:8a:c1:0b:0e:af:72:30:f6:62:5d:63:58:79:
b1:7a:87:bb:01:ec:99:77:b9:e9:70:bd:b0:8f:b1:
e2:ec:11:4e:43:20:4e:e8:47:90:5e:c0:77:18:df:
ed:6b:06:09:d6:b4:83:f5:62:56:64:df:70:5c:af:
69:0b:e7:57:8d:f2:7f:ce:b6:55:85:38:68:3f:a8:
1b:fa:5f:7f:28:8d:09:0c:4a:9a:ab:3f:d0:af:34:
99:56:13:7a:d8:d3:13:0b:cd:fb:57:a9:9b:03:a3:
9d:95:5f:ca:e0:f9:6f:e1:a7:b3:c8:fc:c8:d1:cc:
6c:16:cd:b1:0c:7b:c2:52:64:fa:e1:40:77:89:bd:
74:1c:14:59:19:c0:c3:8f:69:3a:1a:08:2e:45:80:
91:48:7e:ee:4c:35:a0:97:94:e6:7a:9d:2e:51:d9:
b1:d9:f4:76:bd:97:1b:98:01:b8:90:e9:e4:7b:ec:
a8:6d:f9:53:61:be:39:41:e0:09:8e:36:31:fb:87:
62:e6:d4:c7:8e:02:dc:e3:b9:ca:a3:9a:3a:58:4a:
9c:0b:90:3b:d5:12:89:1c:83:47:0d:56:b1:72:e1:
a2:2e:31:71:07:95:c2:d5:e6:7e:93:08:82:85:d3:
d5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:54:61:31:D8:FB:53:D9:37:F2:A0:52:C5:91:93:16:D7:27:F3
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:1e:3c:89:d8:65:c1:1b:cb:49:e6:94:e2:37:bc:c4:f1:c6:
aa:90:6f:ef:3c:02:2a:6c:38:e3:cd:b9:54:15:be:96:0c:1c:
55:6e:66:ff:41:30:9e:f0:51:11:8b:63:87:49:c9:73:1f:45:
1a:95:91:bb:bc:58:57:b3:6d:5f:9c:38:a6:fc:1d:7b:5e:b9:
0a:e5:f5:4d:a9:7a:de:9a:fd:08:af:74:24:6c:0c:e5:ad:a8:
73:ed:bf:12:50:34:a7:6b:ba:78:5c:7e:9f:b7:0e:50:05:cd:
f0:03:1e:3f:c1:33:a3:c6:17:af:70:fa:35:e1:af:2b:ec:2d:
bf:48:0b:f8:ec:56:8a:c2:f6:f3:b6:ad:7b:4b:18:09:08:63:
47:42:6e:98:a4:ce:62:bf:59:f9:9f:ab:92:c7:b8:1c:48:ad:
e8:34:36:27:56:22:e5:e9:4f:5d:c9:da:c5:e2:64:9a:6f:a8:
6c:ab:c2:b8:33:73:cb:ba:1d:5b:38:af:23:00:0d:97:25:32:
b1:af:c4:90:4f:7b:f2:ee:29:00:19:8c:39:a8:fd:12:a7:10:
20:9a:0d:1a:84:51:e7:d8:a7:fc:10:7e:d6:a1:a9:37:21:f7:
e3:07:b4:1c:9e:ed:26:c4:e6:be:9a:c0:3e:49:93:97:4c:cf:
2c:e9:49:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:13 2025 by rpki-client