Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
File: u4K408Gw94w6GfYWTrKCHiMM_k4.mft (raw, json)
Hash identifier: 7lYWbV8TA9MVjnmhp7ie/dm8UO3mUsvb/9iqQ98nHQU=
Subject key identifier: 38:3C:24:C9:BC:87:C3:AA:81:99:37:8F:2B:1E:7B:5D:2A:AA:93:EA
Authority key identifier: BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
Certificate issuer: /CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Certificate serial: 0199FCFD82F0AB39316406890B1E4780C342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
Manifest number: 10DC
Signing time: Sun 19 Oct 2025 15:01:36 +0000
Manifest this update: Sun 19 Oct 2025 15:01:36 +0000
Manifest next update: Mon 20 Oct 2025 15:01:36 +0000
Files and hashes: 1: sZvwZMkTNt-iUTiQmQ2RW61JCrY.roa (hash: ILtUTNlj+OmXDu1giFXN+JTJafdCM0FAh4hCT6vGfZc=)
2: u4K408Gw94w6GfYWTrKCHiMM_k4.crl (hash: 1mqwu0RoAXJVF7tfjNuevvhBhYzGTiYKvQaSI6HaYtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:82:f0:ab:39:31:64:06:89:0b:1e:47:80:c3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb82b8d3c1b0f78c3a19f6164eb2821e230cfe4e
Validity
Not Before: Oct 19 15:01:36 2025 GMT
Not After : Oct 20 15:01:36 2025 GMT
Subject: CN=383c24c9bc87c3aa8199378f2b1e7b5d2aaa93ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7e:8e:71:31:66:6a:8a:a3:0e:e4:c8:04:47:
34:6f:cc:14:14:24:83:ed:f4:9f:5b:97:99:bf:ae:
08:f3:d6:6a:e3:26:ea:fd:7d:39:cb:14:83:12:91:
a9:40:7b:92:a9:1b:90:1d:a4:26:18:32:d7:6f:c5:
f6:45:07:1d:d1:4e:42:3e:b2:0c:07:e2:7c:85:a3:
c0:36:6a:00:84:ff:f9:9f:f3:14:df:c3:cd:95:33:
64:a9:5f:cc:3a:a5:72:08:f5:10:0c:45:e9:2b:71:
29:ef:31:9d:2b:05:40:62:ff:a7:d2:d7:00:ea:75:
a3:3a:a9:0d:29:ad:7b:f1:5e:d4:37:3e:6c:1f:63:
02:8f:58:a7:49:d8:a9:e9:04:b8:e5:83:0d:8b:7f:
8c:22:8b:3e:52:89:95:19:eb:25:93:ca:8e:b8:b6:
b2:ee:02:b7:f2:67:55:c2:fa:a1:89:58:68:b7:ad:
5d:93:d1:ff:f4:4f:b8:3a:ae:1e:36:c9:c1:16:ed:
3a:7e:09:60:64:d4:48:a8:d9:28:b5:84:02:81:37:
5a:30:e4:95:a3:8e:77:1a:de:c5:6f:7e:3c:8c:33:
1b:0f:27:ed:db:56:97:fb:0a:f9:69:0e:b4:ee:66:
85:0b:81:be:66:ba:17:3e:02:4c:a2:85:a4:26:c7:
a0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3C:24:C9:BC:87:C3:AA:81:99:37:8F:2B:1E:7B:5D:2A:AA:93:EA
X509v3 Authority Key Identifier:
keyid:BB:82:B8:D3:C1:B0:F7:8C:3A:19:F6:16:4E:B2:82:1E:23:0C:FE:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4K408Gw94w6GfYWTrKCHiMM_k4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/280ca9-f7d8-4ffa-ba34-a13f4481bc6c/1/u4K408Gw94w6GfYWTrKCHiMM_k4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5f:ff:b1:8f:b9:ff:45:66:b5:f0:b3:78:93:94:8d:a0:a2:
a8:62:5b:f3:d3:30:af:f8:a1:0f:9c:e9:3f:1f:90:27:bb:a0:
44:83:78:49:bb:aa:0f:10:43:8a:be:23:ab:59:99:d3:c3:ef:
b2:ad:14:06:21:67:a1:e4:24:53:1d:66:bc:88:35:84:51:fd:
3d:f4:57:60:31:4c:16:04:0e:74:6a:5c:02:4a:4a:fa:57:09:
1f:e1:7c:b5:1d:87:30:53:d8:3c:1d:1a:8c:b1:f1:ad:d0:7a:
27:82:b2:ad:fe:a2:16:4e:7f:ee:34:bd:75:95:83:e3:27:81:
c1:5d:6c:f3:70:6f:bb:64:96:b4:6b:dd:d4:af:ff:e0:f4:35:
63:5c:a0:3f:63:11:57:7b:a7:fa:54:a9:1d:b4:b0:09:30:38:
ad:72:14:56:b4:0e:13:0e:75:b7:b7:52:b6:ee:4c:6e:5f:31:
46:c9:ed:4a:b7:9e:cc:af:f1:26:9f:08:d6:54:05:e3:59:98:
55:20:c5:30:ee:da:ba:57:af:c1:bf:38:d9:6d:96:32:96:17:
df:04:7b:2a:61:22:30:8e:cf:a4:df:d9:fe:a9:60:31:48:6c:
11:8c:ce:a7:e3:ab:33:b4:cb:41:fe:d6:e6:79:a3:f7:e4:7e:
2a:83:f7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:07 2025 by rpki-client