Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: sg6aPClHRwMux7Ln719/sjjFTAjWIocEGIHRiPbW3kU=
Subject key identifier: D1:53:BA:52:94:18:E2:C8:D6:96:64:3E:8B:01:33:76:6C:03:15:BD
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019A0035C8525A6942A025CAD2CE9BA5734B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 16F6
Signing time: Mon 20 Oct 2025 06:01:55 +0000
Manifest this update: Mon 20 Oct 2025 06:01:55 +0000
Manifest next update: Tue 21 Oct 2025 06:01:55 +0000
Files and hashes: 1: 1-iJXKulxk75axQt0SWXxhU53Dr8.roa (hash: AOdRR2tLhzCT6KWQkYdadkTVDMEnSkAvEIbZwbvnOv4=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: lWYTS2g2IF/YjJWdLWxwdR2yCLsCMJ25SbGqXRp4Lts=)
3: QSdwbn6ALsEGe_yU6cXgEdE9fZw.roa (hash: CSscM3Lnl50LpuVA3uePIZe0PqLRyMqB/N7RLZ/QCf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c8:52:5a:69:42:a0:25:ca:d2:ce:9b:a5:73:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Oct 20 06:01:55 2025 GMT
Not After : Oct 21 06:01:55 2025 GMT
Subject: CN=d153ba529418e2c8d696643e8b0133766c0315bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:07:4b:9e:da:98:97:69:e4:7a:67:95:49:84:
a9:cd:a5:5d:19:3e:6c:f3:a4:2f:b1:06:41:64:61:
10:bc:f9:29:fc:b3:bb:ce:2a:f0:6d:09:9f:c6:5a:
2e:2c:c8:02:7c:83:f1:c0:3f:c2:ab:ba:06:21:e6:
08:32:bf:d5:08:50:fa:9b:ea:be:21:be:0f:52:73:
fc:08:1d:3e:be:ef:9f:f8:f1:53:4b:1b:b0:ad:f1:
c0:e9:ca:b6:30:79:9d:f6:05:e0:4e:9f:88:56:60:
66:3e:4b:e0:8f:b1:52:24:09:0d:dc:3d:01:6f:cc:
ca:2c:a9:28:90:a0:6e:79:a3:16:0d:b4:24:53:77:
a7:f3:7d:02:c1:3e:b9:c4:6c:43:bb:77:13:47:ec:
f8:b4:5a:75:f7:e3:ec:64:5a:eb:2c:6f:10:0a:3d:
18:1a:6e:5a:0c:f2:1a:32:20:49:f0:8f:05:2a:41:
91:e3:7d:51:d9:f6:c8:b0:1c:ad:12:9c:67:bf:cc:
e6:b4:d8:95:b7:69:bc:9d:a6:e6:c1:f1:45:d8:53:
cb:55:92:f2:22:ef:4d:9f:ff:8e:f6:4d:71:6f:f5:
f1:33:93:18:59:94:90:84:fd:2b:b6:2e:93:f3:7b:
1f:86:ed:08:4b:60:c8:ce:ae:0b:2a:27:26:fc:a5:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:53:BA:52:94:18:E2:C8:D6:96:64:3E:8B:01:33:76:6C:03:15:BD
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:f4:f4:7a:24:1b:05:71:a5:90:a8:d6:f6:9d:64:5d:98:69:
15:0d:7b:b6:b4:c0:79:ab:5a:77:08:d4:42:07:78:b5:82:26:
84:0e:43:a7:4b:18:b0:ba:b5:ff:a2:9e:c9:39:8f:b8:e9:d5:
75:50:1a:82:96:3a:5a:e4:a1:9e:c0:77:fb:04:93:12:61:2e:
aa:91:ce:a2:1c:09:8f:cc:cf:77:79:22:23:f7:12:3e:09:ca:
25:2a:df:13:2e:2a:0f:7d:be:f6:d2:b2:11:92:9f:73:04:14:
14:08:33:e8:1c:43:96:c8:a2:78:9c:24:3a:46:89:df:7b:5f:
5a:03:1b:5f:ea:b2:89:ef:71:7b:98:ef:cf:23:01:e7:67:c1:
fc:57:47:5e:18:cf:aa:1b:65:33:b5:ad:bd:6a:57:33:f8:5b:
48:11:6f:24:0e:3e:a1:70:05:89:53:f9:84:d7:20:22:2d:cf:
97:6c:fe:82:db:9d:cf:4b:75:d2:88:df:a4:78:50:09:7d:b8:
a1:76:7c:57:a1:c8:ba:19:ab:52:a1:21:82:4f:98:04:c2:34:
f1:cf:35:7c:da:83:a1:2d:88:37:17:e7:3f:ba:57:81:e8:45:
bd:8c:1d:f8:83:a1:02:de:b8:34:3b:de:c4:e0:82:f9:97:54:
c5:a6:4d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:27:11 2025 by rpki-client