
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
File: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft (raw, json)
Hash identifier: +o+OGW5jW84u9kCQqk2VQCmIPCnQ75guHMYWl43JkKQ=
Subject key identifier: 55:06:9E:EA:10:1F:7F:33:27:E7:22:38:11:24:A2:AD:59:BD:1A:31
Authority key identifier: E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
Certificate issuer: /CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Certificate serial: 019A0222A7B11B40472819A8179D4364B575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
Manifest number: 16F7
Signing time: Mon 20 Oct 2025 15:00:16 +0000
Manifest this update: Mon 20 Oct 2025 15:00:16 +0000
Manifest next update: Tue 21 Oct 2025 15:00:16 +0000
Files and hashes: 1: 1-iJXKulxk75axQt0SWXxhU53Dr8.roa (hash: AOdRR2tLhzCT6KWQkYdadkTVDMEnSkAvEIbZwbvnOv4=)
2: 4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl (hash: +qeVzk0Igeyr4FujRAbeSXbu9YAYtlIfNDBN+f+844A=)
3: QSdwbn6ALsEGe_yU6cXgEdE9fZw.roa (hash: CSscM3Lnl50LpuVA3uePIZe0PqLRyMqB/N7RLZ/QCf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:a7:b1:1b:40:47:28:19:a8:17:9d:43:64:b5:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e215be4532e9588c40531a7f331eabfbf4770a5e
Validity
Not Before: Oct 20 15:00:16 2025 GMT
Not After : Oct 21 15:00:16 2025 GMT
Subject: CN=55069eea101f7f3327e722381124a2ad59bd1a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d9:3c:21:5e:d3:a9:27:97:79:89:f9:99:f5:
56:14:8c:55:93:ea:3a:b7:7b:4d:81:fa:73:62:97:
ac:a9:ab:9b:be:8c:52:4f:5a:fa:78:9f:2c:4d:a7:
3a:85:ff:95:e5:0e:f0:5d:f3:bf:6a:e8:4a:6f:1e:
a9:c8:3a:b5:c4:2d:d2:0c:fa:c9:87:13:23:9c:a9:
e0:3c:73:1c:88:25:f4:5e:69:6d:94:b8:20:bd:0e:
d6:4e:8c:5e:2f:4b:5c:cf:34:69:fa:77:bb:37:94:
d9:c1:74:c2:b6:0b:52:f7:dd:cc:5e:b6:b4:01:ae:
04:14:95:22:09:7c:eb:b9:38:ba:ef:ca:04:58:8d:
5c:dd:d5:06:b6:d2:63:6d:54:c4:11:81:aa:3f:fc:
77:31:70:f3:d7:3c:bb:a3:fa:e8:3d:6c:76:6f:93:
cf:a5:82:57:aa:ff:9f:34:b7:f9:de:54:e5:5e:e2:
1b:54:13:9e:e9:dd:37:dd:5b:5c:e1:fb:91:b4:dc:
e7:7c:2a:fb:7e:b5:10:72:2a:7f:a2:93:24:eb:1a:
4b:80:71:67:98:5d:e2:8f:5c:23:a3:26:89:1b:04:
93:00:76:48:d3:12:b7:4c:9d:78:c2:95:3d:d4:63:
3f:bc:e9:63:f5:b3:3f:2a:67:85:a9:c7:1a:17:bc:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:06:9E:EA:10:1F:7F:33:27:E7:22:38:11:24:A2:AD:59:BD:1A:31
X509v3 Authority Key Identifier:
keyid:E2:15:BE:45:32:E9:58:8C:40:53:1A:7F:33:1E:AB:FB:F4:77:0A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/4ee85e-22cb-42ed-9071-4651fd802737/1/4hW-RTLpWIxAUxp_Mx6r-_R3Cl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:92:47:e3:8b:40:50:61:b5:1d:6c:0f:cf:f9:06:d5:0e:73:
78:7f:3b:64:d4:1a:b3:26:7f:cc:2b:40:17:d5:89:cb:3c:f1:
29:ea:0d:7c:bf:02:40:bb:33:8d:eb:c1:19:94:54:a1:2c:32:
91:cd:9c:b3:95:28:d6:ba:64:cf:70:f2:5b:76:ae:2c:d1:38:
71:3a:89:c4:9d:1e:e0:13:49:db:3a:f9:db:b7:bc:a0:9f:ef:
6e:74:48:a0:59:3f:35:3d:3e:71:8f:fb:d2:a0:01:15:3f:c7:
1e:62:b1:b7:93:0e:9a:bf:5b:74:b8:be:27:99:b1:83:f9:81:
33:f5:bd:6f:04:4b:3e:a9:34:c6:d1:7b:ed:4a:91:1e:b8:b6:
54:c3:14:69:4f:17:52:7b:2e:6f:14:b3:93:18:46:7c:26:f7:
cd:4c:ef:81:d9:fd:e8:b5:01:14:a7:d0:58:d1:b5:76:a9:b8:
c7:3c:53:ba:f7:5d:21:d0:62:16:67:f0:79:d2:79:32:44:e2:
6c:e3:5a:df:df:fa:e0:0e:2d:7a:16:dd:b1:75:94:10:2b:dc:
3e:6a:0e:72:e8:83:c3:1c:98:aa:cb:fe:06:b5:4d:37:76:e1:
0d:d0:ac:bb:98:ef:a0:d9:06:7c:88:76:30:7a:cc:aa:75:e5:
3e:46:b0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:11:02 2025 by rpki-client