Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: YWGPpRTsWZBqPQlzf5GnIKwnPN4GzaF6utvhyGxzDoI=
Subject key identifier: CB:B4:B5:ED:D7:80:38:0A:65:FE:8C:AE:70:7D:6E:08:95:D6:57:A6
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 0199FC8F40429C2F34157EE2F79F8BAEB87D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0DB2
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: btlxQpwfU66mxrccymIBr3vVRJzjzsCb1nQj+gnRcSg=)
2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:40:42:9c:2f:34:15:7e:e2:f7:9f:8b:ae:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=cbb4b5edd780380a65fe8cae707d6e0895d657a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:f3:67:7b:af:08:59:4e:39:0e:65:01:2d:
a9:9b:fb:9c:30:4c:8e:c7:f6:e2:92:ef:52:54:2b:
92:64:1a:ae:a2:bc:f9:9c:14:c8:3d:42:16:a2:d2:
07:46:13:94:ae:92:32:90:e4:e9:93:26:4d:61:7c:
59:40:ff:bb:7d:c4:f3:76:03:a8:97:1a:3f:18:6d:
5b:6c:10:2b:60:aa:13:c7:83:e9:33:18:d9:12:dd:
67:68:49:6c:58:95:22:94:f0:0f:4f:ef:52:12:ea:
da:44:a1:6b:a9:70:00:d1:23:6e:53:4f:9f:43:8e:
0d:29:fa:37:6d:44:be:02:e1:b6:df:7a:ba:79:05:
7f:b5:80:61:70:d5:3c:48:bd:72:39:64:2f:0d:fd:
f9:0c:b2:82:97:3e:20:35:81:74:f1:62:22:03:af:
98:79:00:5f:c0:bd:2b:48:1d:52:7b:1d:81:e0:11:
ac:c3:c8:f5:8c:72:54:8c:4f:31:ed:d9:6f:49:dc:
06:09:bc:be:6e:a0:a6:81:d9:d1:b5:ad:39:d8:30:
79:a8:71:c0:3e:3c:26:1b:37:06:78:c7:9d:30:18:
36:c5:97:2f:91:a3:f8:b6:77:a9:40:cd:21:18:72:
c7:e4:41:1b:29:26:8e:42:ac:ed:32:a6:14:b4:c4:
b7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B4:B5:ED:D7:80:38:0A:65:FE:8C:AE:70:7D:6E:08:95:D6:57:A6
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:95:e5:0b:22:8f:cc:46:1f:d1:c5:7b:8e:16:d7:65:36:16:
bd:93:bf:3d:d2:14:18:67:9a:6d:e0:6c:9b:f1:c5:f2:98:71:
34:e7:24:f7:5b:be:67:97:d6:e6:e1:73:90:cf:5c:14:56:9c:
5b:e1:38:64:56:94:f8:37:7d:37:3b:bc:df:3d:04:42:01:17:
db:79:1b:eb:7b:7b:05:d7:8f:0d:a3:94:d1:a9:63:b5:f1:a0:
f4:bb:e8:8c:15:5f:88:5f:a7:42:db:6f:58:61:23:20:0a:f4:
31:c8:0a:3f:8b:39:7c:ba:e6:34:c7:51:e8:39:fd:23:c0:a4:
ba:64:ae:fd:aa:b8:c9:cf:04:b2:0c:09:e9:bf:62:51:da:f2:
46:e3:aa:73:b9:c6:79:29:24:e0:15:66:f6:66:b0:d0:c8:f1:
8c:67:d3:1d:ed:8d:ce:df:60:29:ac:3f:cf:a1:1a:60:6a:9b:
4b:06:dd:d7:04:56:d4:44:f5:4e:14:f4:1f:31:8b:e7:99:67:
f6:fd:bd:62:ea:b9:a6:82:2b:c8:c5:3f:a5:0b:00:a9:bd:a4:
c1:d1:ee:be:5d:7c:e9:05:24:2a:7f:f8:c3:c1:24:29:f5:ad:
e0:d6:32:f4:81:65:30:65:e5:8f:af:8c:21:75:f6:9a:ae:20:
e0:15:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:37 2025 by rpki-client