Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
File: 4te3649H5Sd5Ev8FjP7X2Jn8abk.mft (raw, json)
Hash identifier: 23J/ECIPF/ioquGtvae4dBDJhRO3YEmLmuryRFxwPms=
Subject key identifier: 14:E8:82:98:26:1E:8E:36:AC:84:4E:CA:8A:46:A0:3B:E3:EB:5E:83
Authority key identifier: E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
Certificate issuer: /CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Certificate serial: 0199FFC75AE3EBB58592F44EC7A251D229C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
Manifest number: 1673
Signing time: Mon 20 Oct 2025 04:01:18 +0000
Manifest this update: Mon 20 Oct 2025 04:01:18 +0000
Manifest next update: Tue 21 Oct 2025 04:01:18 +0000
Files and hashes: 1: 4te3649H5Sd5Ev8FjP7X2Jn8abk.crl (hash: hJyG+39eV5zCg5xfcBbhh+uZWHoAGzFJSKCFFJWO6Xk=)
2: T7HJ2-tjdriOGAxfth6N3m1dxyY.roa (hash: llPCQsjAeQDplZsfiLoaF630T6RziIZ2ZPKVofqV5Fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:5a:e3:eb:b5:85:92:f4:4e:c7:a2:51:d2:29:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d7b7eb8f47e5277912ff058cfed7d899fc69b9
Validity
Not Before: Oct 20 04:01:18 2025 GMT
Not After : Oct 21 04:01:18 2025 GMT
Subject: CN=14e88298261e8e36ac844eca8a46a03be3eb5e83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c1:26:04:53:51:7f:36:b8:54:cd:12:bd:1c:
8c:cf:94:32:64:dc:db:a0:eb:ae:6e:d7:bf:5d:f6:
a2:27:4b:be:90:6e:c8:04:94:39:3b:ca:87:8a:83:
52:bb:77:db:f3:c6:c8:c6:63:b7:25:4c:9c:6c:42:
6d:3d:ce:c9:ac:d1:4d:fb:67:39:9f:ed:f4:13:c8:
18:95:27:3e:a8:8b:77:11:ba:ea:5b:4f:94:d5:22:
e4:74:c6:c9:52:c9:cb:76:c2:48:76:a5:74:70:5b:
91:dd:2e:16:34:09:4e:e8:2f:c5:be:6d:f3:39:78:
93:f3:18:34:59:60:75:be:c1:1e:6d:35:f0:fd:29:
d2:32:70:e2:b8:31:16:89:ef:05:f5:9c:a4:df:3a:
58:09:0f:2b:a6:32:11:d0:48:37:56:ab:cd:ef:db:
78:63:4a:28:7b:c0:c6:ca:be:40:64:61:35:a3:3c:
8a:72:20:1e:4d:41:01:df:88:2f:6f:26:12:c7:5e:
ed:5d:75:b7:1e:5b:3e:c6:d8:81:55:ce:1a:74:1a:
a0:1c:99:d2:36:f3:c4:4c:ba:ec:41:2f:fe:a4:64:
04:27:e0:2d:81:06:2c:ff:24:3d:9b:9a:76:52:4c:
ed:66:d3:a1:b8:60:b6:a3:2a:e4:97:1a:d5:a2:71:
1f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E8:82:98:26:1E:8E:36:AC:84:4E:CA:8A:46:A0:3B:E3:EB:5E:83
X509v3 Authority Key Identifier:
keyid:E2:D7:B7:EB:8F:47:E5:27:79:12:FF:05:8C:FE:D7:D8:99:FC:69:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4te3649H5Sd5Ev8FjP7X2Jn8abk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d33bca-729d-43e3-95f7-7b041c54576a/1/4te3649H5Sd5Ev8FjP7X2Jn8abk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:56:b5:c2:ac:4f:5c:25:8d:75:de:19:f6:ed:a9:1f:7c:9d:
92:e7:4f:ce:44:0e:30:de:d1:bc:bb:7a:6b:38:2d:65:03:1f:
aa:60:cc:31:e8:4c:ed:de:dd:9a:f2:80:7a:fe:50:7b:87:b4:
d9:02:1b:30:87:ef:2b:23:94:03:23:a2:83:be:e4:57:54:09:
2e:e7:ea:61:bb:30:51:66:8b:65:92:17:25:66:f1:70:25:08:
2a:6f:89:d7:c0:c3:9f:0d:b1:17:5f:b0:44:2b:18:2b:3e:25:
72:fb:71:97:f2:e1:0c:9a:88:e9:b7:54:e2:1e:f9:24:75:97:
34:26:f5:a7:c1:e0:79:be:13:9b:bf:dc:1b:ed:d3:dc:08:05:
f2:13:30:4d:3a:3c:31:95:2e:78:d4:dd:ba:49:f2:e6:57:51:
30:e2:a7:32:dd:78:be:4a:b0:1a:32:9c:9f:64:44:b0:7a:11:
cb:40:e2:63:33:d8:54:f9:96:f9:62:06:07:a6:83:13:49:34:
e3:c6:27:59:74:87:a1:a0:d9:38:b6:0e:a5:ad:4c:4e:a6:db:
21:0c:0b:d9:de:23:83:e4:80:12:1e:8c:fd:94:94:8b:09:5e:
72:d8:0d:ba:48:bb:de:a3:a3:75:c3:43:a7:21:f4:a4:31:b4:
a1:53:f5:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:54 2025 by rpki-client