Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: zCu9QXmOqDgsL4It2gsEBi0IRs/6g3xbIq5KtRJZvEs=
Subject key identifier: 4D:E6:3A:5A:62:6B:61:D2:DE:E5:FA:CF:4E:25:3D:54:0C:AC:80:C1
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 0199FF228FA1640CB09304A028FA3F2658D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 0150
Signing time: Mon 20 Oct 2025 01:01:19 +0000
Manifest this update: Mon 20 Oct 2025 01:01:19 +0000
Manifest next update: Tue 21 Oct 2025 01:01:19 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: ByYU1LBzGXq2MdwXSBiOx8F8JpBhLhvE0YaJPQP0yVw=)
2: Eba-gFj6_KEbGtGz74WD9Qe5r-8.roa (hash: IQzF41AYmHmWyxwMWh8AK7MBgafq4BN6uK+awf+6jdE=)
3: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (hash: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:8f:a1:64:0c:b0:93:04:a0:28:fa:3f:26:58:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Oct 20 01:01:19 2025 GMT
Not After : Oct 21 01:01:19 2025 GMT
Subject: CN=4de63a5a626b61d2dee5facf4e253d540cac80c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:18:98:b7:9e:c7:f4:ac:df:73:10:e3:82:8b:
fb:59:f1:64:98:c6:59:9a:84:13:a9:7d:ad:35:ab:
e7:2d:b7:1a:34:62:60:06:16:bc:f2:5a:bc:5a:02:
e0:19:65:e2:33:c8:d6:ac:83:8f:d1:4a:e8:72:6c:
4e:da:8d:c2:86:aa:af:ae:ec:73:b7:94:60:4e:2c:
1c:4e:1d:4f:db:ed:5c:8e:62:cf:27:d9:0b:cd:21:
f9:d3:1b:ba:3c:d3:b4:64:a0:4e:c6:2c:16:ac:59:
5d:73:15:d3:1d:93:3d:f0:d7:2e:43:49:54:b6:31:
bc:7b:0a:dc:bd:0f:a8:01:b0:a0:b3:cb:79:8d:ad:
31:05:84:84:33:9d:4a:51:2f:a7:72:7f:08:b0:fe:
ac:30:70:be:06:a5:48:71:c1:92:9f:33:d4:1f:95:
4c:b8:1b:35:6c:36:17:58:aa:cd:2a:27:73:c6:94:
76:d2:50:6a:5b:f8:ba:ac:49:97:6d:61:3d:c5:c2:
13:38:c7:19:f3:1a:98:2c:8d:45:a2:92:10:d1:0c:
57:47:af:95:0d:38:4f:8b:92:66:cd:e3:8a:10:e9:
4b:f7:8f:01:21:6f:3f:0f:81:94:c9:e2:4e:66:82:
6a:4a:29:f3:b1:85:1e:4c:68:9d:1b:21:c0:61:f8:
4d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E6:3A:5A:62:6B:61:D2:DE:E5:FA:CF:4E:25:3D:54:0C:AC:80:C1
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:b7:a9:71:0e:98:fa:16:a4:fc:96:6e:0f:d7:24:3f:ac:6c:
de:83:0f:e4:20:fe:83:90:59:d3:46:a5:49:b3:ca:68:00:ff:
92:56:c2:94:af:d3:c9:aa:61:72:30:16:7b:8b:bc:2a:6e:22:
dd:4c:d8:cf:d5:9e:00:48:ba:e1:ef:ab:bc:52:39:01:ac:ac:
70:54:57:fc:ba:8b:55:d0:c1:10:31:97:73:89:fe:2c:29:26:
5d:16:b9:b7:7d:9b:80:8b:ea:88:61:cb:d4:fb:c7:cc:8c:b0:
4e:39:a6:1f:bd:7e:2a:e3:a3:09:f3:96:ab:bb:63:ac:99:e5:
cd:8d:26:7c:56:35:64:50:aa:1b:7f:29:c1:62:01:71:c2:99:
4e:de:e5:2c:24:1b:90:43:e0:f0:ab:76:d9:83:2f:db:22:b0:
a8:cb:66:0e:38:1e:73:d2:ad:a2:76:64:7c:97:3d:8b:ee:f7:
77:4f:18:53:6b:ce:d5:82:19:ef:03:ae:ef:fc:15:87:02:d5:
8c:8b:1f:31:4c:d5:6a:15:6f:9b:56:1d:9a:6f:eb:33:37:4d:
d2:b3:44:47:90:ae:61:60:94:24:c2:40:78:6b:c2:6b:11:c8:
27:9b:9f:73:35:7b:b6:d6:0d:e4:ee:7c:2b:2d:51:78:b2:3f:
6c:3c:62:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:19 2025 by rpki-client