Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
File: 4IEr3duyOb5jncddzS4pbE_PSpc.mft (raw, json)
Hash identifier: rvqfBJ3DpgPHuYrkPbzlp5GkxJ12Yxz1VpEM4A4Hoys=
Subject key identifier: 3B:86:E6:83:9B:2B:2B:80:48:E2:11:49:09:44:21:0A:49:15:01:75
Authority key identifier: E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
Certificate issuer: /CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Certificate serial: 019A006C2288B040AF455ADE851289EAF174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
Manifest number: 136A
Signing time: Mon 20 Oct 2025 07:01:17 +0000
Manifest this update: Mon 20 Oct 2025 07:01:17 +0000
Manifest next update: Tue 21 Oct 2025 07:01:17 +0000
Files and hashes: 1: 4IEr3duyOb5jncddzS4pbE_PSpc.crl (hash: UifhLNXULKj1jA7tn24jjUe3EU/ntjnAVhdjwlz3EM8=)
2: el5qFDMV5hMW1NAGRbmjGI68Zeg.roa (hash: u+tO/pc49AyT7XnqsS0vc/mFjJM4zzaHLzr71ZyNaRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:22:88:b0:40:af:45:5a:de:85:12:89:ea:f1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0812bdddbb239be639dc75dcd2e296c4fcf4a97
Validity
Not Before: Oct 20 07:01:17 2025 GMT
Not After : Oct 21 07:01:17 2025 GMT
Subject: CN=3b86e6839b2b2b8048e211490944210a49150175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a9:41:9e:f4:11:bc:c7:49:2f:d4:f9:71:c8:
b5:d8:87:a0:38:c4:f3:02:40:8e:09:7a:6d:03:55:
7c:88:56:f3:a7:d6:63:5f:c0:5f:91:19:c4:07:b5:
86:20:5e:2f:c3:75:5c:da:03:ac:77:7c:7c:10:eb:
61:ca:97:a6:31:2f:0b:0d:26:b1:07:2e:33:3b:72:
9e:c0:a3:8e:19:0c:3d:b3:f3:89:66:96:13:2c:62:
65:d5:c7:52:2f:e4:9c:46:05:0b:61:96:28:43:25:
bd:cf:78:f4:28:b0:f7:25:0c:a0:12:56:e2:78:a4:
47:9f:01:85:65:a3:22:41:8e:f9:63:4d:1a:e9:e9:
07:fc:67:08:be:a1:9e:6a:df:6b:c4:c5:36:09:48:
cd:0b:52:1b:9f:23:07:7a:4e:7f:37:64:6e:27:6a:
8f:b1:e0:ad:82:be:76:81:cb:61:c1:94:a1:d3:05:
bd:c4:19:e0:7f:f6:ff:87:08:19:79:23:67:11:d7:
3e:4a:37:27:eb:60:6e:5d:81:d6:3c:dd:7d:60:a4:
ad:44:17:4d:bf:44:c1:ba:13:ae:e4:7f:fe:76:24:
aa:a7:5d:46:d7:7c:b7:b0:fc:9a:a4:7d:e4:5f:d4:
fb:2c:fe:31:d1:55:2e:dd:36:83:a8:67:9d:9b:f7:
0c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:86:E6:83:9B:2B:2B:80:48:E2:11:49:09:44:21:0A:49:15:01:75
X509v3 Authority Key Identifier:
keyid:E0:81:2B:DD:DB:B2:39:BE:63:9D:C7:5D:CD:2E:29:6C:4F:CF:4A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IEr3duyOb5jncddzS4pbE_PSpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1f68a8-49dd-412b-bba9-0bf539b3b714/1/4IEr3duyOb5jncddzS4pbE_PSpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c8:08:7f:c7:8f:d2:be:fc:a6:4f:fe:ba:f9:c5:4c:83:88:
57:98:e0:7d:6b:b5:64:57:77:2a:ab:ae:70:16:3e:5f:80:ba:
0e:ed:e9:02:ef:36:b3:21:89:76:4e:cd:f0:aa:1f:22:52:ea:
6c:00:4a:3d:d1:fc:6e:92:33:47:4e:b8:a9:51:5d:df:2d:93:
2f:63:33:33:ff:7b:f9:49:c0:9f:0a:48:06:f3:b2:85:af:6b:
89:f8:ad:7b:48:37:8e:26:41:e9:3f:84:a4:24:bc:bf:e7:93:
49:95:6d:ca:b4:9c:81:fa:e5:a7:49:d0:2f:dc:08:2c:bf:b7:
8c:5c:89:96:e0:3f:83:de:b4:90:a7:3d:88:34:5a:8e:68:dd:
2e:1e:36:f8:46:38:f7:e8:74:01:fa:1d:df:0d:e5:41:b4:1c:
44:12:cf:13:32:91:29:77:f0:07:b4:86:b6:fb:2f:ae:f4:87:
00:20:70:32:fe:4b:0e:31:35:0b:11:0a:b9:1a:a8:06:fd:c8:
b9:3c:76:03:eb:79:da:0e:b3:f9:60:ec:2c:b5:fa:b4:ea:b8:
8c:8b:76:76:5e:b0:11:6d:db:0b:0d:b9:cc:33:af:c0:3b:41:
69:e6:80:83:bc:b6:12:0e:b9:ca:0b:e5:ec:1a:be:ad:c2:d5:
3f:35:0e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:04:21 2025 by rpki-client