Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: IwNmB1EERKgWPlaj0e16oyDCF2pSn6WLhvbDyAIat/g=
Subject key identifier: 62:0B:A0:1D:36:90:31:6B:1E:66:6C:69:FA:0A:68:E9:22:E6:B6:D5
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 0199FBEC2EB091E025FA4C5CDAAE0CA324EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 10:03:03 +0000
Manifest this update: Sun 19 Oct 2025 10:03:03 +0000
Manifest next update: Mon 20 Oct 2025 10:03:03 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: 60HB3Wru7p22wvdWWXE6/VFoe1/mBJz5rEMaZi5nECk=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:2e:b0:91:e0:25:fa:4c:5c:da:ae:0c:a3:24:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Oct 19 10:03:03 2025 GMT
Not After : Oct 20 10:03:03 2025 GMT
Subject: CN=620ba01d3690316b1e666c69fa0a68e922e6b6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:70:1c:3a:59:34:81:78:e4:cd:ef:75:72:26:
b8:5a:40:4b:d9:08:8d:cb:fe:6d:06:dc:e4:59:60:
f5:3a:b7:10:a4:33:2c:bd:84:78:50:5d:30:97:59:
5e:43:b2:d4:a1:46:0b:0e:2c:4b:9a:4a:46:28:05:
c5:ce:16:b7:21:b8:45:b0:1c:46:e4:8e:2d:69:ce:
5a:a6:08:71:c5:77:ab:24:90:92:b6:be:2c:51:9d:
5f:88:a8:41:79:a9:63:9d:7e:4b:fc:ea:c0:6d:d8:
6b:c9:5a:b3:9b:16:23:e9:d5:f0:56:4c:de:ed:49:
cf:ed:62:b8:d1:f5:31:91:7a:d6:44:4c:6a:ca:d5:
4c:84:86:38:58:95:ef:3c:50:69:0a:24:0d:75:2d:
55:42:b5:ec:11:74:57:9a:72:38:45:ad:2b:1a:76:
86:55:1c:a7:12:5d:d5:69:63:9d:c9:5b:3b:f9:55:
e1:c5:60:4e:db:e6:90:40:99:90:72:db:69:5c:63:
3f:b2:56:f6:91:bb:9e:82:95:7f:9b:93:66:f1:ad:
12:9c:b6:5f:e5:dc:ee:fa:35:ba:a3:da:0a:f8:8b:
a0:55:05:f9:95:6a:82:a1:88:f5:73:21:c1:3c:da:
b7:cf:f2:5a:9a:09:92:14:1f:5a:4a:23:d2:98:8d:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0B:A0:1D:36:90:31:6B:1E:66:6C:69:FA:0A:68:E9:22:E6:B6:D5
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:e5:1c:5b:d5:da:8f:90:7b:dc:30:d0:af:f6:45:cd:15:ba:
7b:24:71:56:db:01:3f:c2:97:31:36:df:78:f5:c3:bd:aa:95:
99:c2:0f:49:ee:25:f0:f1:2c:15:a5:28:a7:93:77:b7:15:9f:
1e:ec:dc:1a:5c:5e:41:1b:69:10:f3:7e:f9:bc:82:3c:32:d2:
71:73:cd:b7:4a:65:df:dd:4f:2b:ad:ce:80:ca:0a:7f:02:9e:
0e:eb:ee:00:15:d9:eb:79:3d:ea:a3:35:7c:1a:59:1f:70:3e:
8c:2f:18:c1:ae:4c:31:04:83:ce:cb:7a:67:38:35:fd:0e:cb:
87:86:28:a7:9f:38:3e:2b:23:7f:af:44:52:28:6e:1a:2a:01:
31:64:b2:7f:de:b8:5e:36:a1:6a:66:e3:e1:eb:66:1d:0c:97:
c3:0b:af:19:e0:c8:73:0f:11:25:cc:6f:23:01:3a:3e:06:55:
60:41:54:9f:bf:29:41:47:5b:c9:6a:c1:a4:10:21:87:19:2d:
95:06:76:04:88:1a:64:e6:64:05:dd:ae:7f:ad:f7:1f:19:e2:
83:24:0e:a8:89:03:47:68:6b:be:52:3d:bf:ea:c1:0c:c0:cd:
4c:8d:86:c0:8e:4b:da:bd:c5:58:7d:8f:c3:02:7f:5a:1f:7a:
13:52:c1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:52 2025 by rpki-client