Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier: +zXOU3wf5vE8Svg/IUiReqYZOPjbOS7ZNuUQBzNTEfE=
Subject key identifier: AF:32:A9:93:65:64:94:AF:4C:85:22:14:8D:0B:4B:B1:3D:90:69:DC
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 0199FC8F5D1BCA521750CAEDECD0D5CCDB61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number: 1021
Signing time: Sun 19 Oct 2025 13:01:17 +0000
Manifest this update: Sun 19 Oct 2025 13:01:17 +0000
Manifest next update: Mon 20 Oct 2025 13:01:17 +0000
Files and hashes: 1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: ed5g3i5F/fhBMW3gGopd50HNN0MCK5+3097xZof3fh0=)
2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:5d:1b:ca:52:17:50:ca:ed:ec:d0:d5:cc:db:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Oct 19 13:01:17 2025 GMT
Not After : Oct 20 13:01:17 2025 GMT
Subject: CN=af32a993656494af4c8522148d0b4bb13d9069dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:64:9c:d1:04:42:54:a8:40:d2:bb:ef:46:0d:
f2:08:1e:4c:0b:5f:d8:5c:bb:0a:43:9e:2a:00:a0:
8e:b8:48:eb:56:0e:35:8c:72:67:1f:f3:a0:6f:32:
45:6a:90:5e:bc:d3:a8:ca:50:3a:e3:84:e8:36:f6:
c6:32:45:c0:c4:7f:89:7d:24:d1:5f:f8:ea:ff:d9:
19:af:c4:92:39:44:d0:cc:52:8f:71:4d:de:b2:2e:
13:63:14:56:67:1e:3e:b5:82:31:ef:55:7a:f6:fd:
62:b4:c6:3e:d2:04:04:b7:2f:f6:a2:2a:d3:12:47:
4c:d3:3e:76:f7:4f:f8:a4:d4:6d:4c:9f:c6:37:3d:
3e:15:83:d0:01:ca:c9:90:02:90:76:7e:85:34:e9:
e1:2b:38:d2:9b:60:af:65:ed:be:98:e5:cb:ca:6f:
e9:81:77:74:7f:c7:79:f7:e5:f5:8b:fd:a6:a4:c7:
26:b6:68:e9:81:0f:1f:fe:1a:92:de:c8:47:1d:3b:
cd:5d:de:d5:ed:b1:de:00:ff:5c:1a:8b:95:a5:97:
28:c4:12:c7:db:51:a8:20:3c:00:c7:c9:66:ad:d1:
a8:19:c0:b0:f5:31:1c:74:34:d1:69:ce:5c:a9:9f:
e6:ff:96:82:37:48:52:9a:0a:5a:5a:ab:59:2b:23:
f2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:32:A9:93:65:64:94:AF:4C:85:22:14:8D:0B:4B:B1:3D:90:69:DC
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0f:92:95:93:98:26:0e:f9:b2:51:1f:0f:ee:16:dd:2a:0e:
ef:8d:1b:0c:35:31:63:8a:22:8c:69:36:d9:fa:59:70:4b:4f:
8c:48:87:42:d5:20:39:c5:79:11:5e:14:f9:2e:51:87:65:14:
82:17:c2:62:3a:4b:d2:72:a9:20:ee:76:66:7f:16:08:83:6a:
6b:88:e3:1b:91:91:73:81:2d:7f:b6:23:d9:2d:1f:40:d5:26:
9e:82:d9:34:c1:ba:93:7a:68:8b:68:48:6a:da:41:5e:20:cf:
00:f1:74:d1:de:26:fb:66:bf:36:98:b2:b4:05:86:e1:44:8f:
4d:bf:71:72:7d:7d:e6:6f:43:a8:92:33:25:e0:f6:a1:4a:fa:
fa:8e:88:af:b4:a9:59:fd:95:92:d3:8c:5f:2c:dc:5b:0b:77:
57:97:7f:8b:35:e0:5c:02:40:ce:8d:e7:e9:3b:16:2e:0d:34:
6f:ed:d5:1e:38:3a:b2:1c:e2:6e:ce:9a:19:94:3d:73:c6:fb:
57:d8:06:55:99:dd:e6:67:5b:11:2e:ad:73:4a:3a:ae:93:6f:
11:47:e3:03:fe:ba:1f:2c:b4:95:67:f8:62:6f:2b:29:8f:c1:
07:92:bf:b4:cc:d7:70:40:2f:1f:a4:0e:74:dc:84:c5:e2:e5:
ef:a3:d7:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:54:36 2025 by rpki-client