Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: HA2oPJNhm6v5NfqXYVcuH137TwjJ+zs02l+VJsHqZ/k=
Subject key identifier: D5:72:37:B4:99:35:73:A1:CD:3B:CB:18:AD:49:2F:8B:C8:68:DD:49
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 0199FF22AB5E2AE4069F8E58AE016FE496F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 14B4
Signing time: Mon 20 Oct 2025 01:01:26 +0000
Manifest this update: Mon 20 Oct 2025 01:01:26 +0000
Manifest next update: Tue 21 Oct 2025 01:01:26 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: a3uITMKw5og6xxh4LagIcFPp1mB6ivV1CSbiKJffyk8=)
2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:ab:5e:2a:e4:06:9f:8e:58:ae:01:6f:e4:96:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Oct 20 01:01:26 2025 GMT
Not After : Oct 21 01:01:26 2025 GMT
Subject: CN=d57237b4993573a1cd3bcb18ad492f8bc868dd49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:80:58:f7:7d:5e:db:03:5b:36:fc:ff:a5:
c7:85:b0:c6:8e:dd:9f:a6:a1:66:e4:22:f9:38:10:
5b:65:00:7b:06:b5:5f:ea:be:e6:65:83:87:11:3f:
0d:2c:8a:ec:45:62:84:09:b2:f5:2e:74:3f:f9:c2:
10:e2:f0:86:f1:e2:9e:32:d2:23:a1:b3:1d:5e:9d:
dc:c3:85:7b:54:e7:85:a6:d2:69:12:41:fe:b2:58:
db:be:3b:6c:d6:a5:83:31:a9:00:06:ba:5f:69:82:
3a:4d:a9:fc:d4:ff:7d:9c:0a:b0:f9:0b:6e:bd:d5:
60:af:d8:58:2c:d7:8c:4b:0f:18:87:cc:90:e7:9d:
18:1b:1c:73:4c:8a:8c:9a:81:47:44:ad:16:36:57:
a4:0d:7b:d5:14:40:31:22:a7:e4:0e:4c:59:41:91:
af:22:1c:1b:4a:b3:5a:f4:2c:85:7b:73:38:26:4b:
91:8e:55:d1:78:f3:c2:f1:48:75:bb:86:a9:c7:9c:
5b:d5:41:f2:50:48:6f:d8:dc:60:4b:76:0b:f7:fa:
3c:5d:73:cd:6f:11:e3:f9:1f:01:75:61:1c:bd:6c:
24:45:2a:95:9b:cf:8d:fe:02:76:42:c2:0e:fe:a7:
87:1b:16:fe:f4:f4:6f:c5:73:17:e3:5c:48:54:c7:
23:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:72:37:B4:99:35:73:A1:CD:3B:CB:18:AD:49:2F:8B:C8:68:DD:49
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:c4:72:d8:de:06:79:f0:4f:ad:66:0d:ea:73:24:79:4a:5d:
af:da:3c:19:82:42:8a:f8:74:81:e4:c8:74:39:4f:7d:92:e8:
28:95:a3:4f:96:39:aa:a5:d9:fa:59:d2:09:f7:0b:62:a4:66:
3a:fe:99:cf:41:86:ba:db:02:01:e0:22:84:4a:f7:ad:62:6d:
e9:76:34:13:bb:ec:cc:38:8d:44:ea:ed:58:a6:77:bc:b4:11:
5d:d0:0d:1a:4b:46:1a:ac:3c:0b:31:11:b6:a9:9e:83:4a:86:
b4:12:27:50:26:cf:74:9c:f4:ea:c0:39:d3:7b:34:1d:29:ec:
60:5c:4d:c6:cc:64:a2:c5:0c:7e:77:56:16:43:68:a3:71:81:
aa:f9:28:cc:28:1e:bf:9a:60:a2:51:ba:64:55:22:10:47:8d:
60:57:4b:19:a9:e3:e5:f5:04:c9:d8:f7:a5:7d:00:01:d2:17:
5c:de:da:20:2c:ec:38:72:6c:18:d7:5b:9f:7b:18:5a:26:7d:
bb:e5:9a:12:77:2a:cf:70:09:57:78:b9:b9:89:6f:db:ff:7d:
39:55:65:77:84:1b:95:7f:e3:86:83:9f:24:57:aa:eb:c0:ba:
69:80:95:03:b7:0e:92:b2:c0:5b:95:cb:e9:3f:7a:20:bc:eb:
f6:5e:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:44:42 2025 by rpki-client