Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
File: 4OvbaaM-jzrzY64UT4U1OOgDG2M.mft (raw, json)
Hash identifier: 0ugvpD82or4jtrEoy+yyZ/KsQ0aNXObQCjMQK5J1zhw=
Subject key identifier: FC:FB:A9:B9:CE:E3:CF:FC:3D:D4:53:9C:28:0C:1D:52:FC:C9:69:86
Authority key identifier: E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
Certificate issuer: /CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Certificate serial: 0199FFFEAA38D212BE66EE2618397CD2D227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
Manifest number: 09BB
Signing time: Mon 20 Oct 2025 05:01:43 +0000
Manifest this update: Mon 20 Oct 2025 05:01:43 +0000
Manifest next update: Tue 21 Oct 2025 05:01:43 +0000
Files and hashes: 1: 3eUay2tu69uIVC2ydoh-KNcQB3E.roa (hash: G/dDpLohr3NTC2lM78apSFe1V+YNmYFmlWqkTGl1RZw=)
2: 4OvbaaM-jzrzY64UT4U1OOgDG2M.crl (hash: eQ75A9Ow5P69nD7a242rqcq9lGhqW7c5zFS7U0wkx/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:aa:38:d2:12:be:66:ee:26:18:39:7c:d2:d2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ebdb69a33e8f3af363ae144f853538e8031b63
Validity
Not Before: Oct 20 05:01:43 2025 GMT
Not After : Oct 21 05:01:43 2025 GMT
Subject: CN=fcfba9b9cee3cffc3dd4539c280c1d52fcc96986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:41:2a:c1:f3:30:25:92:58:e1:a4:b4:83:56:
0b:0b:be:f9:d9:1c:94:a0:99:d7:00:43:0f:e6:b5:
9e:1f:dc:7e:b4:85:2d:3e:25:99:a6:89:e3:8d:74:
58:7c:a4:af:86:9f:aa:25:df:c8:4b:1f:fb:9c:57:
4a:ac:e9:48:ba:fc:c1:c7:d8:8d:bd:ff:8c:d3:b1:
6b:d5:b0:37:ee:3f:7e:2c:85:d4:68:2b:fb:20:99:
ad:1a:e3:5f:45:d1:9c:a3:71:ce:b1:4f:0f:a9:1b:
a3:02:1c:cd:97:9d:4c:ae:3d:8d:d2:62:50:95:f1:
2c:64:a6:83:1d:59:37:ff:2e:25:b8:5d:b5:06:c5:
50:07:7a:6f:af:f0:41:c7:b5:15:fc:83:10:d8:48:
a6:c4:c3:dd:e1:02:7c:fb:fc:f8:13:f2:a6:8f:84:
5b:75:29:5b:6e:e5:52:a0:c4:3e:4b:d0:eb:aa:61:
51:24:bf:97:68:fb:9b:06:81:5c:ec:83:46:ab:2c:
b7:e4:ce:81:e5:d9:d6:b5:2b:6b:e8:6b:b3:11:74:
e0:ee:32:97:35:57:96:d9:c5:ce:57:d8:e9:8d:2d:
80:6e:dd:28:fe:c9:95:84:5e:e4:7e:bf:aa:56:10:
76:1d:8f:bc:53:0c:57:17:57:15:53:5b:84:9e:0f:
53:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:FB:A9:B9:CE:E3:CF:FC:3D:D4:53:9C:28:0C:1D:52:FC:C9:69:86
X509v3 Authority Key Identifier:
keyid:E0:EB:DB:69:A3:3E:8F:3A:F3:63:AE:14:4F:85:35:38:E8:03:1B:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OvbaaM-jzrzY64UT4U1OOgDG2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/d8c4ba-1c48-480b-bb59-d2310bba0e11/1/4OvbaaM-jzrzY64UT4U1OOgDG2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:51:53:45:f3:c2:fc:d8:86:4c:f3:0f:82:72:56:98:75:a8:
11:38:f9:c2:c6:2c:4a:44:cf:9e:93:f4:fd:da:c6:35:a7:2c:
37:ee:aa:51:0f:f2:04:61:db:17:29:55:e2:71:87:e7:01:30:
1e:7f:63:14:68:42:44:d4:04:0a:b4:b6:6a:88:e6:82:d2:8c:
f3:53:03:64:69:c4:c3:af:ef:8f:18:99:35:e2:1f:40:46:b7:
4d:5e:e1:df:52:1c:8a:bd:14:ad:cf:c5:40:40:ee:8b:18:ff:
b4:21:c0:7a:39:e6:1e:3e:1e:64:9d:17:4c:8a:45:7f:f0:e6:
d3:ac:93:c9:63:a1:67:77:b3:16:1a:e0:0e:ea:e7:7f:b0:61:
47:ed:74:2b:86:64:93:e3:ee:38:2f:cc:95:dd:64:4a:6d:e4:
54:15:1a:98:10:00:42:ac:2e:96:35:67:f3:f4:a9:10:85:b6:
64:ad:cc:05:c9:48:23:d6:44:6e:e5:52:02:15:7d:2f:d0:95:
c8:f0:ed:82:ea:72:2f:67:fd:42:7b:5c:13:d8:94:8f:99:06:
52:7c:9d:29:43:72:10:8a:d5:cf:c1:8b:f4:50:5a:2e:1e:ec:
75:c1:b3:db:5c:43:79:53:0b:0d:0a:3a:16:3d:16:f7:97:9f:
51:15:d3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:28:04 2025 by rpki-client