Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
File: m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft (raw, json)
Hash identifier: yvLaQttnt09AsJddqJl1lxM/himzmhtQxE5mWGHMQmw=
Subject key identifier: 83:05:A7:88:46:E5:76:4E:5C:E2:FE:F5:6F:64:F6:9C:4E:B3:35:D0
Authority key identifier: 9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
Certificate issuer: /CN=9b868a76f5b4748e1e4bba834701a68577c63462
Certificate serial: 0199FD6B29B1851DC7B86B00ED0DDD8E1658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 17:01:22 +0000
Manifest this update: Sun 19 Oct 2025 17:01:22 +0000
Manifest next update: Mon 20 Oct 2025 17:01:22 +0000
Files and hashes: 1: El3AzP_du9cgKwe4cAMY6ohro7o.roa (hash: unokVLZGXnsuik1b2lzzTnShCOzK3B+jbNl72+ddVqo=)
2: m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl (hash: jUha2Xi05nGhdQHJdwiCDfHkRAOxAE/oebad6rWxyQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:29:b1:85:1d:c7:b8:6b:00:ed:0d:dd:8e:16:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b868a76f5b4748e1e4bba834701a68577c63462
Validity
Not Before: Oct 19 17:01:22 2025 GMT
Not After : Oct 20 17:01:22 2025 GMT
Subject: CN=8305a78846e5764e5ce2fef56f64f69c4eb335d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:81:68:c1:bd:99:b4:30:94:9b:ab:26:56:5d:
21:5e:08:6e:98:35:3b:4b:29:7e:ca:86:4a:d7:06:
90:27:78:5b:7e:4d:0d:b1:b7:83:02:07:32:5f:90:
a3:58:35:11:4d:43:80:90:a0:91:ef:69:19:ba:17:
95:47:86:a4:8f:6e:63:2d:5f:4e:92:b0:75:8b:22:
ea:d3:71:00:fc:75:01:ad:ab:b1:bb:de:d3:e7:9a:
82:23:4d:ce:ef:ad:a6:d5:05:cb:38:54:db:d6:88:
90:b4:7e:54:ec:91:45:6d:32:d9:25:d7:d4:9e:fb:
dd:d9:90:10:df:f0:7b:8c:96:a9:a1:58:b5:5a:ec:
43:1f:ea:ef:48:e6:2f:61:81:48:a4:b7:9e:fa:43:
8f:45:64:6c:82:a9:a0:67:70:e2:b7:19:fe:67:71:
51:b2:99:dd:5a:4c:e0:04:c6:2f:93:a2:f8:e2:43:
fc:f0:a9:53:08:77:6f:3b:ae:b8:91:b6:33:03:db:
60:77:55:f4:94:e9:f7:ee:cc:80:29:ab:de:c7:1f:
06:9e:f7:36:f8:85:94:a3:49:67:80:3d:41:35:99:
20:1b:f7:e9:16:22:f8:ff:9d:76:99:2c:22:f3:31:
43:04:4b:9a:ab:de:8b:c1:8e:e4:10:53:b5:22:3b:
9c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:05:A7:88:46:E5:76:4E:5C:E2:FE:F5:6F:64:F6:9C:4E:B3:35:D0
X509v3 Authority Key Identifier:
keyid:9B:86:8A:76:F5:B4:74:8E:1E:4B:BA:83:47:01:A6:85:77:C6:34:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4aKdvW0dI4eS7qDRwGmhXfGNGI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/0b0d82-fa60-44cb-b83f-6a34e46aaa56/1/m4aKdvW0dI4eS7qDRwGmhXfGNGI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:ed:1c:d2:3f:67:64:63:b2:73:98:ea:da:40:74:31:7f:b0:
4f:14:55:e0:7b:02:e7:a6:eb:7f:d2:cf:c7:da:a8:11:8d:cf:
a4:1b:89:13:b7:9b:e6:01:a2:2c:6f:e2:63:f4:c5:07:87:b5:
16:0f:94:2e:66:b1:f5:0c:2b:20:49:4a:fa:62:a9:47:3e:42:
03:62:9f:34:70:d4:23:be:bd:46:6b:18:52:07:b6:fc:cc:b6:
4d:14:f5:c8:5d:d6:4c:b0:ec:73:b7:1b:0f:d1:08:1b:f0:17:
3c:a7:6f:ef:40:89:c4:f7:d6:22:ae:17:14:0a:10:37:41:ab:
f9:73:f9:a3:33:f5:f7:8e:d4:8c:ca:02:cc:a6:b0:16:1a:4e:
de:1b:cb:69:0a:d8:bf:1a:c4:bf:c0:50:1d:d5:05:ac:99:30:
e4:fe:28:22:3a:e0:62:c7:38:a8:74:3d:3e:14:7b:f2:1c:07:
ef:af:ee:fe:7c:5e:b9:1a:02:32:54:2c:e0:2a:38:d8:eb:21:
d6:43:e7:8d:1d:3a:88:66:74:4f:86:fc:f8:4c:ec:68:f6:3f:
94:c5:0c:30:a2:6f:db:4c:9c:0b:91:90:0b:0a:a4:56:7e:1e:
4e:13:e4:b2:f0:1e:52:e8:b8:14:01:20:84:c1:f8:2c:8d:bf:
a1:2e:0f:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:50 2025 by rpki-client