Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: ccUqakmGFQaWiczfhjxDMsbeD3hf5SH5LjHxpCX3+V4=
Subject key identifier: EA:0F:3D:F8:97:49:9B:81:E1:F9:B8:5D:D9:71:4D:92:89:3E:04:2D
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 0199FC21959988D7F981A0C36D9F5DA16C4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: T7ww9zcpVyUq1I8l7mUR494rGaH16/SnSXfeapgx71A=)
2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:95:99:88:d7:f9:81:a0:c3:6d:9f:5d:a1:6c:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=ea0f3df897499b81e1f9b85dd9714d92893e042d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:74:f6:6a:3d:42:f7:57:46:12:e3:71:32:61:
aa:35:df:47:5a:c5:f4:8a:f9:72:91:e5:e8:c3:40:
44:e7:37:29:05:ca:01:b2:d1:c5:1f:22:a6:c9:b7:
4a:ed:1a:c9:41:43:27:d5:aa:1d:63:4e:a9:df:ee:
8e:a0:82:ce:0f:c6:78:2f:77:2d:24:1f:00:26:9a:
dd:99:5b:6c:e8:ce:d7:81:4f:08:2d:8f:a1:8b:b6:
66:8f:5e:3f:bf:3a:ea:43:d0:e1:85:3d:ba:29:66:
6a:21:a4:42:7c:98:65:e7:80:93:c3:4f:f3:d4:c0:
94:27:08:0d:0c:a3:3f:1f:bb:38:fb:34:aa:17:b5:
95:6e:14:bb:89:44:58:4c:2f:6e:c3:1d:c2:6f:ba:
ca:40:b2:5c:dc:5e:26:61:31:72:a8:2e:b7:d2:6b:
9a:07:d1:99:2c:51:e8:50:4a:dd:3d:2d:48:95:96:
b9:4b:b6:2a:94:31:b1:eb:31:09:cf:9a:21:af:93:
00:2e:5d:e1:80:5f:79:60:5f:7c:3c:be:12:65:ed:
59:ba:41:0c:e0:67:37:0a:e2:1e:d0:e8:02:96:99:
71:89:c6:0e:d3:18:ec:80:4b:b2:61:77:1e:2d:ab:
2d:90:ec:d1:75:e6:a8:27:40:85:2a:7b:4c:19:76:
e7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:0F:3D:F8:97:49:9B:81:E1:F9:B8:5D:D9:71:4D:92:89:3E:04:2D
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:14:94:e7:28:25:8e:6d:9a:51:c9:77:ae:bc:55:22:85:ae:
a7:c6:4d:15:1c:d7:4f:7a:a7:89:00:e3:0e:50:55:df:b5:c6:
25:56:53:c1:9b:b6:2e:b4:2a:a2:c6:f0:11:70:16:14:98:08:
b2:82:5e:ac:49:4f:72:86:e8:bf:0c:b3:12:29:9c:c7:4c:89:
ef:09:9d:bb:31:a2:92:f0:9b:f4:81:f9:d8:40:65:0e:49:b5:
8a:53:c1:64:ac:9a:0d:c2:56:0c:2c:b6:4f:05:87:e0:e1:b1:
6a:6b:16:0b:73:64:7b:10:73:42:c4:6e:a6:75:a4:94:60:33:
1a:ed:08:aa:e8:d1:f5:0e:e0:ab:ea:ec:af:2b:ee:32:79:0d:
1b:94:36:61:df:e7:38:f8:37:d1:bc:6c:29:10:1d:fe:33:81:
21:e4:54:fc:42:40:a6:66:d5:41:d5:22:0d:56:6c:e9:8a:fc:
72:8b:49:a5:0e:94:57:7a:82:81:01:46:9d:db:90:99:52:47:
4d:be:52:14:91:6f:cb:ad:3e:53:94:f8:62:d3:ca:dd:1d:96:
f0:16:42:55:e9:fc:66:b7:df:2a:2a:da:56:fd:fc:c4:d2:12:
c4:c2:76:35:1c:fb:e6:2a:65:9b:39:de:96:24:54:85:32:ed:
cd:8d:a0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:09 2025 by rpki-client