Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
File: 4b3MskUKGgU8icwhPkrpuGR4LeM.mft (raw, json)
Hash identifier: Uh7AhTGu/Dy6P3FWewIbCq2AG0c2JZXxgIf3GMxsgfs=
Subject key identifier: 1F:CB:12:40:8A:4B:F4:F6:E1:5E:B8:6B:0A:CE:67:07:B3:A3:DB:91
Authority key identifier: E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
Certificate issuer: /CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Certificate serial: 0199FC21AB6A55463A4EABE8A48189EA03D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
Manifest number: 0FCA
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: 4b3MskUKGgU8icwhPkrpuGR4LeM.crl (hash: aSNOGQko0XjkSzoK0UwQb34lBw6AqfVEUjunQsLNgQ4=)
2: 7uR_yiVUsKXN9cQ9UEqMaOjd_ow.roa (hash: OVRCNzp/6ULY8TXLR8C+JnnDlpd68DlkSuJjHaG4io0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:ab:6a:55:46:3a:4e:ab:e8:a4:81:89:ea:03:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1bdccb2450a1a053c89cc213e4ae9b864782de3
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=1fcb12408a4bf4f6e15eb86b0ace6707b3a3db91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0a:0f:84:b7:e4:72:09:87:b7:86:36:b0:89:
29:d4:c7:7d:44:4a:e4:04:c4:a4:60:76:e3:21:e5:
b5:c3:c8:b0:28:06:f2:eb:44:c0:20:af:62:02:6f:
46:51:f3:ea:78:7e:ef:a0:4d:e1:1f:78:0d:ea:b2:
c0:4b:ad:69:5a:76:c9:c6:62:ae:f8:f7:aa:f7:ed:
75:17:48:2b:d2:b4:97:3c:af:98:2d:a3:57:79:76:
bf:8e:c3:67:b6:b8:7f:24:14:d6:e9:94:b7:98:d2:
22:64:a5:73:70:d5:51:e5:da:22:40:96:41:86:ba:
22:5e:93:a2:4c:13:a7:71:80:05:17:43:fe:50:14:
7e:ec:1f:cc:6b:11:7d:d9:8e:dc:0c:b7:6c:f7:f1:
8a:9d:fb:1c:0c:9d:12:49:c2:19:a9:24:bc:24:da:
50:58:1a:3c:0b:95:0f:4b:10:f4:35:73:a6:52:de:
2a:93:80:d9:da:2e:03:84:25:68:8b:7c:1b:db:14:
51:e4:05:71:d7:91:f8:f8:43:20:f4:29:39:39:a8:
5f:92:de:db:64:86:e0:b5:1e:dd:9a:0f:ac:b1:f9:
0c:8d:07:12:f2:57:1e:f4:e9:ca:e7:29:ad:27:7c:
4f:be:ca:b1:f4:9d:20:1f:6d:7e:8f:2b:85:78:b4:
5e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:CB:12:40:8A:4B:F4:F6:E1:5E:B8:6B:0A:CE:67:07:B3:A3:DB:91
X509v3 Authority Key Identifier:
keyid:E1:BD:CC:B2:45:0A:1A:05:3C:89:CC:21:3E:4A:E9:B8:64:78:2D:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b3MskUKGgU8icwhPkrpuGR4LeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/358be9-192d-4ae9-b4bd-eed556af2c7f/1/4b3MskUKGgU8icwhPkrpuGR4LeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:06:66:7d:1d:c5:82:f9:33:bb:6f:11:37:0f:00:89:b9:d3:
99:e8:70:16:b6:b7:06:cc:15:08:e0:50:e2:6a:f2:6e:6a:a0:
0b:d4:e9:af:5b:63:7d:05:7b:44:ae:ca:c4:0f:8e:1c:33:57:
a1:a3:f5:2b:54:6d:c9:60:af:fe:69:df:f6:dc:e0:9b:96:6b:
14:5a:d5:73:52:72:b2:6c:c5:a0:11:c9:e5:3a:0c:04:b7:93:
0d:0f:84:b5:c6:93:e1:5f:0f:34:01:27:76:8a:8e:12:a5:16:
73:b2:59:1d:7e:2f:43:f8:2f:6b:5b:64:eb:ab:e7:c9:af:6d:
a6:55:fa:ec:a5:0a:19:31:c3:b9:81:ca:8b:76:97:01:f7:d6:
ba:9f:05:54:5f:fa:37:b0:0e:fd:3c:ac:b8:22:8a:d0:e7:cf:
ab:b1:7c:a2:c1:6b:7d:5e:3a:aa:89:da:c9:2a:61:98:fe:a8:
60:45:a7:39:da:6d:e6:b6:49:17:5f:b6:c2:ff:18:49:31:a3:
17:d2:c3:2a:4c:95:0a:28:b3:cb:ed:11:85:08:39:59:3e:58:
21:3c:06:a8:fe:2e:d3:3a:91:c7:f9:1a:97:99:c6:c9:22:6c:
5f:69:ae:a6:1b:f5:fd:46:9c:3b:dc:42:21:9e:fb:63:02:9e:
19:19:22:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:20 2025 by rpki-client