Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.mft (raw, json)
Hash identifier: Ag+Jd4HU//axJMKR6hPce30u6NCs/m80JhOPUPW/HDM=
Subject key identifier: EB:79:65:12:A6:2A:24:F7:59:BD:47:C3:B0:87:61:75:32:C2:FC:DA
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 0199FEB511265CA4D368EBE26C8D4A603BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
Manifest number: 0E6A
Signing time: Sun 19 Oct 2025 23:01:43 +0000
Manifest this update: Sun 19 Oct 2025 23:01:43 +0000
Manifest next update: Mon 20 Oct 2025 23:01:43 +0000
Files and hashes: 1: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (hash: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=)
2: A4r4Z5VBejWE1hY3UgmnLv7iRis.crl (hash: pHh2WDfegEQRvBnZOTKPuhNRyCm5EmoGWe9xitO4aXQ=)
3: WIaOGWdkdCPNTnZSI-W-XTK4te4.roa (hash: jVJuCp2YFk4DEa8ZbdmENwzLLMmsULw4LDZkckWi3gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b5:11:26:5c:a4:d3:68:eb:e2:6c:8d:4a:60:3b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Oct 19 23:01:43 2025 GMT
Not After : Oct 20 23:01:43 2025 GMT
Subject: CN=eb796512a62a24f759bd47c3b087617532c2fcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:79:ff:93:3b:40:8d:15:e1:a8:8b:b8:b4:5a:
8a:59:ce:7d:c7:1c:e4:da:92:8a:e8:73:88:b9:98:
72:df:d5:72:b5:6d:04:63:8f:e0:92:02:b0:96:bc:
c7:68:2e:9d:b2:5f:9a:1f:d1:d6:5d:4a:d5:a5:ea:
17:71:dc:d7:51:45:35:35:6f:59:3e:cc:d7:41:cc:
a4:63:ba:2a:c1:55:fa:f6:09:30:db:4d:3c:19:08:
04:8c:de:23:84:9f:e5:07:53:87:04:c9:2c:4b:f5:
da:ac:1a:26:53:f6:4e:82:56:e8:a1:c6:e8:19:87:
96:4c:65:d1:3b:b0:5f:23:cf:2e:1f:b7:fd:0e:e7:
48:a4:3c:0f:11:97:ad:c0:cd:36:4f:3c:a8:76:6c:
54:2f:f8:29:3e:a2:53:4c:5a:f0:49:6e:59:97:45:
15:32:db:de:f1:42:af:72:d1:b2:43:29:ad:2d:20:
95:80:00:ce:ec:94:f8:7a:71:d3:2d:f0:ee:0a:eb:
ef:76:a5:9a:ac:9f:fd:7b:74:4e:90:0c:d6:e0:49:
db:20:8d:77:2c:5e:fd:ca:e4:d2:cb:b0:54:0b:ca:
f6:00:10:38:7c:ef:9f:d7:e5:9a:4c:94:d1:0d:2b:
bf:af:f2:8c:c2:e5:08:8c:b0:8b:c8:81:46:49:f5:
f9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:79:65:12:A6:2A:24:F7:59:BD:47:C3:B0:87:61:75:32:C2:FC:DA
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:48:83:d2:16:95:a1:0f:fb:38:8e:99:1b:fd:49:e2:ff:2c:
b0:19:84:95:3b:ce:e3:e0:b4:d6:39:03:5c:1f:65:7e:5d:90:
61:ed:de:44:5b:64:1e:5c:b4:40:ee:fb:03:0d:6c:96:05:7b:
bf:e1:bd:08:8f:61:34:73:31:9c:91:52:8d:ea:d6:7b:4d:b5:
e1:8c:b3:8c:0b:00:33:4c:4e:5c:be:ab:56:4d:32:36:92:3c:
d5:69:19:08:11:54:44:28:57:88:8e:4a:14:8e:a2:0b:94:48:
97:6d:c5:32:cf:14:16:2e:61:b1:a7:96:bb:eb:13:b2:4c:d4:
1c:e8:dd:91:85:e4:0e:d5:9e:60:3c:0d:7d:aa:1b:c4:65:74:
fd:4f:02:9a:70:a3:89:1e:d5:f7:b2:67:8d:e4:88:0c:f8:f2:
3e:b3:38:e1:1c:5b:1a:c0:28:ef:b2:54:20:7b:a8:01:1b:1a:
76:02:cf:c5:11:b2:07:df:cf:28:bc:e4:2d:ac:1b:d1:7c:32:
89:bc:61:c6:92:ef:46:7e:63:35:d5:06:d9:f7:f7:70:6b:b5:
87:91:3b:75:18:32:30:e0:38:c0:98:4c:01:01:06:c2:b7:24:
36:04:30:e0:a4:2e:b2:5a:05:85:ad:f1:f3:93:bf:bd:00:2f:
8d:89:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:04:28 2025 by rpki-client