
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
File: 4M3iwfzj1v4hhTR92J3P0T67sVE.mft (raw, json)
Hash identifier: yrqDdKRdJwwxLpGSVu4kTWPD9RLGnIYZTufwFtYBAGI=
Subject key identifier: E8:AD:F9:6D:25:01:69:71:62:6C:DB:A7:4D:49:B3:10:21:12:15:50
Authority key identifier: E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
Certificate issuer: /CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Certificate serial: 0199FC589A067ACAFAAC1807A72E58A0C871
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 12:01:28 +0000
Manifest this update: Sun 19 Oct 2025 12:01:28 +0000
Manifest next update: Mon 20 Oct 2025 12:01:28 +0000
Files and hashes: 1: 4M3iwfzj1v4hhTR92J3P0T67sVE.crl (hash: Re8iNeId6/da+1tJSMgeTBZ9sfud85Zt0KCtmiXPb/4=)
2: IcskwdSROKi9qZels4yHQYnddgE.roa (hash: vPtKorJ6NxT7CsrYyPVFrqYiL53IkN4t+VtNjaUnOjc=)
3: R1WYdjBFxaqOJXdmYl0VkK_31-A.roa (hash: jZxWD0uM9IaDgIRuAxwkdjeq40Xiof3RV5ZUg9OIXw4=)
4: UgQvx_lbsNuoPrOWEqQQU5trSo4.roa (hash: n18F2sXvjdyTqUjm8/utigztVnaPt5K+HXMDSCAPMDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:9a:06:7a:ca:fa:ac:18:07:a7:2e:58:a0:c8:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0cde2c1fce3d6fe2185347dd89dcfd13ebbb151
Validity
Not Before: Oct 19 12:01:28 2025 GMT
Not After : Oct 20 12:01:28 2025 GMT
Subject: CN=e8adf96d25016971626cdba74d49b31021121550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:b7:04:6b:b7:bd:ca:81:c8:57:5f:68:23:
2d:2a:67:5c:07:37:f1:98:73:ed:9c:ea:af:14:71:
75:9f:d5:73:13:97:8e:e1:ea:a4:a7:2b:58:b5:98:
75:a5:e4:c1:15:28:12:20:4a:dc:f4:2b:7f:a6:e0:
e7:7e:6d:8b:91:6a:5a:f2:d0:cc:e0:ce:2f:12:d1:
87:23:09:2a:12:4b:2e:5d:b3:57:60:4f:f0:e3:97:
5e:a8:b4:18:6d:89:36:25:e7:47:0c:ad:d2:a5:89:
7d:e4:b3:ab:34:96:e0:ee:d5:03:3c:72:ed:9a:17:
05:80:78:42:62:e5:0c:85:e9:29:f5:84:8f:5a:a0:
71:ae:e4:0c:41:9b:52:a5:b2:04:03:67:58:13:44:
b0:12:4f:2a:0d:1e:1c:1e:50:0b:9d:44:ed:e4:d9:
94:ab:4d:9f:60:ff:b9:67:96:7f:e3:29:39:19:ef:
f4:1e:41:11:6c:ae:70:55:6e:85:da:2c:75:00:7e:
f4:b9:1a:07:ca:e7:20:86:81:5b:17:00:58:fc:88:
38:36:7a:07:9b:56:99:9e:0b:e5:33:ae:ff:e4:3e:
94:ea:c8:c2:7b:b1:8c:9e:8e:4a:61:13:91:33:36:
8d:e8:60:ca:cd:f0:96:95:4a:c0:ce:38:5a:26:b2:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AD:F9:6D:25:01:69:71:62:6C:DB:A7:4D:49:B3:10:21:12:15:50
X509v3 Authority Key Identifier:
keyid:E0:CD:E2:C1:FC:E3:D6:FE:21:85:34:7D:D8:9D:CF:D1:3E:BB:B1:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4M3iwfzj1v4hhTR92J3P0T67sVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/ecdd93-1aa0-4b9a-b6aa-ecb3126fc8ed/1/4M3iwfzj1v4hhTR92J3P0T67sVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:16:cd:4c:1a:9a:57:2e:b0:62:69:20:76:26:a7:58:85:41:
26:66:d3:98:0a:39:f6:7a:46:cd:ef:f1:1d:e2:01:cc:ee:16:
ae:86:6f:32:15:df:45:76:08:93:59:2e:95:d3:a4:a1:b7:96:
a5:b2:88:ee:e7:45:ec:ec:f9:81:21:c8:b4:1d:60:20:be:87:
d8:43:ec:6e:4a:9c:39:a4:12:63:2b:05:3b:28:d1:81:e8:92:
8d:8c:3b:1d:5f:6c:d7:f4:7d:00:18:6f:f4:8b:e6:1a:36:3e:
58:b2:71:95:cf:fa:b4:97:90:e5:9b:0d:22:6c:4b:18:c3:d8:
c2:f4:ce:9a:7b:f8:93:47:04:b9:8d:f6:e1:f3:55:36:a5:2f:
2a:85:96:02:5e:2b:af:06:02:47:c2:ab:25:3f:25:d7:2a:bf:
9d:6a:c7:b0:1a:16:3b:a2:d3:a6:3e:18:ba:9a:84:68:4e:59:
6f:51:1c:ed:f2:90:d6:91:08:0d:7c:88:18:a5:99:24:31:4e:
ff:0a:5f:a2:81:0e:7f:38:f3:b7:3e:c2:37:8b:e4:9c:d6:21:
d6:3f:30:9b:d7:ac:65:c3:bc:9e:81:95:85:bd:09:28:14:6d:
3e:4d:9c:dc:44:5f:74:52:88:51:c3:7a:a3:7d:51:29:f5:73:
34:ea:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:51 2025 by rpki-client