Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
File: S4cDP8aofTuNDLPOGrK6u-UroxE.mft (raw, json)
Hash identifier: c00QLxh2rdWn/W/IJQIVanqCkwFzC5uctAzApqF+E5c=
Subject key identifier: F3:51:9B:F6:53:E1:98:7D:66:4F:37:FF:BD:88:32:D3:6A:C1:5F:38
Authority key identifier: 4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
Certificate issuer: /CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Certificate serial: 0199FB7CC85C96CD90F25288D4D49AD7219D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
Manifest number: 15C1
Signing time: Sun 19 Oct 2025 08:01:22 +0000
Manifest this update: Sun 19 Oct 2025 08:01:22 +0000
Manifest next update: Mon 20 Oct 2025 08:01:22 +0000
Files and hashes: 1: 8OZ4Eudn-Zmm9BJklLqYUOhBro8.roa (hash: nQrHTPYYHsaKcsU7K7NBUNZKUwu8kquBvMwb0t9InZk=)
2: S4cDP8aofTuNDLPOGrK6u-UroxE.crl (hash: EMHD7+0jzZnJDjeht9CBqbENEFdDTg5fcEypiLd2REY=)
3: rP00SjYOc7kI37LHeR0akx0WLbw.roa (hash: HwxnGSpBCBewjdHMOMeKuWHUwmAgwVnpqM4EW67Q304=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:c8:5c:96:cd:90:f2:52:88:d4:d4:9a:d7:21:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b87033fc6a87d3b8d0cb3ce1ab2babbe52ba311
Validity
Not Before: Oct 19 08:01:22 2025 GMT
Not After : Oct 20 08:01:22 2025 GMT
Subject: CN=f3519bf653e1987d664f37ffbd8832d36ac15f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:15:f4:51:ad:91:fa:96:94:74:90:2e:16:43:
83:56:2b:97:e4:25:1d:7b:40:ce:d5:0a:9c:17:c6:
d8:0e:ee:bb:c2:2d:bc:4c:45:14:86:06:ef:ef:29:
af:69:df:9a:1e:9d:eb:a7:bd:ea:3a:0d:a6:e4:2f:
5f:38:d9:63:0f:5a:bd:80:14:9d:33:b9:1c:4e:13:
0a:24:4a:54:d2:68:8f:76:af:0c:1c:fd:05:4f:63:
02:2d:cc:14:6f:44:f8:4a:97:f4:4d:3c:e8:8d:22:
77:16:26:ee:95:78:41:1f:76:6e:74:fd:35:85:5d:
99:70:13:2b:06:94:f2:9e:b6:45:56:da:4e:50:24:
ae:09:60:76:a5:89:b5:31:7e:66:00:1d:7f:25:f4:
af:8a:49:a7:c0:3c:40:6a:2b:eb:54:c3:e1:2c:2d:
f1:4f:85:46:44:4b:1f:11:85:55:3a:d2:74:ea:ab:
fb:05:0a:39:00:67:e2:8d:4a:3a:e2:33:2f:41:b3:
71:29:ff:f5:9c:0e:e8:1e:a6:19:4a:f5:87:5f:2e:
65:e2:6c:6f:5d:ce:17:f7:9c:d5:04:9c:b2:d0:96:
f8:c0:67:68:16:ae:0a:31:f9:bb:aa:c9:f8:0a:58:
ee:ec:84:57:87:19:8f:38:76:00:97:e7:36:eb:f9:
12:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:51:9B:F6:53:E1:98:7D:66:4F:37:FF:BD:88:32:D3:6A:C1:5F:38
X509v3 Authority Key Identifier:
keyid:4B:87:03:3F:C6:A8:7D:3B:8D:0C:B3:CE:1A:B2:BA:BB:E5:2B:A3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S4cDP8aofTuNDLPOGrK6u-UroxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/6dfbcf-313b-47b9-bf8e-a778a0c14859/1/S4cDP8aofTuNDLPOGrK6u-UroxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:98:0b:6a:06:b5:11:4c:a3:c4:c8:4a:41:ba:03:64:68:56:
39:d2:2e:b7:3c:db:7f:73:5c:2f:5b:ff:1b:bd:17:1b:f9:5a:
99:74:8b:a0:bc:23:9e:98:9f:45:2f:40:4f:96:06:46:75:d9:
c4:1d:b4:ca:1e:5d:36:98:aa:28:93:15:d3:63:23:87:76:ac:
d8:65:07:e3:90:35:96:6e:e0:f4:5b:9e:fc:0d:68:48:8a:f9:
e2:00:53:38:17:dd:af:b7:b8:0c:82:3b:4f:8d:ab:2b:5f:19:
14:09:f5:c1:d3:1e:c8:59:43:20:99:89:2d:12:01:9c:7f:aa:
f9:08:0e:bf:5c:ef:9c:44:66:a8:54:4e:cc:ff:5c:6c:38:76:
ba:57:57:6a:a9:c4:20:c7:6c:c2:95:d9:41:f3:67:43:8f:1c:
13:3e:77:d9:0c:58:07:80:8f:a6:a0:24:1a:99:fc:52:09:61:
8d:2c:cb:71:d0:e4:f4:b3:e0:19:93:04:13:02:84:d6:54:66:
78:30:9d:b1:e2:fe:84:09:11:09:9a:62:1f:c7:50:7b:2a:0a:
49:10:49:58:87:8c:9f:ae:fd:d1:a4:32:86:c9:c6:ee:27:40:
dd:10:f8:d8:47:88:f2:ca:17:cc:5c:32:1d:98:c3:12:5d:10:
25:11:0a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:20 2025 by rpki-client