Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
File: 4q9q9tGZ8R7LpDVVEOmbficatUA.mft (raw, json)
Hash identifier: vAI9RfcNS5n/keuZTl+LJzBlNxByrEBvT0A8G2RbUds=
Subject key identifier: 86:02:FF:D7:6D:19:48:8B:51:E2:C2:98:67:A5:1F:5E:46:5E:34:71
Authority key identifier: E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
Certificate issuer: /CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Certificate serial: 0199FBEB7E2025D2AF3A62C8ABF11BBED4F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
Manifest number: 0218
Signing time: Sun 19 Oct 2025 10:02:18 +0000
Manifest this update: Sun 19 Oct 2025 10:02:18 +0000
Manifest next update: Mon 20 Oct 2025 10:02:18 +0000
Files and hashes: 1: 4q9q9tGZ8R7LpDVVEOmbficatUA.crl (hash: k8YoKSU8wokjh8cfkEZx8fnD3Hy+lKm3bwCvokUHzXs=)
2: C-s3qmcWvVMYI1a9KzViDKmJV5c.roa (hash: /bw45CjGjbfD9z7uFQfaYryXfUKu5UGOeYHJY32SaeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7e:20:25:d2:af:3a:62:c8:ab:f1:1b:be:d4:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2af6af6d199f11ecba4355510e99b7e271ab540
Validity
Not Before: Oct 19 10:02:18 2025 GMT
Not After : Oct 20 10:02:18 2025 GMT
Subject: CN=8602ffd76d19488b51e2c29867a51f5e465e3471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4a:79:63:b7:58:9b:cf:df:95:89:c2:0a:24:
6f:21:19:f3:d0:b6:c6:8a:93:3a:c6:d0:b2:0c:80:
96:18:75:69:95:97:37:45:a2:90:f2:05:dc:e3:63:
be:c0:6f:90:b4:fd:07:93:0a:32:0b:7b:27:57:f8:
1d:27:bd:82:f2:57:1d:2e:c4:a6:e3:f1:28:2a:db:
f4:ff:48:cd:ee:7c:e9:bc:2e:61:ba:73:65:a5:9c:
e1:38:37:d1:d9:e6:6e:6c:ba:38:df:73:4f:8c:d5:
dc:a3:85:ac:6f:17:29:08:0c:d9:f6:ca:f8:c8:b2:
11:57:b2:fc:53:f6:1a:d6:9f:e9:e7:e4:58:39:22:
01:b8:df:18:c7:c6:8b:98:1c:a8:98:a3:7f:9a:2b:
e0:3f:c4:2c:f0:a7:c4:3d:e5:2f:e3:08:13:0e:01:
53:36:f7:a2:06:a4:d0:62:ff:1f:cc:a1:94:7d:be:
1f:cc:0b:d6:88:1c:8d:db:57:b0:d2:b4:1f:e7:81:
28:47:ab:4d:b8:18:23:44:9d:00:30:1c:c7:b4:09:
c4:05:b7:43:10:c7:14:7b:e8:fc:10:ee:21:ae:36:
4d:e3:f7:05:5e:fd:a7:fe:ca:a9:8f:f3:ea:0e:0d:
a9:b2:c9:6f:42:4d:c4:08:26:da:f2:c0:0d:54:14:
de:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:02:FF:D7:6D:19:48:8B:51:E2:C2:98:67:A5:1F:5E:46:5E:34:71
X509v3 Authority Key Identifier:
keyid:E2:AF:6A:F6:D1:99:F1:1E:CB:A4:35:55:10:E9:9B:7E:27:1A:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q9q9tGZ8R7LpDVVEOmbficatUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/68569f-96cf-45e3-9dab-2ea52896bae1/1/4q9q9tGZ8R7LpDVVEOmbficatUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:02:df:66:64:08:ad:cb:bf:ee:b1:f8:31:0a:b6:17:3d:cf:
07:80:45:ab:4d:88:f2:9b:43:e9:8a:10:d4:0f:40:01:ec:ec:
07:0d:19:53:3d:4a:64:a3:80:b9:a8:e8:d7:31:85:cc:47:12:
a5:59:e3:e2:75:ce:80:9e:30:de:92:42:fd:5d:4b:94:cd:14:
2d:4b:b2:ea:be:1e:9e:b1:8c:aa:a4:e4:57:a7:46:36:f6:b1:
c4:c6:09:49:86:21:ac:53:a4:7c:4c:b2:2a:84:e6:c9:4d:e4:
53:02:4e:8e:f1:58:7d:da:ea:c4:b5:17:57:8c:91:5c:7d:50:
6b:4c:26:98:92:97:c1:41:f2:2f:68:b1:a8:46:d7:7e:37:f9:
30:f9:b4:b6:cc:13:e1:bf:11:12:45:e8:82:de:89:bd:68:7d:
89:b4:ab:cc:af:1c:10:6d:a4:48:c3:d3:77:ee:03:08:72:a5:
f3:e4:49:3f:18:f4:d3:3e:be:39:f0:e9:3b:45:bf:6c:13:db:
df:fe:5b:9c:b6:d7:dd:32:19:e6:a4:00:c8:89:4f:97:db:14:
5d:d1:2f:87:4d:53:f9:63:1c:11:9e:b6:c9:59:3e:c2:52:f1:
b5:ca:77:bd:20:18:94:97:12:15:8f:27:a0:41:3b:66:39:c6:
54:bc:2d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:33 2025 by rpki-client