Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
File: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft (raw, json)
Hash identifier: JqCoB4G28PEhWkBh+iYm05sn6lN8Fi+ubu8FFnSaz+I=
Subject key identifier: 40:86:E3:0A:F4:5E:1A:1B:23:85:D3:26:1F:D7:2C:B8:DE:49:24:F4
Authority key identifier: E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
Certificate issuer: /CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Certificate serial: 0199FC58C0712D4E998666C819A8E5E9917C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
Manifest number: 0BFC
Signing time: Sun 19 Oct 2025 12:01:38 +0000
Manifest this update: Sun 19 Oct 2025 12:01:38 +0000
Manifest next update: Mon 20 Oct 2025 12:01:38 +0000
Files and hashes: 1: 4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl (hash: tPaARXcixD1q4ha4UTF6zAw5yp0LnMbH2S1MvlQnPwg=)
2: 8jfWRZ1NLj1bjkrxzRMG9yYupLo.roa (hash: 89HNIKxmIWfFBZvw0N2AfHWlUXDjHZG4VVH2GueEE+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:c0:71:2d:4e:99:86:66:c8:19:a8:e5:e9:91:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1900e5596c0837497f1189410b1ed22acdb7e13
Validity
Not Before: Oct 19 12:01:38 2025 GMT
Not After : Oct 20 12:01:38 2025 GMT
Subject: CN=4086e30af45e1a1b2385d3261fd72cb8de4924f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:1c:c4:b4:48:aa:5b:c6:f7:86:c4:d6:26:
55:56:5d:81:ad:4d:c0:76:84:49:9e:2d:9b:7c:e0:
4e:54:8c:eb:96:30:01:d2:9e:8b:74:e8:9a:32:69:
11:2b:76:e3:1b:d8:24:dc:0f:25:59:27:88:f8:36:
a3:95:f2:ef:74:11:d7:51:72:14:55:e0:7d:c8:d3:
c6:5b:3e:24:60:da:d1:3e:95:c1:14:f5:d4:4e:3d:
35:41:23:e5:3c:05:32:d4:12:e3:db:23:30:58:a5:
be:95:72:9d:8b:b0:aa:51:be:a6:63:a4:fc:b7:d9:
c3:0b:93:b7:ca:cb:a6:ae:21:08:ce:ba:5d:f6:08:
7c:45:50:4e:9b:20:5a:5e:47:93:dd:96:b4:01:ff:
ee:20:3e:d9:70:23:54:f5:e4:5a:5a:72:51:35:0a:
a1:8b:95:5f:41:1d:f9:12:db:87:a6:04:c3:40:5d:
7b:68:f0:07:9c:c7:d6:9e:fb:58:8d:6f:0a:cb:7b:
69:62:0d:4e:88:fa:bc:df:ca:26:26:2e:09:90:af:
d9:bb:67:ba:8a:a0:aa:e0:4e:87:29:42:c2:cc:88:
6c:35:32:6a:06:ee:4d:9e:2b:28:fb:c5:0b:45:78:
0f:e2:20:b5:d9:35:44:1e:b1:ed:55:88:b1:e8:b3:
4b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:E3:0A:F4:5E:1A:1B:23:85:D3:26:1F:D7:2C:B8:DE:49:24:F4
X509v3 Authority Key Identifier:
keyid:E1:90:0E:55:96:C0:83:74:97:F1:18:94:10:B1:ED:22:AC:DB:7E:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ZAOVZbAg3SX8RiUELHtIqzbfhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/06db38-9886-4d70-8904-27cab0a60264/1/4ZAOVZbAg3SX8RiUELHtIqzbfhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:de:6a:85:81:e5:3a:69:1c:7d:53:cd:01:45:2d:1a:56:c7:
0d:ff:b1:cc:bb:66:9a:e2:14:87:78:2b:66:43:7a:17:46:d1:
9b:c3:dd:17:3f:08:28:d1:80:c1:07:82:60:c8:5b:06:05:87:
a0:29:d6:47:aa:ed:ba:1d:3d:87:0f:bb:48:b1:e5:e7:6b:d9:
08:69:d3:50:04:1c:a5:a7:64:ce:8c:a1:d2:c4:8b:5b:1a:bb:
0f:52:da:d2:c9:da:a6:ea:1d:ae:a3:28:58:bf:5f:4c:57:b7:
53:56:05:7a:e3:9c:56:7d:94:95:fb:9b:72:ee:e5:bd:b2:40:
c9:b8:16:bb:ca:0c:58:e0:11:1c:22:40:6d:32:77:c9:aa:7d:
d2:42:38:56:61:7b:64:d3:ac:4b:b8:4c:96:e5:7f:fc:ed:54:
48:7e:36:07:b0:ae:03:77:42:b9:01:b5:8c:dd:e2:30:d7:34:
ee:99:e8:c6:dc:51:5e:cf:ec:e5:2d:4b:32:c4:c2:e7:3a:cc:
0f:fd:cc:b9:43:fe:c4:d6:95:d8:39:81:43:ea:cb:c4:1f:8c:
bd:3e:ed:a3:ad:ee:1e:fd:c5:ae:a1:d3:8e:78:f0:87:8c:a9:
ad:8e:66:dd:2d:fe:b9:8a:83:ba:71:4b:94:89:57:b9:cd:95:
3c:ba:b9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:44 2025 by rpki-client