Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File: 4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier: hLbpyxJ3adqkBRXqf+g9jSwGf/EtTlcn1ftBSvmEcAg=
Subject key identifier: 2E:68:8A:DF:7A:EC:88:45:81:ED:B2:9A:42:C4:C3:C1:BC:46:C0:52
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial: 0199FF59990EAC3EF269F579616E0EE4F6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number: 16E8
Signing time: Mon 20 Oct 2025 02:01:25 +0000
Manifest this update: Mon 20 Oct 2025 02:01:25 +0000
Manifest next update: Tue 21 Oct 2025 02:01:25 +0000
Files and hashes: 1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: Yf3nmY/qYr/u+FwpCo9tddJ7YDmgKM3ysnhO46znHJk=)
2: AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa (hash: 4Pxy9edWR16JJVWSm9ebgWIqidAnxsMd1sHHOAlque0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:99:0e:ac:3e:f2:69:f5:79:61:6e:0e:e4:f6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Validity
Not Before: Oct 20 02:01:25 2025 GMT
Not After : Oct 21 02:01:25 2025 GMT
Subject: CN=2e688adf7aec884581edb29a42c4c3c1bc46c052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:38:ec:8b:4d:68:25:d7:dc:37:25:bf:23:
d4:03:f4:22:a2:27:96:d1:49:c5:3a:93:6c:36:22:
ba:cb:52:3c:f3:df:0e:99:db:e0:83:9e:ef:cb:2a:
45:21:72:b8:ae:c2:72:1e:36:f9:87:7d:73:ec:28:
ff:87:b6:3e:16:f4:b1:6e:3f:3b:88:ee:b2:c0:73:
93:8c:ce:41:11:83:ab:a0:04:3c:28:f8:fc:fd:f5:
a4:c2:82:be:9d:92:bf:ae:6d:3a:f4:d7:37:44:89:
d3:be:8d:fb:d1:bd:87:52:d3:ce:29:0a:d1:68:1c:
65:d3:72:05:ce:fc:e8:37:aa:2e:fb:07:cb:a6:ab:
44:34:3a:17:8b:6f:12:50:77:18:e0:29:58:4a:dd:
ac:75:62:a8:3d:47:ed:d0:af:a7:a4:8b:63:19:4d:
59:3d:2b:40:1c:ed:e3:88:97:8b:56:b0:56:2f:15:
33:f5:7d:00:77:83:0a:b1:23:45:f3:30:f2:95:9d:
d6:27:c2:04:7d:7e:81:1a:2c:fe:b8:63:bc:fb:1c:
60:3a:cc:71:aa:15:44:f0:b7:ad:bc:6d:86:9e:f5:
bd:51:a6:ab:ce:60:aa:cb:85:bd:2e:b5:76:ad:2f:
82:c0:f4:fd:c9:78:7a:95:b5:c2:b6:c2:87:a4:97:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:68:8A:DF:7A:EC:88:45:81:ED:B2:9A:42:C4:C3:C1:BC:46:C0:52
X509v3 Authority Key Identifier:
keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:e6:94:c5:24:86:a3:23:29:73:7b:83:ff:5c:f4:d0:59:20:
36:bf:d1:3e:21:c9:b9:e6:09:3c:55:cc:cc:02:1b:b8:fe:da:
31:00:47:9f:e4:b8:d9:23:ed:e6:43:57:dc:d7:dc:99:e5:22:
a4:2d:d2:9a:2e:d9:c8:15:9d:89:09:8a:bd:9c:15:f4:91:5d:
76:83:ac:93:f2:f3:7a:17:14:ff:ca:1c:a1:72:21:9c:5e:c4:
10:fd:e8:72:f8:12:5d:23:42:dc:6d:6b:e7:85:fb:c3:b3:ad:
42:39:e2:95:61:2a:80:e3:01:e8:d4:ff:0a:ca:51:aa:57:06:
43:00:50:fa:d2:cf:ce:76:1b:ae:10:71:a2:4a:48:a7:33:63:
5f:5c:75:d8:6f:4c:8a:2c:c7:1a:ae:bf:5a:ed:8d:06:54:02:
f4:ba:df:6e:91:4b:eb:6f:81:74:c8:a2:f1:cc:8f:a8:96:d9:
5a:7d:f1:5c:09:44:51:5a:1a:9d:be:9c:21:95:aa:18:0d:9f:
88:7c:8d:1c:8f:0e:8e:40:ff:28:4a:9d:ff:80:1f:c0:c1:6a:
f1:e2:e4:1a:f7:aa:66:8d:c2:ed:de:2a:49:6e:cf:83:01:13:
af:b1:e6:4b:48:f2:2f:8e:11:4b:77:b6:13:77:d8:8f:62:d1:
4d:5a:a7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:45:52 2025 by rpki-client