Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
File: 4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft (raw, json)
Hash identifier: 8NbczEDIsjutK7nzPl/gqvdVFczgRwTGYMvN7QRRRdY=
Subject key identifier: 43:14:5F:38:AB:FA:FC:60:F0:0B:F3:20:43:3C:74:AF:BE:B6:BF:73
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 0199FFFE582C3ABDE946B062586C4C52E51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
Manifest number: 08D1
Signing time: Mon 20 Oct 2025 05:01:22 +0000
Manifest this update: Mon 20 Oct 2025 05:01:22 +0000
Manifest next update: Tue 21 Oct 2025 05:01:22 +0000
Files and hashes: 1: 4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl (hash: u69jKoOFT8qaUYhB6LUsqOR5qO9Y6XaOMGOSq/ZHj1g=)
2: 8ledFww48tlGlLdCdc6wJh5gkIA.roa (hash: Tmx1stFU3W6NXlv6YnpijkUZCwIIoq5vNpNXxvyHtoo=)
3: kNp_3YkCixoFt65dB3MqrcA0XPo.roa (hash: yKQUvFhZ+Z1swcvVEnDhUbffbwLlIa/3aCYRRPNo5TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:58:2c:3a:bd:e9:46:b0:62:58:6c:4c:52:e5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Oct 20 05:01:22 2025 GMT
Not After : Oct 21 05:01:22 2025 GMT
Subject: CN=43145f38abfafc60f00bf320433c74afbeb6bf73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:08:7c:b0:76:e2:54:d4:ab:58:af:ce:3d:63:
5f:d1:76:30:7b:03:cd:31:0d:bd:d7:20:ff:d0:da:
77:ee:de:54:20:9b:82:4a:a9:bc:c6:d4:5e:31:a9:
85:73:e3:c1:e7:8a:86:29:9a:7a:3b:58:13:5c:a4:
79:92:2b:e5:70:7d:07:82:6d:8c:63:ec:32:c3:b1:
6e:70:9f:d0:af:ae:53:1b:a1:f9:bd:0f:79:89:7f:
5f:25:ea:97:16:90:1e:98:c4:7b:12:32:79:f6:77:
f6:ae:30:02:59:d1:6e:b4:46:35:77:bc:c5:7a:cf:
36:f9:88:1b:08:52:76:b3:1c:ea:4b:28:1e:aa:30:
2e:30:64:c3:a8:21:8b:0a:f1:97:67:36:3a:0f:85:
b7:07:13:f6:8e:b8:14:f7:42:e8:3e:db:10:98:8f:
9d:07:9d:e9:31:d9:c2:9f:d6:fe:6e:44:05:94:19:
ea:a7:f3:91:56:af:c2:91:30:f9:22:ec:85:d8:b6:
9a:cc:ce:a6:9c:9e:47:09:9d:b0:c5:d9:06:89:8f:
40:08:aa:13:b0:38:35:4d:cf:5a:8d:7f:a5:fe:8a:
f2:43:80:fe:73:ad:c3:b3:64:6f:11:0b:ae:46:66:
73:15:e1:95:07:7c:6e:b9:8c:a7:80:53:10:76:51:
cf:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:14:5F:38:AB:FA:FC:60:F0:0B:F3:20:43:3C:74:AF:BE:B6:BF:73
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f3:5d:20:fa:f0:32:40:fb:54:28:84:a0:dd:05:d4:2b:68:
63:5d:53:ad:2f:6e:55:dd:28:d0:8a:3b:a4:7a:70:20:6b:84:
ae:c7:cb:7a:04:fb:34:9e:29:44:98:fb:c3:e8:9c:b9:11:e2:
e8:08:a1:74:37:b4:bb:44:90:27:9c:ef:56:70:a7:e1:0d:ed:
5a:c4:9a:ce:67:02:09:a8:d0:2f:b6:5f:91:6e:c6:4d:d9:d8:
f4:35:e1:4e:96:05:0c:8c:c9:8a:85:44:a4:99:f8:dc:18:53:
13:be:f9:6d:a8:1d:6c:d4:b6:af:6f:eb:64:26:2f:64:46:bf:
e9:9b:3c:8a:0f:8e:7e:f8:bf:79:61:b5:03:72:e2:10:ae:23:
8c:04:8c:0c:14:58:2b:4d:e8:86:de:6f:76:3e:9d:69:7e:a8:
f9:57:7d:fc:26:8e:b7:d2:60:a9:a8:53:f6:f8:eb:4d:91:28:
f7:99:6f:dd:80:f9:44:6d:e3:38:d2:b5:29:9a:10:f6:cf:2f:
6e:fd:b2:e8:a1:96:e4:a8:c2:6a:ef:5b:57:0c:fe:3b:c8:20:
0b:e5:da:50:ba:72:fd:1a:78:dd:45:78:9e:a0:17:f0:f8:f8:
e2:5f:e1:ff:13:5f:90:a9:19:04:ab:65:ca:14:e0:27:de:48:
b3:f4:3c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:38:24 2025 by rpki-client