Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
File: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft (raw, json)
Hash identifier: eAmJ5iF7lLWV/DZhyChKShIIYSGSau001bOKmVUl+Go=
Subject key identifier: 29:BB:44:D0:7C:7D:0F:74:8E:B9:F4:44:8F:D4:DF:10:AC:7B:2D:A8
Authority key identifier: E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
Certificate issuer: /CN=e334ec393448d83bf1515f4967a448098e55fb43
Certificate serial: 0199FFFEA3702112A985466F925849A9E233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
Manifest number: 16E3
Signing time: Mon 20 Oct 2025 05:01:42 +0000
Manifest this update: Mon 20 Oct 2025 05:01:42 +0000
Manifest next update: Tue 21 Oct 2025 05:01:42 +0000
Files and hashes: 1: 3i7bDwmXfkGeboYerA9gz4okFig.roa (hash: fWhHLCsrKiodDbQX5MlZg8yk8IDQZFwIAhXPpQk2VnY=)
2: 4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl (hash: XPmXPTcxcPR9Fow4ouL2p+8gJlHuVbhEy0WRRoG6SuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:a3:70:21:12:a9:85:46:6f:92:58:49:a9:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e334ec393448d83bf1515f4967a448098e55fb43
Validity
Not Before: Oct 20 05:01:42 2025 GMT
Not After : Oct 21 05:01:42 2025 GMT
Subject: CN=29bb44d07c7d0f748eb9f4448fd4df10ac7b2da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:41:5e:64:f8:e2:60:0b:f7:a8:99:f6:33:24:
22:36:44:31:ac:5e:73:8c:5d:75:9b:93:7e:26:08:
7a:38:bd:43:0d:54:15:c6:5a:fe:c5:12:4f:6e:52:
93:e8:b8:4e:38:cb:ca:76:36:de:91:28:4a:31:de:
e9:30:c2:e6:31:62:56:dd:06:b4:3a:9b:4d:73:82:
76:52:63:3f:2c:28:95:c6:16:15:6e:c4:b6:69:0b:
a1:f8:dc:15:a2:13:11:f0:44:6b:12:06:c1:2c:7e:
be:26:5c:17:09:8f:a3:a4:58:82:3d:d1:1b:da:8c:
a8:a7:b5:84:91:c2:19:d3:13:a4:a5:f5:68:bc:d5:
75:06:9a:b5:58:da:ad:1f:59:aa:1b:09:77:cf:5e:
18:2b:2f:11:ea:24:4f:55:d0:5a:1c:68:36:ab:2d:
fd:ce:77:d1:d5:0c:56:e9:4d:ea:67:e2:a6:a0:e6:
fe:36:17:5e:91:62:d8:97:d9:2b:23:52:71:09:f3:
4b:aa:77:bc:89:93:2c:3f:35:7a:ba:3b:be:e7:95:
23:24:37:9b:9d:00:3c:5e:0c:97:4f:14:2e:8c:3f:
1e:f6:eb:36:62:3b:7b:b2:96:24:cb:d1:1b:9b:4b:
b4:4d:fa:b1:33:aa:3e:5f:2e:fd:7c:02:da:b9:bf:
3d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:BB:44:D0:7C:7D:0F:74:8E:B9:F4:44:8F:D4:DF:10:AC:7B:2D:A8
X509v3 Authority Key Identifier:
keyid:E3:34:EC:39:34:48:D8:3B:F1:51:5F:49:67:A4:48:09:8E:55:FB:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zTsOTRI2DvxUV9JZ6RICY5V-0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/19bd8a-c6f1-42e2-8460-cdab19a3fdeb/1/4zTsOTRI2DvxUV9JZ6RICY5V-0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:3b:32:84:2f:ce:14:9e:58:de:4d:c8:32:0d:7f:3b:19:01:
3b:ef:85:bb:4d:6f:71:5b:81:e1:f7:90:dc:6a:bb:9b:25:c1:
eb:b2:1a:be:48:c7:82:0e:8f:a2:dc:50:c8:f2:2d:71:05:8b:
e0:5a:d7:75:af:94:48:9a:c2:01:8b:d1:44:93:c7:27:0f:09:
bc:b2:67:e4:07:df:53:b0:1c:8a:30:ea:99:82:2e:4f:0d:9e:
ab:71:c6:54:34:40:6f:61:e8:d1:8a:a1:89:8f:3e:b6:2d:31:
df:f9:ee:af:c1:13:d0:49:40:19:a3:56:e2:6d:43:ec:50:78:
65:30:52:88:c6:39:91:a2:24:82:c4:31:52:12:c9:28:e2:a2:
61:a0:25:f1:30:6c:35:f4:0e:c4:77:ca:dc:eb:31:4c:ba:d1:
68:12:fd:6d:98:10:d2:58:82:d1:6a:75:8d:09:4e:1e:5e:59:
3f:71:77:f7:fb:a4:5e:29:61:26:f4:d8:82:98:65:d1:f0:4c:
88:b5:a0:2e:3a:3c:67:d4:6b:42:0c:c1:81:18:15:d1:0b:65:
06:a7:d7:81:16:42:27:52:ae:ea:a1:ce:d6:d3:03:e7:0b:b3:
2e:5c:76:22:9d:9a:05:74:e3:44:4b:2e:d3:c7:d3:b1:bf:bb:
44:8e:13:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:27:22 2025 by rpki-client