Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
File: 4z5VR668F6SCuM0e6BfdjO_2o68.mft (raw, json)
Hash identifier: Qq2QHNBwsHeynLDlg2GpNJPWENplGQPq38rbwaGl51g=
Subject key identifier: 3C:8E:EB:F5:32:BD:AA:31:58:9F:21:2F:C3:94:D7:67:A4:AB:53:97
Authority key identifier: E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
Certificate issuer: /CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Certificate serial: 0199FE46E433755D0C0A707BCB133CB8EB52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
Manifest number: 0EC4
Signing time: Sun 19 Oct 2025 21:01:22 +0000
Manifest this update: Sun 19 Oct 2025 21:01:22 +0000
Manifest next update: Mon 20 Oct 2025 21:01:22 +0000
Files and hashes: 1: 4z5VR668F6SCuM0e6BfdjO_2o68.crl (hash: 8Xf7G/gDFKnLckUegzx2gDcJnIKbrQgfqDC/ChgFbVE=)
2: nlxhNU09PYV8ICYRds67uFQ8SD4.roa (hash: 5Mkpw05F7xKd7rn+KAmOk8IiGnvRNLjGed3AF2L+Quk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e4:33:75:5d:0c:0a:70:7b:cb:13:3c:b8:eb:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e5547aebc17a482b8cd1ee817dd8ceff6a3af
Validity
Not Before: Oct 19 21:01:22 2025 GMT
Not After : Oct 20 21:01:22 2025 GMT
Subject: CN=3c8eebf532bdaa31589f212fc394d767a4ab5397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b4:85:66:5a:fc:70:68:fe:d5:2f:62:6a:91:
0b:bb:bf:c7:48:4e:d6:29:cf:16:6e:18:bd:b1:02:
9d:c6:69:ce:37:bf:4c:3c:98:b3:1c:f2:4b:e3:9d:
ef:81:81:c3:fe:9c:06:eb:df:55:7a:3b:21:09:53:
db:c8:eb:d7:a5:4c:95:4d:c8:92:49:6e:0c:f9:c4:
47:07:48:7b:3d:bf:92:ed:f2:ba:fc:e6:3b:e9:77:
7d:bf:3d:e8:a3:3f:f1:61:6c:93:e3:13:94:e7:60:
95:c3:82:4d:02:10:28:3d:f6:bd:75:9f:d4:2d:6e:
13:fd:81:da:fb:53:23:99:d6:40:bf:65:7c:59:3c:
2a:aa:59:72:db:b3:31:71:03:9e:33:a1:9e:c2:fa:
d3:2d:33:83:95:cf:64:99:f4:72:45:e2:c9:43:4c:
14:0f:bb:42:6a:17:b9:74:77:eb:c7:a8:37:dc:03:
10:0d:2e:27:85:cc:4c:aa:b9:6a:28:d1:d9:51:7a:
f7:c1:84:bd:5b:06:15:58:4c:1b:2d:6a:df:b9:4f:
90:8d:3a:c9:07:18:75:7d:16:15:2b:0b:03:63:85:
4f:cd:de:0e:3f:9e:98:1b:4f:fa:27:6f:9e:2c:86:
09:23:49:68:06:47:a5:94:93:bc:a7:e0:17:f2:6f:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:8E:EB:F5:32:BD:AA:31:58:9F:21:2F:C3:94:D7:67:A4:AB:53:97
X509v3 Authority Key Identifier:
keyid:E3:3E:55:47:AE:BC:17:A4:82:B8:CD:1E:E8:17:DD:8C:EF:F6:A3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5VR668F6SCuM0e6BfdjO_2o68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/39a47f-1bfd-440e-b4ef-b0701b8b40c7/1/4z5VR668F6SCuM0e6BfdjO_2o68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f9:98:eb:9e:43:97:51:79:cc:01:61:8d:4e:fe:ca:d8:52:
4d:b9:98:ad:81:37:56:17:9f:19:f6:87:10:e3:94:38:f0:a4:
9a:20:f5:61:12:af:82:ac:fb:68:4a:d6:fb:c0:a7:ab:0e:b9:
79:5d:c7:d0:ca:31:d9:ee:40:3b:7f:5b:83:96:2c:47:12:e9:
e2:ee:f8:77:05:b3:3d:75:6c:ae:ef:b2:6a:ec:39:41:1d:0e:
47:8a:bb:1c:cc:86:f6:8a:e7:75:6d:7f:d7:c3:6a:67:9e:39:
0b:9a:8b:a7:a3:95:e6:05:58:8c:50:7a:d0:de:76:e7:dd:b2:
c9:0b:71:de:ba:c5:48:4a:a1:55:08:02:b8:09:93:ed:5c:5e:
66:22:81:98:14:11:70:1f:aa:46:2a:d8:76:32:3e:b4:a4:e1:
6f:5e:99:c2:c2:b2:58:e6:bf:37:f3:c6:e4:32:cb:6e:17:f4:
40:44:d4:9e:41:f4:f6:e0:45:73:0f:5e:ad:90:d6:78:7b:7f:
ac:46:6e:68:f3:7d:70:7d:34:e0:d6:f6:3b:3c:4b:63:db:c3:
a4:a7:a6:29:48:4a:25:31:0c:3b:e4:2c:71:e1:c2:03:28:69:
25:a5:ba:9c:04:11:05:84:4f:fe:53:48:a7:9f:25:8e:3c:49:
01:08:c7:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:07 2025 by rpki-client