Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
File: 4u1kMJX_plfeBc7spdILJlwbf1I.mft (raw, json)
Hash identifier: LwFULix+tWxbQTT6u1Cjoile+YgZGLmMWxhuYwxkyQk=
Subject key identifier: 5F:05:F8:3A:F5:5D:D7:62:79:72:5F:AF:27:D7:D2:6A:ED:90:69:F8
Authority key identifier: E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
Certificate issuer: /CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Certificate serial: 0199FFFE7A96B0982FBAC60F8ACCD0B01F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
Manifest number: 0F62
Signing time: Mon 20 Oct 2025 05:01:31 +0000
Manifest this update: Mon 20 Oct 2025 05:01:31 +0000
Manifest next update: Tue 21 Oct 2025 05:01:31 +0000
Files and hashes: 1: 4u1kMJX_plfeBc7spdILJlwbf1I.crl (hash: 872Vb13nUMVjA5c0oj/QllqBpZtNmec4EwYsKgxtbbA=)
2: m1S7Ig8EoJ-at70vZRF2UbuJi5Q.roa (hash: AiilIUPxxw08sr3kqUjUq/R6OJzvAGqmXWhwnhpEZ7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:7a:96:b0:98:2f:ba:c6:0f:8a:cc:d0:b0:1f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ed643095ffa657de05ceeca5d20b265c1b7f52
Validity
Not Before: Oct 20 05:01:31 2025 GMT
Not After : Oct 21 05:01:31 2025 GMT
Subject: CN=5f05f83af55dd76279725faf27d7d26aed9069f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:6e:ee:44:95:90:38:1d:e5:c6:e7:b0:61:
ea:f5:22:a5:b9:db:2d:6b:13:a3:04:f8:55:9e:43:
07:81:a0:f0:0c:38:b9:66:f0:99:bb:9a:c7:aa:c5:
41:07:34:54:e8:a2:20:5c:46:d3:2e:4f:4b:29:21:
bf:d2:c3:b2:0a:c6:cf:58:ed:2f:d6:ec:8f:00:ad:
06:5b:cb:9a:83:87:1e:5f:92:6a:91:cc:3a:6b:42:
7b:3c:08:7d:45:f0:d0:1d:d5:df:76:1a:05:92:67:
3f:73:26:05:a8:e2:16:d0:78:42:2a:61:45:7d:d0:
d4:68:88:1f:d9:33:72:c7:a6:e5:45:b3:d7:f1:c3:
c6:1e:cd:69:6b:0a:e9:59:3b:ea:19:88:69:d4:1f:
60:04:f2:94:8e:dd:8a:3d:c9:2a:8c:8c:da:f7:5c:
f3:96:ef:38:c8:ba:a5:5c:48:8d:e9:20:eb:16:da:
ce:6c:7c:c5:10:fd:26:75:c2:94:0d:f1:24:00:47:
92:35:5b:aa:01:e2:ed:ec:e4:cb:f6:ea:77:bf:27:
96:e6:5c:7c:43:32:31:81:fb:74:8a:ae:2a:6a:87:
0c:fb:6c:59:23:f1:0b:d8:c3:6e:5f:a8:66:90:8b:
59:43:8d:b4:e7:62:85:66:db:a1:27:71:2d:4e:de:
d7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:05:F8:3A:F5:5D:D7:62:79:72:5F:AF:27:D7:D2:6A:ED:90:69:F8
X509v3 Authority Key Identifier:
keyid:E2:ED:64:30:95:FF:A6:57:DE:05:CE:EC:A5:D2:0B:26:5C:1B:7F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4u1kMJX_plfeBc7spdILJlwbf1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/eee6f4-548e-4cef-8fa4-93b020fe8ff1/1/4u1kMJX_plfeBc7spdILJlwbf1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:95:cd:d4:af:a0:50:b0:80:74:22:53:89:d0:cd:ab:4c:40:
02:9f:16:06:7e:26:9b:ff:51:15:70:bc:af:e5:a5:8e:37:92:
be:47:bb:02:19:bf:09:bf:60:d0:e1:f2:e3:44:e3:2f:00:87:
a2:48:bd:35:73:c6:83:71:65:3f:ea:64:a3:c5:bf:79:2e:9d:
3f:c5:e0:0c:c4:92:13:df:31:5a:03:ab:29:1f:c5:90:c5:cc:
77:7c:d5:0e:be:0f:e0:79:0f:60:d1:7e:00:ad:cc:83:d3:9e:
7d:9f:38:95:62:66:51:41:64:84:18:a5:2b:f2:43:63:72:38:
52:7e:9c:da:04:4c:4a:29:26:41:3a:d6:b2:00:36:99:f9:08:
2d:25:31:9e:73:a3:61:5f:ac:67:9e:ea:8c:e7:c6:0d:cc:3b:
8c:b8:75:85:1f:9c:25:10:5c:f8:f7:0c:cf:a7:98:6b:73:21:
9f:b5:8e:e3:89:89:8a:30:84:44:21:db:14:9f:bf:34:ff:18:
24:fa:e8:3b:a0:cb:21:83:5f:78:3e:fb:40:9e:5f:18:38:55:
6a:76:85:6b:1f:a6:13:c5:bf:40:df:2d:af:b1:17:d1:dc:b9:
eb:19:fb:f3:11:0f:45:f1:f0:9b:10:ce:c3:ce:c1:81:91:4a:
0a:9f:8b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:08:39 2025 by rpki-client