Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
File: 4xYxgkfSEYQfliCpoRMAEN20hvI.mft (raw, json)
Hash identifier: oUZxdg41iIVr1KOqSwiMxrKT1SzI+N06HJRidXvlXcM=
Subject key identifier: 2C:57:69:9A:02:41:72:35:21:90:84:A4:35:CB:A9:E6:93:2D:63:4E
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 0199FD33ED7D7B38AE78F94373BD20A5CE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
Manifest number: 0F03
Signing time: Sun 19 Oct 2025 16:01:02 +0000
Manifest this update: Sun 19 Oct 2025 16:01:02 +0000
Manifest next update: Mon 20 Oct 2025 16:01:02 +0000
Files and hashes: 1: 4xYxgkfSEYQfliCpoRMAEN20hvI.crl (hash: Pm0HHIMM0XVf+TfsPGtG4i7Z9DAyN+g052F0tNtgE9Q=)
2: OPoJJXIKKrWhudAq1xiuARrS1H4.roa (hash: sQTnuyk1NVfltmH/ouY0am8WUGDv6HXMop3KtZ2xXJo=)
3: Y0KH9jUtOdTdVzzVwvfGtDjZxIU.roa (hash: ECg0/VJoY6yBxbdarx1o6Xry+PkavLOkwZaMHO8CBps=)
4: iTRKgS_ctdQMS65aT9yNiwNmnac.roa (hash: 9OIP8hq95SLwUq03I4+pqdX2ifDWiqIls9ZH9aKVb9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:ed:7d:7b:38:ae:78:f9:43:73:bd:20:a5:ce:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Oct 19 16:01:02 2025 GMT
Not After : Oct 20 16:01:02 2025 GMT
Subject: CN=2c57699a02417235219084a435cba9e6932d634e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:59:39:55:88:48:d6:da:89:69:89:13:a5:fd:
f4:11:59:2c:3d:20:c3:6f:78:1f:36:ed:56:0e:b8:
63:26:6c:c5:51:80:da:27:ba:74:06:d2:77:46:da:
ed:43:53:44:36:bb:61:d5:a1:2d:81:d0:87:a4:9f:
67:5a:e5:61:bc:fb:9e:29:7e:58:09:b7:79:42:b5:
c5:bc:21:cd:c2:6e:ab:ef:e2:d5:4a:6f:2f:07:37:
54:cb:6d:3e:94:b7:f4:df:d6:43:fd:2e:67:36:6a:
07:29:b1:5f:32:b3:d5:fb:48:79:f3:61:78:8e:26:
82:a4:f2:3f:4e:f7:43:68:e8:50:0b:97:6d:90:72:
6e:b9:af:54:f7:a8:d5:9d:c5:6d:25:c4:be:1f:f9:
86:dc:89:e6:0c:fd:9b:86:9f:c2:28:89:53:c9:99:
3d:48:13:f4:a8:4d:72:d8:80:d0:fa:42:da:1d:c9:
77:e8:83:00:9e:04:1b:d9:40:d8:6c:23:07:fc:9b:
66:ed:6c:fe:88:d7:9a:98:12:31:cc:93:68:89:fe:
1e:4e:89:46:13:42:34:e2:4e:e1:ff:d3:4e:a8:1a:
4c:63:03:f9:ed:b1:1e:83:54:f1:1d:74:40:a4:fa:
32:63:54:87:1d:59:a5:89:0e:8c:5f:90:91:df:bb:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:57:69:9A:02:41:72:35:21:90:84:A4:35:CB:A9:E6:93:2D:63:4E
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ff:f1:bd:74:8f:c4:77:bd:61:c3:b3:69:1d:0e:ed:f5:f2:
28:3f:66:c7:93:e0:87:32:cc:04:7c:db:4b:ab:7e:e5:43:d5:
47:5f:b7:41:0c:01:fc:55:75:25:46:b2:71:83:ef:64:e0:4b:
df:ed:b1:3a:3a:11:18:53:d3:76:c7:97:79:65:eb:35:97:d1:
93:7c:6a:88:8a:ab:49:37:e2:7d:a8:38:fa:a6:3f:c5:8d:50:
ad:01:d6:4c:ac:6e:d1:53:35:40:86:3c:b8:7b:c3:af:20:c4:
e4:0a:92:1c:ba:11:f3:38:eb:ce:1d:2e:48:4d:26:6a:b7:eb:
a4:05:54:45:46:50:5b:3d:bb:b8:a2:ee:da:ab:19:32:cf:5f:
e1:70:9f:c3:c2:c7:7b:5e:31:d2:6e:de:c3:d7:77:06:72:25:
29:57:bc:ad:12:44:a1:e6:a0:64:21:dc:10:ac:dc:62:e5:14:
ac:4f:b2:a4:ad:88:6c:d2:27:26:38:0d:82:02:c6:00:7a:33:
30:0f:f6:a5:51:ea:a5:fe:04:2d:f6:b8:b8:e5:3d:c3:8a:63:
66:80:0b:21:1b:bb:27:c8:c5:4c:af:0a:20:78:59:42:ac:e2:
3e:f6:06:bb:33:cd:9f:06:e4:ee:24:4a:34:33:18:cc:f5:1b:
0c:99:e6:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:19:26 2025 by rpki-client