Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: +suYvbxHNNfpsTAqnNNDqLoBSDOCZ55KhfRxsG6BxgE=
Subject key identifier: F8:3A:23:DE:44:DB:54:13:59:AB:1E:5D:EE:BA:3E:29:C3:36:AD:55
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 0199FCC6C41FC06544CA09B38B6F0087C04F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 16E6
Signing time: Sun 19 Oct 2025 14:01:48 +0000
Manifest this update: Sun 19 Oct 2025 14:01:48 +0000
Manifest next update: Mon 20 Oct 2025 14:01:48 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: O6Io4J7LvJUA7SzeuJgFlnj9aqCQcgaBGgsghOoQEVQ=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c4:1f:c0:65:44:ca:09:b3:8b:6f:00:87:c0:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Oct 19 14:01:48 2025 GMT
Not After : Oct 20 14:01:48 2025 GMT
Subject: CN=f83a23de44db541359ab1e5deeba3e29c336ad55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:fc:f3:a4:ca:a3:bd:f2:23:b3:74:42:08:
37:76:06:57:f0:12:e7:c8:92:3d:81:23:55:e7:cf:
f7:c9:d8:05:45:31:1e:f2:2a:0c:18:93:a6:82:92:
ad:2f:b9:2d:e3:0b:5d:e9:03:73:55:6e:a1:f5:b4:
62:0c:e2:b9:f9:1d:f3:6d:73:2b:1f:56:8a:f0:7e:
35:04:20:47:d4:fc:e3:b7:c2:02:ce:a2:8a:04:04:
69:62:1a:be:b9:6e:c5:fc:e6:af:98:82:de:1c:c4:
41:8c:6e:c3:2c:a0:bc:d7:68:ba:90:cc:88:cb:39:
7e:a9:bd:b1:56:00:d9:cc:7a:d1:2b:67:b9:b3:6e:
04:a7:4c:0d:c9:8f:8f:af:c3:fc:fb:dd:c9:5c:db:
20:5d:41:1b:aa:e7:43:77:a5:69:3d:16:a7:95:1f:
1f:88:ef:d1:24:03:60:b9:98:a4:78:83:d4:bf:b2:
9d:1b:80:60:66:b0:28:fb:70:c5:6a:32:eb:46:fb:
bb:10:0d:f5:ab:72:fb:fc:b8:67:0c:95:71:2e:84:
9d:3b:22:a6:92:5c:e6:a3:ed:1d:a8:3a:10:1e:e8:
2f:84:7d:bd:3e:cc:7d:ae:88:80:97:2d:ba:8f:e9:
23:a7:b7:5c:d2:7d:da:38:5d:af:85:a2:80:8f:15:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3A:23:DE:44:DB:54:13:59:AB:1E:5D:EE:BA:3E:29:C3:36:AD:55
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c4:81:20:64:6e:99:67:d5:66:5b:4d:ed:58:0f:c5:d1:d5:
42:31:ec:b2:e6:20:b0:68:c2:d9:b4:22:5d:de:46:19:69:3b:
1d:04:76:8d:ae:b0:aa:f2:b1:4e:e9:fa:4c:59:e1:35:a6:f6:
de:b6:69:20:cb:83:cd:97:fa:a7:9e:7f:8e:25:ba:26:08:39:
6a:54:83:70:84:6e:c1:08:0c:74:b0:3a:a4:8a:7f:7b:75:62:
3d:99:85:15:2f:07:9e:c2:c4:4c:34:f8:75:9f:60:04:7a:23:
62:5f:1d:7a:8c:a8:a8:d1:f0:bb:fe:9c:51:1c:b0:4c:d4:8c:
5c:25:60:5f:99:3b:5c:42:68:bb:39:42:86:28:83:43:6c:4d:
fb:1c:97:28:dc:94:27:45:7a:aa:e8:0e:62:16:ee:4d:f1:13:
96:e6:55:a6:6d:78:4c:8f:85:24:1b:fa:84:a8:53:03:cb:f3:
fd:0c:96:a4:8a:2a:9e:a9:71:56:1e:a2:f0:e2:f8:78:88:0a:
c9:58:06:91:18:76:4a:39:c6:a1:1f:11:48:14:5d:61:52:6e:
8e:03:0b:68:b2:74:a6:2c:96:47:cd:ab:7f:e6:be:43:18:62:
88:49:9a:a7:3b:88:ab:7d:79:f6:c1:b2:88:f4:db:f9:df:35:
8e:a7:b6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:34 2025 by rpki-client