Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: rYMlU7fyrA7dZR8Do42S3lHGIRnETRx7pz2ph6LANGg=
Subject key identifier: FE:64:81:EA:C6:AE:99:3F:9F:05:DE:FB:23:C2:9B:E5:45:01:2E:FF
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 019A033573C5975ADCCB0B842ECFBB8D22AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 02D6
Signing time: Mon 20 Oct 2025 20:00:25 +0000
Manifest this update: Mon 20 Oct 2025 20:00:25 +0000
Manifest next update: Tue 21 Oct 2025 20:00:25 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: 01kteWVS0elr+yOiOkpOYvJnoTMIa/rkbcW/aNRwB5A=)
2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 20:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:35:73:c5:97:5a:dc:cb:0b:84:2e:cf:bb:8d:22:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Oct 20 20:00:25 2025 GMT
Not After : Oct 21 20:00:25 2025 GMT
Subject: CN=fe6481eac6ae993f9f05defb23c29be545012eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e5:68:2d:38:19:d1:8d:30:ea:3e:a8:4b:a4:
06:3e:f5:99:36:f5:9d:15:74:b4:3c:79:12:61:fb:
b7:fc:25:fb:60:f6:cf:93:06:70:4c:8e:f3:45:a0:
a5:a2:97:35:b3:62:7c:2d:2a:db:42:56:06:19:9e:
ef:ba:81:da:50:bc:d3:c6:85:9a:0d:37:70:36:86:
7a:41:c6:38:1e:f9:ea:d2:33:42:d4:a2:ce:b9:b0:
8f:98:0d:ed:ab:07:1e:ca:8a:14:1a:2b:00:be:fe:
de:07:f0:2a:b6:36:c8:07:a9:7f:76:70:ad:5b:6e:
1d:d5:da:10:cd:d5:06:f9:40:48:17:d5:2b:95:3b:
d7:f6:a8:e7:95:21:81:98:6c:2f:cf:54:69:4b:61:
e0:9e:16:77:df:21:ee:e0:d0:76:9b:f6:ce:41:42:
07:7b:ac:0c:fd:e1:df:d3:69:7a:08:86:bc:43:ce:
56:63:7f:cb:25:66:f0:70:32:09:81:1e:9f:5e:ac:
11:4f:88:e8:22:ea:ee:d4:2b:c2:7b:aa:d6:88:67:
09:ed:63:c4:77:05:89:d3:07:ec:37:3c:71:15:41:
31:94:ac:4c:6a:5b:7f:5a:2c:4d:75:c8:18:37:5a:
0e:70:bc:c4:00:83:f8:e2:ba:8c:f4:3f:f5:62:89:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:81:EA:C6:AE:99:3F:9F:05:DE:FB:23:C2:9B:E5:45:01:2E:FF
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:c2:cc:e3:bc:59:6c:46:36:c9:e4:97:3d:d1:cb:3a:86:1e:
c0:ac:c5:17:4a:88:a8:12:45:23:d8:87:87:da:31:4b:f7:20:
e8:75:e0:25:63:5d:8f:83:06:ab:c0:05:68:ae:6c:36:55:e2:
44:7e:bb:8d:34:9a:fe:69:2b:ca:af:73:aa:4a:49:da:df:13:
82:74:6e:5b:ff:40:31:f0:15:e0:18:ee:5e:b8:dd:35:fd:d8:
20:52:78:6a:0b:c1:e8:ed:d6:fe:40:dc:03:20:34:2e:60:51:
02:cc:fb:28:c3:4f:ff:0e:7c:89:f7:39:d9:4e:ee:5f:a6:50:
dc:c1:f6:17:e6:0b:07:50:2f:8e:6b:33:b4:98:33:bc:2b:99:
c0:9b:7e:48:ab:64:ee:de:1e:53:ae:56:23:fa:4e:a2:56:d0:
cb:98:16:eb:b1:3c:da:23:20:3d:77:1e:7c:1b:23:6e:8b:b8:
74:ff:36:92:aa:68:ee:36:cf:a8:3f:fc:4c:68:f4:0d:ae:45:
3c:c9:e6:91:fe:10:f5:dd:b8:4c:31:6c:1c:b5:7c:0d:46:4c:
e3:76:2c:c9:71:e9:59:34:e0:b3:6b:3d:26:58:a0:8f:b4:2b:
98:97:8a:97:bc:01:78:c6:5d:8a:31:ce:ae:1d:69:1b:70:3a:
1f:46:b3:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:04:21 2025 by rpki-client