
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
File: x43nqz8ef8G8o1IOrP4OGn5qVf4.mft (raw, json)
Hash identifier: vFPuBbKdVjt13WQ7SuIpNDBxcwMZAlDjIhNMd8L5z9g=
Subject key identifier: 94:A9:E2:8D:31:A7:5B:36:D6:9C:19:84:89:6F:CA:03:03:23:F6:6E
Authority key identifier: C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
Certificate issuer: /CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Certificate serial: 019A0222A974DB5FD5969D81256E138EDB93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 15:00:17 +0000
Manifest this update: Mon 20 Oct 2025 15:00:17 +0000
Manifest next update: Tue 21 Oct 2025 15:00:17 +0000
Files and hashes: 1: g8YwGSQJtphdygepP_zngeWXvFU.roa (hash: MN0YFZEniJxqcHz8F+CefbhmwKUatb2Z2T+SIRMCHgk=)
2: x43nqz8ef8G8o1IOrP4OGn5qVf4.crl (hash: 9/FljKr6bGJgMugrW5gnfx3kCGAKLaGhl6nacqdAlQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:a9:74:db:5f:d5:96:9d:81:25:6e:13:8e:db:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c78de7ab3f1e7fc1bca3520eacfe0e1a7e6a55fe
Validity
Not Before: Oct 20 15:00:17 2025 GMT
Not After : Oct 21 15:00:17 2025 GMT
Subject: CN=94a9e28d31a75b36d69c1984896fca030323f66e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e9:8c:01:95:62:8c:2c:0e:07:bd:96:90:b4:
71:e3:85:c6:3a:57:86:d7:68:c2:65:d0:d7:6c:be:
66:28:b7:8b:34:98:79:7e:94:d4:f1:c7:68:78:86:
76:7f:d3:29:f0:25:12:75:b3:fe:1f:3e:30:31:e5:
04:cd:52:31:9a:09:70:13:58:d5:55:7d:06:a0:5a:
a1:92:56:83:9f:c9:fd:a0:04:d3:d9:2a:20:99:ad:
bc:df:aa:c6:b6:29:6b:71:26:83:35:34:be:70:f9:
ef:9d:b8:0a:86:ed:42:0b:9e:4f:9f:0e:3d:5e:c9:
33:3e:3e:16:5e:5d:58:2f:9d:b7:39:db:0d:53:d4:
b2:e3:28:32:91:4b:b5:38:76:ab:ec:60:a7:61:1e:
36:4e:7a:c5:d7:22:8e:63:f8:70:b0:65:73:89:de:
13:63:b1:f2:e3:49:b6:77:4a:08:de:5c:e6:98:ed:
28:4e:30:19:ef:f0:4d:43:d8:30:78:9f:65:62:02:
81:e5:60:4e:55:05:18:93:9a:e2:7d:81:89:02:e5:
80:2d:d3:b6:07:02:c0:7e:2a:10:ab:09:7f:5e:5c:
e0:5e:f7:73:4e:ff:e5:97:b7:64:49:67:2e:25:07:
91:3f:95:9e:e2:f3:58:11:1f:27:01:93:fe:47:31:
b2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:A9:E2:8D:31:A7:5B:36:D6:9C:19:84:89:6F:CA:03:03:23:F6:6E
X509v3 Authority Key Identifier:
keyid:C7:8D:E7:AB:3F:1E:7F:C1:BC:A3:52:0E:AC:FE:0E:1A:7E:6A:55:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x43nqz8ef8G8o1IOrP4OGn5qVf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/353338-9efb-40bd-98a9-a7bf9e50af0b/1/x43nqz8ef8G8o1IOrP4OGn5qVf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a8:75:0f:34:23:c4:7a:6a:1e:d4:12:fa:16:55:a5:0b:d0:
0a:d4:cb:a7:b7:31:88:d0:68:73:cd:01:98:a4:7b:03:af:98:
ec:f1:70:ca:87:e7:3d:68:8c:fb:e0:30:54:c8:c0:a2:0c:ec:
48:f6:d7:f1:bb:b9:e8:64:06:e6:67:9d:42:51:df:87:5c:a5:
b4:f9:6c:5b:8a:14:22:46:ac:3c:13:73:a5:50:eb:80:21:2c:
24:61:a0:5f:cd:ab:d3:62:b3:48:20:29:0f:f2:53:82:c6:50:
5f:6b:75:7b:ae:87:ec:69:52:8d:41:ef:d6:ca:00:cc:7a:b4:
49:c8:15:6c:cb:b9:ab:e5:ba:06:df:65:14:d0:58:60:7c:00:
a4:59:4e:82:e3:e4:d4:0e:13:f4:26:57:0e:cd:da:22:6e:c1:
56:0c:e4:87:f0:be:8f:da:b4:16:75:85:86:f6:6e:e7:22:eb:
52:32:0d:ae:34:ee:40:16:ab:c2:4e:6f:1c:a2:bc:71:74:52:
8c:f5:42:d3:81:6d:02:70:cd:17:65:f1:37:e1:cf:61:bb:75:
7f:d1:18:6e:5b:6e:0a:2c:82:ec:5d:d5:5c:04:56:ab:fc:fc:
6b:a4:95:ee:76:d7:88:2c:02:ce:ca:93:2d:85:6e:69:f0:91:
ef:1a:32:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:32:08 2025 by rpki-client