Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: gxhzXZSeJuXX46MXSB8lkABGWRz3ajayS4RDAQPKYfQ=
Subject key identifier: 86:C2:C1:7E:C5:69:AD:2D:77:AE:8A:D2:A1:26:69:8C:9B:05:71:58
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 0199FC21A67DD3D8813454EC06A5ECB4AC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 14FD
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: CqWTHHDo4pKBXdJ2wn5RkAT32+hnWKoBoDKWvci5rEM=)
2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a6:7d:d3:d8:81:34:54:ec:06:a5:ec:b4:ac:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=86c2c17ec569ad2d77ae8ad2a126698c9b057158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ad:a5:21:cf:b0:02:a2:51:aa:5a:e9:27:c7:
61:2a:3d:2d:80:dd:a4:c6:d4:e9:fd:54:77:36:0d:
e0:a6:74:cf:2e:dc:a7:d1:f9:01:24:a4:d2:68:95:
e6:f3:b0:67:8a:96:8f:ff:bf:91:a8:e1:d0:66:be:
71:e8:53:7e:a8:16:a7:43:18:4d:16:d2:78:3d:c5:
86:c3:3d:6f:04:48:b6:3d:7d:16:bf:f9:96:ca:2e:
a5:dd:fd:70:dc:71:30:5d:76:48:3d:57:ec:79:7f:
5c:92:8b:05:b6:cf:0a:97:fb:e6:f5:35:a7:28:79:
b6:15:48:75:94:d9:f0:c7:44:ca:ad:b4:ef:38:5d:
9a:57:21:57:58:16:25:05:67:24:f7:9e:73:83:7e:
8b:fc:23:81:50:76:a6:86:b7:75:19:19:db:fe:b0:
2c:0c:73:91:de:72:c7:0f:e2:03:a3:fa:32:78:ef:
25:e8:ae:8e:48:61:0c:a8:7a:a4:9c:91:96:99:44:
66:19:cb:10:f5:08:86:cb:95:2d:14:5e:bc:e7:98:
c0:e4:24:40:e2:63:73:86:63:33:6b:d5:08:f0:34:
cf:55:f0:a6:87:1e:b4:ff:c3:30:17:ca:e6:f3:2c:
e6:5a:81:ea:84:3b:05:15:da:ba:65:92:e7:0b:9a:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:C2:C1:7E:C5:69:AD:2D:77:AE:8A:D2:A1:26:69:8C:9B:05:71:58
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d7:f7:76:36:00:e9:31:fe:e7:53:b3:58:91:7c:6e:a8:0b:
6e:50:d8:69:26:2a:ff:20:6d:7d:9f:88:73:6e:c3:11:97:cc:
c4:47:8f:92:aa:1f:81:aa:ab:8f:1a:cf:04:cb:3b:63:d4:94:
0a:43:00:1b:19:2d:54:61:30:04:61:38:2c:c9:c8:e7:42:ad:
53:c7:fd:a7:86:08:81:09:2a:94:ab:6b:03:a9:20:f0:37:20:
df:ce:42:0a:d1:62:bc:8a:3d:e8:71:6e:32:43:b8:6c:c0:a7:
1b:50:ad:b8:2a:fd:23:2f:06:52:27:d9:33:a4:d1:64:d8:04:
c4:3e:0d:16:7a:47:73:15:9e:51:d3:f0:d5:f6:bf:45:2e:21:
d2:a3:9d:09:8c:52:81:53:ee:93:da:d2:47:44:07:ce:fa:ba:
46:c4:c4:33:f8:a8:ec:d5:65:db:1b:9a:b4:99:8e:75:e7:8b:
15:fd:c0:56:e2:a7:db:47:cd:e1:66:21:13:52:ad:df:76:17:
7e:d7:e4:88:f9:3d:96:ff:ba:21:28:19:2d:bf:a8:e4:e9:9f:
13:9e:1b:ef:19:0b:d8:70:8d:fd:2b:b4:7e:09:85:26:0b:fd:
f3:48:98:c3:c1:a4:78:35:69:dd:a4:76:9f:0a:c9:05:10:21:
f0:f6:de:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:43:25 2025 by rpki-client