Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
File: s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft (raw, json)
Hash identifier: ZWCM9D0cimc/66iGXoQPX7MREWiXdSkYajix91Wf238=
Subject key identifier: 60:90:1A:DB:E7:77:57:EF:ED:B9:3B:3A:36:49:C5:77:02:BD:F0:62
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 0199FE0FF9856C5DD6856BADF720E124092A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
Manifest number: 0A6C
Signing time: Sun 19 Oct 2025 20:01:23 +0000
Manifest this update: Sun 19 Oct 2025 20:01:23 +0000
Manifest next update: Mon 20 Oct 2025 20:01:23 +0000
Files and hashes: 1: IcIyZXTtvGCVT7kmzm3an6XI4Ds.roa (hash: 9+rlboX5YqLY2xGwqsRBQUwcIF0ZyOqFrf8SvNh+rfQ=)
2: s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl (hash: SkS/mNQFM0H8jaTJBP810hx5cHa5wE/SFKSZWLHO7X8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:0f:f9:85:6c:5d:d6:85:6b:ad:f7:20:e1:24:09:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Oct 19 20:01:23 2025 GMT
Not After : Oct 20 20:01:23 2025 GMT
Subject: CN=60901adbe77757efedb93b3a3649c57702bdf062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1b:10:0d:67:a8:15:f4:c1:57:e0:83:2a:ef:
78:aa:fb:8b:cc:04:0b:d4:08:ad:a3:15:f4:f7:d9:
5e:1b:20:bf:18:2a:01:86:d3:da:ba:c2:d3:69:83:
47:1b:0e:dd:12:2a:51:78:66:f9:17:5e:e8:f8:56:
f0:6a:fd:f4:4a:2e:68:4b:11:ad:5a:36:0b:f7:5e:
bd:7e:e2:36:d2:45:04:f9:f7:a5:98:9c:a0:f3:3e:
b1:fb:93:59:5c:d9:e7:a0:d7:7f:3c:29:44:05:b8:
93:b0:1b:ac:0b:c4:71:19:b9:a7:87:28:18:67:56:
54:61:35:a8:39:51:36:36:13:d3:57:b2:5b:a1:8c:
d1:8d:b2:69:65:63:8b:96:f1:5a:40:9d:6e:2b:d7:
cf:ae:a5:47:70:84:03:c8:5e:92:48:b7:b2:b3:0e:
6e:d0:07:67:91:5a:77:3b:a7:23:d0:a6:86:90:63:
5c:a3:b4:69:f5:81:d2:ed:f3:06:00:81:f2:d8:22:
46:ba:cf:d9:60:af:bf:72:72:f9:25:b2:63:4b:81:
d9:ff:a9:e2:ca:07:3b:65:36:cd:b1:ce:41:33:42:
38:3e:0f:f3:9f:28:f9:c8:c2:86:0c:5e:5e:87:0d:
fa:ca:fe:ad:7d:48:21:5b:be:28:9e:1e:4c:b5:eb:
2c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:1A:DB:E7:77:57:EF:ED:B9:3B:3A:36:49:C5:77:02:BD:F0:62
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e4:e5:ca:3a:94:19:5c:73:7a:1e:55:0b:e6:49:62:59:76:
db:41:e0:29:9b:94:82:b5:ec:16:e8:2d:45:60:0b:eb:dd:8a:
45:a9:71:a2:fe:91:a0:25:b0:30:3d:2b:4c:46:50:21:47:f3:
b0:99:c0:01:eb:f1:f0:fb:59:3d:e2:76:a2:84:23:fc:96:42:
ca:c9:f9:b5:81:80:58:db:38:91:b9:fa:de:76:53:cd:73:ba:
19:a5:87:10:b8:1b:6c:48:2c:66:e2:16:73:3c:2d:50:37:c5:
26:2b:11:9a:0e:84:b0:f2:23:df:70:1f:cb:75:4a:a5:34:b5:
56:d3:b2:2f:59:4a:9d:69:1e:f2:4f:51:b2:93:31:64:3c:1c:
be:fe:c8:bd:83:2b:23:cc:aa:5b:30:44:6d:48:04:de:1b:98:
79:2b:25:14:f5:9e:4c:73:ed:da:2e:54:3e:a1:02:74:b7:1e:
4d:de:91:58:07:9b:e8:85:c2:97:b6:44:18:85:21:7a:46:f8:
64:7f:3f:d0:1c:5e:3b:8d:db:36:d9:88:c0:ef:0a:da:aa:cd:
56:1b:7a:ee:28:3b:63:55:cd:a1:a5:9a:16:3d:20:a7:0f:35:
1f:f1:cf:d8:35:2b:e1:13:0a:eb:08:72:93:43:4a:ad:00:72:
ce:bb:44:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:52:40 2025 by rpki-client