Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
File: 4_cHBvbAz72cc6fz2DAjJApC9Q0.mft (raw, json)
Hash identifier: Z1rtJkWNiNXZ9EJTuLNxev8QkDoj/51yz7vm5WQA5q8=
Subject key identifier: EA:88:CB:A6:9A:BA:C9:C0:23:68:AB:36:B3:91:2E:9B:CB:8B:1D:B0
Authority key identifier: E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
Certificate issuer: /CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Certificate serial: 0199FE4736E174B722DF2BEEB52D94A54DEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
Manifest number: 0DF1
Signing time: Sun 19 Oct 2025 21:01:43 +0000
Manifest this update: Sun 19 Oct 2025 21:01:43 +0000
Manifest next update: Mon 20 Oct 2025 21:01:43 +0000
Files and hashes: 1: 4_cHBvbAz72cc6fz2DAjJApC9Q0.crl (hash: lWw0vareWUfyiCgkiMptcPLD5f6lmgOeyheLmgrBLEM=)
2: JZBToS-O_vrT2aeKBSNggNB5se0.roa (hash: D8kzrex63NBxCoEgyWN4HyqVj2eRzOdT3Da1FU0u+nI=)
3: cKLdHjbMHa9DWXygLYK3fJRjYqw.roa (hash: aXunewdhx0tio/kXThZoUaubUGfQctWD4RTkIiazOVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:36:e1:74:b7:22:df:2b:ee:b5:2d:94:a5:4d:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f70706f6c0cfbd9c73a7f3d83023240a42f50d
Validity
Not Before: Oct 19 21:01:43 2025 GMT
Not After : Oct 20 21:01:43 2025 GMT
Subject: CN=ea88cba69abac9c02368ab36b3912e9bcb8b1db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8c:7d:15:ba:dc:03:1c:cb:8d:9a:c4:1d:20:
c9:69:2c:fe:5f:64:e1:4d:7b:b1:83:fd:0b:97:6b:
07:0b:6d:d7:6c:c9:a7:15:33:9b:27:18:16:18:89:
7c:c2:53:b7:ce:60:74:b6:6f:bf:25:b2:ee:0c:25:
3a:92:6e:aa:99:5b:3e:22:9f:c6:30:ba:75:3b:ea:
36:ed:d0:48:4e:4e:78:31:46:55:2d:4e:46:26:79:
a5:9d:57:d5:30:36:34:c4:9f:e3:cf:54:ba:c1:94:
ed:5a:25:fa:75:44:7f:a0:6e:3a:ce:27:26:56:ca:
a4:2d:28:42:d2:be:c0:6b:65:56:48:70:b7:2a:e5:
5e:f0:f4:ed:e0:36:cd:e1:48:f2:d9:7f:0a:fd:bf:
5f:ac:f7:ca:1e:ad:84:0c:49:73:a8:b1:be:db:96:
b8:3d:bb:fb:47:0c:19:6a:f3:ce:b6:eb:8a:27:23:
c1:05:98:0a:fc:a6:8e:1a:84:e9:99:c8:03:88:43:
3d:06:21:92:05:20:15:76:39:1d:b6:8e:3f:b9:1d:
49:f0:60:5e:59:10:8c:36:8d:58:c9:ee:25:1e:70:
56:bf:97:f5:08:c7:6a:09:8b:d9:65:de:5f:35:7d:
ea:d5:21:70:72:29:9d:16:b6:e9:0e:82:93:c7:e6:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:88:CB:A6:9A:BA:C9:C0:23:68:AB:36:B3:91:2E:9B:CB:8B:1D:B0
X509v3 Authority Key Identifier:
keyid:E3:F7:07:06:F6:C0:CF:BD:9C:73:A7:F3:D8:30:23:24:0A:42:F5:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_cHBvbAz72cc6fz2DAjJApC9Q0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/286d47-6434-41bd-9aa2-09ff79308bbe/1/4_cHBvbAz72cc6fz2DAjJApC9Q0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:29:22:80:1d:6d:9a:f5:51:f4:70:e8:1b:d6:21:3d:e2:2a:
5d:0d:73:ff:67:a7:6c:eb:9a:5e:6a:2f:dd:d8:3d:8f:00:4d:
0c:cc:e8:ec:84:9a:e2:0a:25:19:fb:16:52:b9:d2:6f:c9:f5:
52:56:9a:da:ef:79:9b:0c:be:08:a9:bf:6e:49:64:dc:82:e5:
8a:2c:f6:20:a6:c7:58:a1:56:6f:5e:d1:61:f9:66:72:eb:e2:
8c:a6:5e:b2:37:6a:33:66:cc:78:35:97:be:be:67:b8:6a:e8:
fe:ab:56:98:e1:bb:aa:ea:29:05:af:b8:94:76:f3:ca:1b:c8:
64:3d:04:d4:8c:87:14:16:04:27:e3:78:73:7d:0a:4e:18:ee:
73:c2:0f:37:81:b1:75:04:53:b9:ee:90:b5:94:85:b2:d6:94:
0f:fe:c1:b4:da:28:3e:4a:0a:bc:10:0c:82:ae:8f:9c:77:2d:
5b:50:3f:e6:c2:c2:30:ee:62:00:fa:12:95:e6:19:0f:76:f6:
ff:37:ea:0b:c4:dd:77:e3:d2:a4:33:4d:3d:87:6d:48:dc:f9:
18:3b:6e:a9:96:42:ea:01:51:f6:84:79:43:be:a2:0b:7b:9b:
b6:79:48:7d:53:b5:f9:8e:45:e7:72:c3:eb:d0:3e:f9:3c:e4:
fb:bd:3b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:42 2025 by rpki-client