
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
File: 4XoaYiSN-HkTPAc61WKtA6K5L9w.mft (raw, json)
Hash identifier: GDQ9eNYAGIrzlfflzY1c22ThYgYSVLd8ML5UUz+HyYg=
Subject key identifier: F0:83:B0:A0:21:73:40:59:AF:06:D7:20:EA:41:5F:23:1B:7C:D5:93
Authority key identifier: E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
Certificate issuer: /CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Certificate serial: 0199FBEB35DD1A1B9750D33D8C3F37CCF9A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
Manifest number: 0949
Signing time: Sun 19 Oct 2025 10:01:59 +0000
Manifest this update: Sun 19 Oct 2025 10:01:59 +0000
Manifest next update: Mon 20 Oct 2025 10:01:59 +0000
Files and hashes: 1: 4XoaYiSN-HkTPAc61WKtA6K5L9w.crl (hash: ioropeZb1KR0kx7fxCHUzg15DXySpmU4/IzdwnBhQXI=)
2: _ecSdeBMKXEKm7Pk8dXVwJd7vU0.roa (hash: CVsEd1l4ktAB6C0fXHQFN4p7fWEDkI6je8kKrze6YQo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:35:dd:1a:1b:97:50:d3:3d:8c:3f:37:cc:f9:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17a1a62248df879133c073ad562ad03a2b92fdc
Validity
Not Before: Oct 19 10:01:59 2025 GMT
Not After : Oct 20 10:01:59 2025 GMT
Subject: CN=f083b0a021734059af06d720ea415f231b7cd593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:45:34:a5:69:2a:56:59:45:46:53:fe:91:
55:b0:51:66:86:20:34:fc:6c:29:d6:34:12:56:25:
ed:40:38:a5:e7:29:9f:89:3d:bd:4e:20:4c:19:41:
0e:9f:f4:ef:db:bb:28:c5:51:6a:64:28:a9:11:fd:
15:2e:dc:4e:fb:cf:46:44:f1:27:ba:e7:79:cf:d7:
07:ef:79:0b:f8:ce:56:8a:11:49:a7:3a:98:70:89:
f2:47:fd:4d:82:28:14:03:71:5d:cb:a6:e7:9c:f2:
e6:ba:02:c7:79:63:62:2b:ac:3c:58:aa:c3:e7:c5:
bc:49:25:3c:77:63:d2:78:2a:34:3f:f0:67:4a:e8:
79:2e:fa:2d:52:58:e6:e7:be:12:4f:84:15:6e:4e:
5f:3f:21:cb:2c:bf:68:0c:fc:08:27:3d:be:24:d3:
cc:25:c5:8f:f3:26:b8:d6:92:2e:6c:2d:81:14:b9:
68:6a:c7:02:a4:6e:0f:7a:97:08:f2:8f:c9:7a:ac:
71:c0:ea:e3:fc:70:74:e9:ef:e2:53:71:d1:38:67:
d7:27:91:01:15:0f:ed:8e:64:18:2a:f1:ae:b3:ac:
be:6c:26:06:4d:b6:40:f9:8b:e0:7f:ef:4f:3f:9e:
9d:47:a2:c7:eb:54:ea:43:2f:ab:99:66:87:88:7f:
ee:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:83:B0:A0:21:73:40:59:AF:06:D7:20:EA:41:5F:23:1B:7C:D5:93
X509v3 Authority Key Identifier:
keyid:E1:7A:1A:62:24:8D:F8:79:13:3C:07:3A:D5:62:AD:03:A2:B9:2F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XoaYiSN-HkTPAc61WKtA6K5L9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/130fff-97e3-4ac0-bdcd-5fdc87e6d2a0/1/4XoaYiSN-HkTPAc61WKtA6K5L9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:19:10:52:68:e2:89:7a:18:ab:42:8a:58:44:a6:66:04:db:
1d:46:f8:e2:53:38:96:a0:09:ce:32:be:dd:58:ea:f7:3e:6c:
d2:9f:dd:7e:83:3f:e0:dc:94:d4:ac:b3:8a:d8:19:38:58:f6:
b4:70:c7:56:3d:e3:87:30:87:ca:33:75:4b:78:27:ee:9d:01:
8c:5a:b5:96:6e:bb:04:22:4e:f0:dd:24:42:19:83:4d:7a:fc:
83:b3:61:f4:fc:49:65:ec:db:1d:bd:e8:6e:81:3d:ad:8e:2f:
e4:e7:60:29:0f:5d:f9:91:7e:5a:cf:47:62:81:50:51:d6:aa:
61:17:51:d4:c2:76:6c:87:2b:b4:ad:c1:08:24:e4:eb:01:5c:
c1:ab:ce:5e:b7:6b:21:51:fc:2b:5d:55:4e:27:4c:2f:b0:32:
06:8a:23:a7:ed:df:1f:1b:d8:59:f5:8d:ad:cb:25:e4:de:b6:
5b:29:88:56:f0:82:72:22:e4:85:a1:09:a4:00:0a:fb:2a:9e:
7e:f4:fe:e8:fa:68:16:aa:ee:58:a4:99:aa:b7:29:35:a5:dd:
9b:90:eb:25:56:73:b7:e3:c2:13:c6:5c:c9:d3:a1:b4:d2:20:
08:7f:d3:88:a6:32:cb:1e:ac:0d:d5:d4:eb:c5:fb:71:1d:15:
76:31:90:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:28 2025 by rpki-client