Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File: s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier: aMTPlRnAFEhu61gOZU3wSSvRX2hSlL0iiytw2TSRqCY=
Subject key identifier: AE:B2:5F:D0:E3:8A:DF:81:EF:5C:73:6F:B1:FE:88:9E:8F:48:7A:1E
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer: /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial: 0199FC8F6487F9363BC10EAEEE21355D5B5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 13:01:19 +0000
Manifest this update: Sun 19 Oct 2025 13:01:19 +0000
Manifest next update: Mon 20 Oct 2025 13:01:19 +0000
Files and hashes: 1: 5WxXf6dS__Evv8ybNdjAs3Nto-g.roa (hash: y6JQKN1GUMZnwd9TH2DZ03UU+crYCRvw3vTZfmRAIuw=)
2: 8keuoYHRmEN7a8dM4R3KAZIUMn8.roa (hash: cqhsmkY13XgBA/8McBrRobM59idSx8HxeP3LI73UX3s=)
3: _g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa (hash: lCKjV64dwqXs6VagiwwJOVKqACy5VCGM5CrdkZRYvvY=)
4: fMI-jCDaaLsxpmL0Z0hMaMI0pwA.roa (hash: Ft2AV1Fb/Osk91o2uc7E3/mf/b9LB0/k5lu+soQUSmI=)
5: o0jeoBjm6A2tZp_sdpXJQxSFq9g.roa (hash: 0tJFYrvs37c2RcoKNsABjGXFSJGBQds9qdtyJiQGJI4=)
6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: PSheOyfm5s8wpHyzOUVxs3YmfgNQOZsY4gz5ZGZdGcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:64:87:f9:36:3b:c1:0e:ae:ee:21:35:5d:5b:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Validity
Not Before: Oct 19 13:01:19 2025 GMT
Not After : Oct 20 13:01:19 2025 GMT
Subject: CN=aeb25fd0e38adf81ef5c736fb1fe889e8f487a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6b:54:aa:60:bb:db:93:2c:3f:d6:fc:02:77:
48:45:2b:25:18:4e:01:9c:49:0d:66:7e:1c:a6:47:
89:4c:ce:2f:3b:7e:cf:f6:fb:c1:8e:7e:8e:00:35:
4a:34:62:b3:b3:14:b8:67:ca:35:06:f1:a5:93:38:
c5:da:52:19:76:f5:bb:cb:17:cf:b2:62:89:eb:61:
19:95:f9:ec:6a:ab:7a:80:f6:72:3f:31:99:1b:aa:
cb:ae:5d:3a:c2:4f:ed:cb:a3:49:c5:3f:06:e1:6f:
1c:54:b6:b9:8d:a0:32:6e:b2:80:d3:41:69:f4:fa:
13:8b:5b:6c:b1:03:7b:cd:dc:07:28:fd:a2:08:8e:
bd:b4:db:56:ab:ea:e6:c6:f1:88:c6:c5:d9:4e:1e:
c4:8a:eb:68:e6:f8:eb:4f:d1:c8:b6:c3:5a:bd:96:
84:76:ce:35:fc:c9:fa:0a:e6:75:82:7e:79:ba:cd:
b2:5b:d4:6c:bf:94:db:0b:fb:72:d2:31:3d:86:9d:
87:6b:53:c8:5a:f8:97:1f:93:f7:80:2b:1c:2b:18:
73:9f:16:fe:58:15:c4:4a:0b:a9:cd:da:3b:dd:86:
0c:0c:31:dc:2a:21:9e:3a:22:67:76:22:31:73:2d:
ed:60:9d:4d:31:b6:1f:56:06:33:38:e3:4d:29:f5:
66:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B2:5F:D0:E3:8A:DF:81:EF:5C:73:6F:B1:FE:88:9E:8F:48:7A:1E
X509v3 Authority Key Identifier:
keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ee:ba:b3:84:53:cc:14:0a:42:9d:c2:cc:7b:49:22:9e:66:
43:b1:3b:6f:46:75:bf:da:e2:22:9b:34:5c:aa:f4:6f:5d:b4:
46:65:16:50:29:2c:fa:c5:52:c1:78:07:b4:5c:6d:0c:50:80:
5d:1a:a5:01:55:ac:fc:1a:1b:23:15:48:75:a2:0c:b9:5d:a1:
bc:63:a5:ee:72:36:ec:19:b8:bf:70:36:cd:ed:ef:ce:10:ca:
3e:85:50:11:21:28:4a:be:f4:4a:d3:c7:9f:12:03:7c:b9:72:
1a:8b:20:2b:4f:94:66:d2:e4:a1:1b:21:2f:13:31:89:fd:c6:
ec:d3:f4:2e:f6:df:d0:77:5b:b1:a5:04:83:2e:77:b5:84:ad:
8d:2f:5b:c7:d8:75:4e:68:f2:df:92:16:32:a0:22:1c:ea:32:
30:20:44:12:5f:08:1e:ba:a7:0a:93:05:47:78:74:34:9e:1a:
4a:b4:5c:c4:a2:74:78:00:8b:f2:2a:e9:73:94:d3:de:e4:cb:
fa:e2:24:de:95:ed:4a:53:60:08:eb:b0:1b:d2:7e:5e:23:bb:
3e:0b:25:55:5a:b1:4e:f3:f6:36:f4:92:b8:3b:f6:60:15:8b:
f7:79:bb:5a:28:56:73:35:af:3f:22:2b:c7:82:8e:0d:2d:c7:
ce:be:79:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:18 2025 by rpki-client