Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: eyly2GnWRgS2sW4rWD9xt/hjrCyFsd2e7jh3COepak0=
Subject key identifier: AA:BC:6D:D2:04:0B:E1:A5:CE:DB:DA:12:3E:5E:FC:0E:59:92:7E:50
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 0199FBEB5BDE5101463DADB39A28549C8AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: 75TQyr5FCn2tvnv1JaIunj1NDzNTENph7swVOAg3FPk=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5b:de:51:01:46:3d:ad:b3:9a:28:54:9c:8a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=aabc6dd2040be1a5cedbda123e5efc0e59927e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b1:29:fd:d2:91:3b:be:af:a2:94:aa:9a:71:
63:a4:f7:15:84:82:80:c6:43:c1:66:ea:12:76:9d:
49:11:79:34:68:3c:e3:f6:09:fc:ad:ad:f2:53:6b:
0b:3b:dc:f2:86:b9:e3:38:fc:44:a9:e7:a4:e2:5f:
0e:53:2c:dd:ff:4d:e2:53:89:7b:a9:fc:6c:a7:8d:
9a:d5:61:45:38:e2:86:ce:95:7a:8a:cf:25:86:80:
9a:b9:ea:5e:15:d7:97:cc:23:55:8f:cf:93:01:c4:
ee:cd:e2:c3:30:a2:9e:d6:5a:42:3d:89:0f:d1:f1:
b0:55:9d:dc:90:ac:3d:41:58:f6:14:ac:d2:52:e5:
11:3d:f1:c4:53:3b:31:b2:34:ba:53:91:5f:00:0f:
ae:1f:7e:ad:6a:5d:57:4c:cf:64:f9:9e:19:d3:89:
55:30:f5:53:a6:66:1e:87:cb:ab:35:2e:2b:fb:5c:
5a:5e:28:19:75:94:de:a4:a1:99:b4:88:0f:c4:52:
64:c2:73:93:2f:fe:c7:65:e1:db:78:35:f5:e2:4f:
a4:4c:d1:64:8e:ff:af:9f:ac:a9:40:0d:1f:9e:94:
11:e5:a8:53:b6:a5:1d:35:df:28:5c:89:bb:98:50:
d4:ca:72:00:4e:fc:fc:5b:f6:ec:4c:fc:87:a9:2d:
d9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BC:6D:D2:04:0B:E1:A5:CE:DB:DA:12:3E:5E:FC:0E:59:92:7E:50
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:42:ec:a0:7f:5f:bd:96:87:16:55:9b:74:b9:8d:b6:0a:08:
42:07:88:78:f4:33:7c:82:a3:6a:ba:01:48:f4:ec:76:d9:ee:
94:03:c1:f4:77:c3:5c:a5:b8:58:7d:b0:5d:ad:24:4c:11:c1:
9a:1f:01:bf:80:76:ba:a5:f6:16:37:89:3d:3e:82:4f:31:01:
ad:e1:2b:9e:b2:2a:94:38:2e:09:d5:a8:24:26:71:81:a1:ab:
15:52:a5:8a:0f:c2:5c:6a:7c:28:6b:4a:b6:a3:15:4f:36:5d:
f1:d4:bc:52:56:8f:cd:81:3f:aa:a9:2b:b5:3e:b7:32:f5:94:
e0:09:1e:15:79:91:2f:c5:f3:16:c0:3c:b0:73:a7:41:a1:30:
48:74:74:c5:1c:f7:b0:83:f8:96:c1:a1:2f:f9:5c:d6:b9:9e:
ff:00:a8:0b:a1:cd:44:a7:1a:cd:d8:90:d8:f5:e6:9a:4c:7d:
91:7c:2d:ae:78:14:2f:03:e2:56:b8:70:f6:73:09:86:74:8a:
6f:93:05:12:f3:20:51:81:56:bd:82:5e:76:46:c3:eb:c3:8c:
12:55:13:89:59:73:8c:b5:df:dd:f4:ae:7d:34:fd:be:ef:9a:
f7:55:66:bb:47:03:47:3c:36:48:ff:74:25:7f:83:27:c6:7c:
76:d1:a4:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:31:32 2025 by rpki-client