Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier: VYy/jTEUEPJk0Djxt/kbTlPeopLomm7QoZcNCPZaLs4=
Subject key identifier: 23:4C:57:F2:AF:7D:F3:59:B3:31:B1:D6:77:80:1E:80:30:7B:6B:14
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 0199FCFD5322367BE82F5A18FCE4F102EAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number: 100A
Signing time: Sun 19 Oct 2025 15:01:24 +0000
Manifest this update: Sun 19 Oct 2025 15:01:24 +0000
Manifest next update: Mon 20 Oct 2025 15:01:24 +0000
Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: UbWFKtKQ2cjVTyD2q6dQ/gHHu1j5drERLWSpgkHJmb8=)
2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:53:22:36:7b:e8:2f:5a:18:fc:e4:f1:02:ea:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Oct 19 15:01:24 2025 GMT
Not After : Oct 20 15:01:24 2025 GMT
Subject: CN=234c57f2af7df359b331b1d677801e80307b6b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:25:a7:89:2c:ec:6e:9e:d7:69:6f:d0:1c:
6a:16:90:3b:ee:ea:b6:fc:19:56:09:bd:a6:14:cb:
e1:26:c9:35:88:29:bb:fc:c0:e8:47:7b:2a:a6:be:
13:76:5b:9b:0f:55:dc:e0:fa:c1:f5:dc:5b:cf:ed:
25:c9:c8:54:07:8d:c2:60:7f:0c:46:20:53:15:8e:
0d:a6:cd:6e:6b:85:0c:0b:c0:e1:bf:68:e4:ba:3f:
c9:88:15:8b:d7:44:4b:f0:f3:64:d4:db:5a:60:d5:
95:e1:4b:1d:70:64:8d:d4:60:7a:cf:d9:7b:f6:db:
d8:21:86:19:21:9e:91:f6:b4:40:c8:24:19:0a:90:
8a:f8:6b:ae:32:32:ac:72:ed:4a:f8:36:99:72:28:
ce:74:20:a5:f1:7f:03:95:9c:0b:8b:5f:15:16:6e:
20:9c:ec:92:35:07:33:87:1f:2d:74:38:53:92:ac:
f5:98:fc:7b:a8:a0:bb:58:55:61:8d:e5:36:6f:d0:
82:92:62:46:fd:0f:9d:a2:0a:f8:fe:a2:da:85:1e:
30:d2:97:47:24:db:35:19:6b:1d:8f:ae:98:22:27:
da:4d:ea:1b:d4:4e:22:c2:30:d2:38:20:90:4f:c2:
88:a0:c5:7f:93:23:e4:43:a6:d3:2d:97:27:80:01:
ba:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:4C:57:F2:AF:7D:F3:59:B3:31:B1:D6:77:80:1E:80:30:7B:6B:14
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:64:62:b6:9f:d4:d8:c7:95:1b:a1:f7:2c:b7:30:24:33:83:
84:93:64:a2:62:fd:09:65:9c:55:98:8c:31:b9:3c:37:df:4d:
f9:ea:b8:2d:05:ce:9f:59:d4:e1:70:f6:a3:1d:07:d7:a9:9c:
5a:fc:aa:f7:fa:52:07:f2:98:61:34:70:e7:e6:61:00:e2:a8:
da:6b:04:b4:2c:75:dc:97:e6:22:4d:81:22:8c:1e:aa:df:47:
74:23:42:96:43:14:b0:a7:a8:fa:82:16:0c:e8:87:8d:16:6e:
b3:24:7c:89:a8:26:91:4d:a6:ba:02:1a:11:55:69:e9:fd:ca:
f3:72:4c:ff:6d:30:a1:78:2a:9d:24:a2:b3:b1:0f:8c:c1:2a:
1c:67:73:e3:33:3a:48:3b:da:0e:82:3a:46:43:ac:9b:ea:fe:
c2:47:36:9d:92:24:3b:0f:27:43:e4:4b:04:c5:f1:14:32:e2:
c2:d9:04:15:be:94:bb:b7:e0:d4:f7:65:9f:c6:27:79:fd:7c:
f0:e9:c9:e9:ae:66:1c:44:f8:f7:d4:99:96:aa:0a:ec:55:30:
09:9e:cf:a8:59:ca:66:62:a4:4f:9f:39:ff:6f:9c:d3:6a:bf:
d8:e2:24:2a:2d:fb:5e:c4:6c:bb:4d:4e:f1:eb:94:1b:65:09:
72:d7:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:45:36 2025 by rpki-client