Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
File: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft (raw, json)
Hash identifier: biUN2qnENjowt/CMZxIOdsl81rEmv0dgPmF2DMtnpRk=
Subject key identifier: FF:26:CF:0A:ED:42:9C:9E:F2:68:05:05:F6:CB:D7:33:0F:A6:38:28
Authority key identifier: E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
Certificate issuer: /CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Certificate serial: 0199FCC6C0A9A7F947548F34DD09E53AEB63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
Manifest number: 1434
Signing time: Sun 19 Oct 2025 14:01:47 +0000
Manifest this update: Sun 19 Oct 2025 14:01:47 +0000
Manifest next update: Mon 20 Oct 2025 14:01:47 +0000
Files and hashes: 1: 4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl (hash: thDClcmAC4llFnGDc02f841s8p0k1gX141VXGv4GOcs=)
2: HTMh6RJF_q53kTnEGeTtdGIx040.roa (hash: nzX5ZOpXvf0qMt8FdSECR2favMzFA7ed3+MWJmI8hm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:c0:a9:a7:f9:47:54:8f:34:dd:09:e5:3a:eb:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e21df6a8aaa7041d725285d0dd0e180a649bc213
Validity
Not Before: Oct 19 14:01:47 2025 GMT
Not After : Oct 20 14:01:47 2025 GMT
Subject: CN=ff26cf0aed429c9ef2680505f6cbd7330fa63828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cc:e9:d8:14:7a:98:fa:96:33:81:24:c9:48:
41:cf:83:31:9b:c5:55:6a:27:db:9b:51:c0:3d:5e:
21:41:f4:8c:bd:85:94:91:14:e5:09:0b:da:da:05:
a8:77:a6:39:4f:cb:b4:1d:ca:c4:63:96:52:67:8a:
26:71:f3:e2:8e:ef:09:94:50:45:ba:02:76:a7:50:
f2:98:2e:ac:1c:9e:b5:7b:bb:88:8b:e3:05:77:a6:
e7:5b:25:9f:ef:5e:4f:bc:e9:67:34:55:15:2d:64:
b3:78:ce:dd:a5:c6:bf:2d:ec:38:94:3e:71:92:db:
c1:b1:89:32:bf:9a:8c:56:bc:3d:e4:a7:7e:59:0e:
91:5f:12:74:78:99:ed:45:d7:92:71:fa:80:75:aa:
7b:c7:f8:9d:f3:58:33:9b:e6:ba:8c:f9:61:a4:43:
72:d2:da:ca:ba:bd:c3:c5:36:b9:d4:b0:06:80:84:
03:a2:00:3c:4b:87:b2:57:3c:f6:1b:a8:1e:4f:63:
08:a3:73:84:30:26:9d:8b:ae:69:b3:b1:00:47:f1:
b1:de:a6:08:54:84:7e:a7:b3:41:5f:9a:45:23:02:
81:db:21:ce:35:ee:8d:9b:2f:62:32:96:53:6c:18:
69:0a:f6:bd:de:01:de:47:73:6a:d3:ee:a5:4f:7f:
aa:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:26:CF:0A:ED:42:9C:9E:F2:68:05:05:F6:CB:D7:33:0F:A6:38:28
X509v3 Authority Key Identifier:
keyid:E2:1D:F6:A8:AA:A7:04:1D:72:52:85:D0:DD:0E:18:0A:64:9B:C2:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/69984a-29bf-4d76-9561-62ba3a6884c8/1/4h32qKqnBB1yUoXQ3Q4YCmSbwhM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:67:50:bc:fb:e0:e0:bf:9b:14:31:f5:18:0e:7f:d9:45:d8:
4d:d7:48:00:f1:5f:b3:d3:2f:90:06:89:f0:6b:16:5e:b3:4a:
27:92:aa:84:77:91:c6:35:74:1d:48:c1:b6:8f:17:57:ea:d1:
b3:db:04:ba:8e:b8:d2:b8:f5:04:c8:8d:82:9d:fa:af:ff:e9:
6f:d7:9c:71:98:ae:ac:2e:68:68:6e:17:38:95:0e:c1:23:10:
10:ce:d7:a6:f1:be:c5:53:96:f4:6d:53:46:e0:79:6e:84:e4:
6b:2f:46:c5:48:92:95:de:ee:8a:f2:f2:39:e8:6b:88:6a:aa:
5f:26:58:82:ab:7b:f1:b3:49:ec:94:cc:52:d5:63:46:c0:f6:
bb:3b:33:53:a5:0f:ce:cd:e7:a6:02:a2:da:8d:67:a3:83:98:
d6:71:75:cf:3b:04:25:17:9b:19:a1:4b:50:ce:e7:8a:9f:09:
0e:57:66:73:c4:ad:51:58:8a:30:24:91:d5:f7:81:34:c4:fb:
09:53:7e:4e:0d:b1:ae:50:f4:fa:33:e7:c7:8e:e0:03:3c:82:
c6:cd:10:92:01:f7:dd:ff:f6:57:0e:d5:24:1a:c7:7b:b2:c8:
d5:40:d2:b7:59:2a:8a:f0:11:33:9f:d0:ce:89:0a:fb:8b:cb:
90:be:88:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:44 2025 by rpki-client