Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: 636AI2UOO3HdnsoXWDEOXI3QnKgkNJPYvpzTcu2OhoI=
Subject key identifier: 3F:D6:56:94:BC:16:5B:AC:72:DA:92:CF:61:20:3C:2E:F6:D7:3F:D5
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 0199FAD843292B0F1C62D3BA5738D12CFB58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 0676
Signing time: Sun 19 Oct 2025 05:01:40 +0000
Manifest this update: Sun 19 Oct 2025 05:01:40 +0000
Manifest next update: Mon 20 Oct 2025 05:01:40 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: 61MyT4V7/IwDjg1FPdll5AdK2KwxGnO3synPAlqU2Ik=)
2: LbRLSCZgNjKQ4NVrLzk4GRKtgYY.roa (hash: /kAcDTHsuQOYOXcr8j8Fv03Ys7En4o0Y+S9NpXp7/Jw=)
3: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d8:43:29:2b:0f:1c:62:d3:ba:57:38:d1:2c:fb:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Oct 19 05:01:40 2025 GMT
Not After : Oct 20 05:01:40 2025 GMT
Subject: CN=3fd65694bc165bac72da92cf61203c2ef6d73fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:3d:40:10:03:4c:11:e6:97:0b:f4:43:ae:
07:86:69:3b:c1:3b:b2:ac:48:e4:fb:d0:7c:3e:b6:
0c:5a:64:f5:3a:d1:e8:23:7d:04:ee:e0:2c:f1:b5:
35:1e:46:c6:46:62:d2:02:cf:ae:8f:7f:e6:04:23:
eb:90:ca:6a:5e:ce:e2:e6:43:af:81:b3:68:6a:c0:
31:de:fa:68:83:35:78:2b:ef:1d:2e:52:45:dc:80:
e4:23:75:5d:d4:f5:76:bd:d2:ea:0c:17:78:f3:53:
ce:ef:ec:db:63:00:98:d6:d2:e0:0a:e4:c2:41:dc:
8c:d4:11:a9:5e:fa:d5:59:04:e8:75:f4:a7:95:e9:
2e:11:04:aa:7d:0d:21:04:81:8a:97:b5:ce:cd:b4:
0c:ec:21:6d:d5:f6:03:f4:9e:89:12:a5:52:04:76:
b6:ca:2d:8c:c2:31:09:e2:06:35:fc:fd:89:cd:b0:
fb:fc:b5:48:e3:e5:34:b2:ee:7d:37:fd:e6:93:66:
dc:f1:13:21:f1:03:c8:08:12:05:fb:cc:23:d1:fa:
f2:ae:59:ec:93:32:7a:42:c5:61:ad:00:c9:a3:7c:
f8:2f:f3:3f:5c:f6:6f:42:b3:3a:47:78:ea:80:4a:
e8:01:6b:89:ae:80:38:d4:c7:e8:7e:2a:25:8c:43:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D6:56:94:BC:16:5B:AC:72:DA:92:CF:61:20:3C:2E:F6:D7:3F:D5
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e1:da:14:db:f0:4f:bc:28:3c:25:2d:c4:a4:cf:f0:13:29:
10:4c:a0:80:22:64:b7:29:8c:6c:c5:c9:8d:19:78:0e:73:e4:
35:f9:c4:48:04:88:d2:9d:75:31:18:ef:4e:5b:38:3d:24:c3:
39:e3:2d:40:65:76:0a:db:af:88:3c:ce:f4:a6:20:d8:d1:8a:
c1:04:fe:99:3e:85:52:b8:a1:c9:b2:ad:8c:63:68:21:af:01:
7d:6b:08:bc:42:47:2b:56:4f:07:3e:6c:a2:31:f2:0d:83:a7:
a1:ea:ea:a5:03:1d:67:8e:40:4e:a0:9d:a6:0e:e2:1a:21:61:
87:d3:07:0b:bf:39:f2:4f:17:85:e5:9b:3a:b3:07:90:71:e2:
29:7c:e4:81:76:aa:d2:d8:ab:c3:c4:95:b2:e4:2d:1e:ff:89:
b5:53:eb:d8:f3:f1:ff:fb:61:d1:5a:f9:7d:5a:26:6e:95:e5:
c6:8a:cb:ca:4e:e9:11:da:2c:e8:6b:7c:f2:a7:b4:48:13:a2:
f5:47:2e:21:bd:ae:18:3a:bc:4d:b2:0b:9f:1f:0b:c7:85:76:
00:b5:c1:a0:dc:18:65:25:7a:46:9a:8a:2d:62:55:70:3f:f0:
da:0a:f3:0d:8d:34:76:0b:dd:38:f2:98:ea:3a:68:bb:5a:6e:
9f:08:5b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:07 2025 by rpki-client