Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: AlG9j/hL0lkly8+Xo4YjdwstwkRKZTwDnVSqB10ndD8=
Subject key identifier: F8:E9:18:FD:58:FB:76:F0:D5:E0:E3:28:3D:C3:4D:B1:74:A6:A2:9D
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 019A01B5FC5BD8BA1CBCFD3249B8BD0A78CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 16B8
Signing time: Mon 20 Oct 2025 13:01:35 +0000
Manifest this update: Mon 20 Oct 2025 13:01:35 +0000
Manifest next update: Tue 21 Oct 2025 13:01:35 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: B+zehDAclaPMds3UcpMJAjBDlrXPsNMTa8EhIKHogWo=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:fc:5b:d8:ba:1c:bc:fd:32:49:b8:bd:0a:78:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Oct 20 13:01:35 2025 GMT
Not After : Oct 21 13:01:35 2025 GMT
Subject: CN=f8e918fd58fb76f0d5e0e3283dc34db174a6a29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:29:b9:0a:d3:a5:c2:ab:93:50:04:87:2f:
c5:46:8d:40:53:fa:bf:b7:ea:6e:91:1b:a0:79:8e:
98:2f:d2:11:c8:86:ea:e6:a5:17:49:bb:54:6e:24:
0d:cc:27:33:f7:fe:cd:21:28:0a:e0:eb:0c:cd:1b:
49:6a:f9:4f:4f:41:64:55:52:96:11:b9:0d:08:ee:
54:ce:28:58:4d:0c:bc:c4:d9:d5:28:51:31:0f:5c:
ec:4c:be:3d:20:84:8e:c8:f1:c7:ed:6b:16:50:78:
83:09:f8:ae:cd:be:57:91:5a:7c:34:a2:67:aa:a6:
ea:f4:d2:2f:bc:30:6d:e9:05:ec:c3:56:1e:c9:18:
44:33:02:f0:74:df:78:b1:e1:d0:e1:5a:d5:50:57:
a8:4c:06:da:dd:68:5d:ac:ab:24:3c:c0:b1:f2:42:
ea:09:20:6b:17:4b:ba:0a:01:e6:a9:c4:78:ce:ac:
eb:ce:d6:74:19:30:35:de:ae:b4:d0:29:72:bc:c0:
4a:f1:3c:bb:39:18:2b:54:12:cf:57:97:2b:77:d8:
70:05:0f:77:2a:af:50:7d:49:09:0a:1f:86:48:c7:
7d:cf:77:24:68:fe:07:d1:9d:10:70:48:34:49:b8:
a7:9d:23:41:22:af:e0:64:87:26:98:0a:c5:22:47:
01:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E9:18:FD:58:FB:76:F0:D5:E0:E3:28:3D:C3:4D:B1:74:A6:A2:9D
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:14:ff:74:93:c7:cd:40:7e:f9:ed:72:df:10:64:dd:70:0d:
53:ea:4b:5a:96:9b:22:13:55:78:4a:ab:cb:3d:97:01:7b:19:
61:e9:98:ce:2e:a0:f1:9c:6f:43:ce:0e:40:d9:4a:b8:bc:3e:
9e:6a:b8:e2:15:32:cc:69:54:d7:18:3b:bc:14:0c:88:0e:97:
a0:05:da:01:b6:5f:fb:8a:5a:e8:1d:8d:e5:aa:0e:92:11:ee:
79:cc:05:c7:1a:a0:ad:d8:04:aa:57:f8:ea:d7:18:e4:58:8b:
71:4a:47:ca:1f:bf:83:15:e2:73:18:f0:42:65:c1:47:af:ca:
0d:93:0b:0a:c3:90:52:35:72:52:81:cd:a2:cc:6b:0d:4d:78:
c6:a6:1f:92:3d:a2:14:a9:94:f8:9b:08:2e:9e:29:9a:b3:74:
9c:98:1e:03:23:39:df:f2:0f:70:8a:b8:b8:3f:38:a7:96:8f:
24:72:92:6f:ea:c1:c3:d4:09:b0:73:a4:75:6a:33:f3:ee:5e:
1f:c8:3d:d0:e9:b3:06:60:29:21:c3:60:c7:cc:d5:d0:ad:d3:
62:70:08:82:06:e0:0c:1d:ae:53:f5:95:3c:f9:97:be:f1:df:
ef:93:5a:05:eb:ca:e4:5f:e2:80:9e:56:43:24:ba:f4:9e:b7:
20:d1:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:58:36 2025 by rpki-client