Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: OMMVEt/L3QBdpgffTl6DiCOvbFuAANBInRPSzpqbZIo=
Subject key identifier: 89:3D:E0:BD:22:E5:0C:1B:A7:37:B9:79:E7:7E:22:54:63:77:A8:C2
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 0199FFC772BF2F7AE23B9908E9AC50689097
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 16B7
Signing time: Mon 20 Oct 2025 04:01:25 +0000
Manifest this update: Mon 20 Oct 2025 04:01:25 +0000
Manifest next update: Tue 21 Oct 2025 04:01:25 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: 9bskGuz9Fjxa14IkLpkbzvFBVhbV9QAjbr0RH1VGwfE=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:72:bf:2f:7a:e2:3b:99:08:e9:ac:50:68:90:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Oct 20 04:01:25 2025 GMT
Not After : Oct 21 04:01:25 2025 GMT
Subject: CN=893de0bd22e50c1ba737b979e77e22546377a8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:0a:bb:58:7f:70:75:a8:da:75:16:73:8d:
41:aa:58:66:81:87:93:26:d9:ee:84:be:bd:b6:c0:
63:f8:8d:fb:be:fd:4f:b9:ac:57:01:ca:2f:a7:c3:
27:03:8a:8f:a8:16:5a:bc:4f:1c:16:e3:66:0e:71:
43:9d:50:e7:91:1d:59:79:59:77:37:8a:4f:8e:5c:
9b:d4:4c:c2:a8:2a:3f:1b:e1:a1:35:cb:ee:6c:90:
b1:35:d6:37:d3:d9:04:8e:4c:f0:97:d7:14:a6:2f:
72:db:d7:4e:bf:30:99:f2:dc:ef:e3:a6:4b:16:55:
3f:d8:6b:3a:67:e7:75:89:8c:5a:a3:b9:4e:91:fe:
2a:55:16:fc:39:70:2d:db:56:a9:49:b1:28:3a:89:
c2:00:73:87:f2:38:13:49:8c:39:2f:78:a5:30:47:
06:56:e9:20:2f:d5:de:39:16:f8:02:33:c6:22:f2:
ee:81:02:f5:01:b3:ee:77:87:9c:97:73:fe:6b:45:
b4:70:3d:ce:1f:fe:87:9e:36:84:ae:0d:e7:b8:4f:
d4:1e:50:8c:6f:31:ae:a4:78:d7:e2:18:2d:4c:34:
ea:13:9d:5e:60:92:18:87:be:d8:85:da:34:dc:60:
2c:7d:d8:a2:69:1b:19:3e:74:27:ce:ba:c7:63:e7:
27:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:3D:E0:BD:22:E5:0C:1B:A7:37:B9:79:E7:7E:22:54:63:77:A8:C2
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:8e:4a:db:a8:b9:31:4e:65:38:a7:a9:23:e4:44:d6:b4:61:
a2:ac:b4:ce:30:a7:3a:8a:c9:e8:21:ab:1a:6b:eb:78:1c:3d:
3e:e2:fd:63:9f:f5:c5:c4:2e:8c:b2:12:d6:b5:f6:5d:34:57:
89:f7:1c:87:6d:20:1c:8e:ec:d2:94:d7:b0:31:b6:af:c8:30:
d2:21:9f:59:6b:1f:48:1c:ef:e3:03:fd:d9:33:e4:0b:b9:07:
95:52:c4:02:01:f0:0a:4a:a6:44:02:72:77:8c:3e:8c:33:fd:
1f:c7:44:58:2a:6c:36:cd:34:b1:5e:cb:8c:f5:ef:13:c6:f8:
2f:50:5c:cf:d5:cc:7b:2a:ae:75:d5:8b:b5:18:c5:be:6e:11:
56:26:56:0a:fb:da:99:58:b6:74:e4:84:fa:4e:e2:71:2f:70:
fb:5d:99:f2:6d:3b:1b:a3:e6:79:a0:24:c8:4c:06:a0:25:22:
f5:95:db:5f:1b:77:2d:c0:16:74:bb:ca:93:6e:51:a7:07:b3:
6f:2b:59:03:5e:11:5b:6f:7c:c0:9e:a4:cd:13:7d:b4:d6:47:
41:47:e6:9e:8f:14:01:e1:cc:2d:f0:db:d0:2a:f4:b3:8f:37:
33:b9:a2:9b:69:73:23:e0:eb:69:93:0b:eb:41:be:6f:83:b3:
82:63:5d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:41:08 2025 by rpki-client