Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
File: O4_iRlhDAxt3i7jYt701oJT8z0g.mft (raw, json)
Hash identifier: eGtQWS/zQRRLvfiKIsZozE1uboavJsn/bNUKAjdXWWM=
Subject key identifier: 4B:34:5E:BF:6F:10:93:6C:9F:F7:60:85:09:49:0A:86:5B:41:B8:2D
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 0199FA69E9316F09E4397947344D618719F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
Manifest number: 1148
Signing time: Sun 19 Oct 2025 03:01:08 +0000
Manifest this update: Sun 19 Oct 2025 03:01:08 +0000
Manifest next update: Mon 20 Oct 2025 03:01:08 +0000
Files and hashes: 1: 1-Ls4q-ChZ0ZaOTjP1nQ6tqwVR7w.roa (hash: YXXZf8p+XXstJczN+ymTH8ANFDcZF/VCsvvC/wyu2tg=)
2: 3K66fkLdFIhZuPgVnT8dBkSPcIY.roa (hash: jrto9CYh3lf5yVyFB1TxobdXxUZh+GOGoL+a0rSxI8I=)
3: AF6uSBXXjV8m6D8T1L1tDnPI1pQ.roa (hash: 5ngifaMxS9mhHVtoSr7d4Aq0k4gtgdDqeUt6H7Q6K9U=)
4: GJq6jlu04Rm9wa7Cgp8cTcM0nxA.roa (hash: AENchPK3bfQJEdljclR0ie9L+vwumxV2eeigY07rGKw=)
5: O4_iRlhDAxt3i7jYt701oJT8z0g.crl (hash: jMM3aRPjP0fXos1wMIOcIa+w4LnrKRnK5GiO+FkP+Kc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:e9:31:6f:09:e4:39:79:47:34:4d:61:87:19:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Oct 19 03:01:08 2025 GMT
Not After : Oct 20 03:01:08 2025 GMT
Subject: CN=4b345ebf6f10936c9ff7608509490a865b41b82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:9b:e5:79:3e:c2:21:78:03:56:33:e8:94:
6d:99:86:db:a9:11:55:26:e1:94:80:b8:1d:61:02:
48:98:2f:b5:a1:37:1d:58:8d:d5:93:96:3b:ae:5b:
dc:30:36:37:94:33:ba:59:14:7c:10:26:68:f4:d7:
75:78:be:13:2f:05:68:14:a1:42:0e:a5:fa:4d:36:
36:3e:87:d9:33:60:77:70:9f:d5:ae:77:d6:b5:b7:
f5:c6:98:5d:f3:27:a7:5f:64:7d:fe:4e:5f:c9:71:
ff:91:af:ba:50:ab:f8:c9:d1:82:d5:75:c9:93:3f:
b5:46:54:04:77:73:31:05:5e:5a:56:76:29:0e:47:
68:38:01:9a:06:dd:1e:00:90:97:cb:3f:1b:d3:6f:
58:5b:2f:6a:70:8e:09:03:be:9c:19:c5:76:8a:e4:
8b:bc:99:bf:e4:a3:28:83:ae:3c:3f:65:8a:05:68:
89:54:6b:4b:f0:6e:6e:24:8e:ff:9d:e5:05:31:f7:
bd:66:67:3a:71:88:05:2a:20:d5:81:9e:82:40:2d:
b0:b0:ef:14:77:ca:53:06:ea:c7:5a:c5:53:a6:6b:
a3:2e:7a:4f:43:99:8f:32:09:84:96:0c:aa:cc:e2:
c5:f6:6c:4c:3d:01:e7:ab:dc:87:ce:60:59:9d:c2:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:34:5E:BF:6F:10:93:6C:9F:F7:60:85:09:49:0A:86:5B:41:B8:2D
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:7e:64:50:9b:db:45:ad:10:80:d4:a8:75:ad:ea:86:45:c5:
b8:f6:ca:f7:13:c6:0a:c9:24:c6:37:ab:cf:f2:9d:f1:39:8f:
59:d8:8d:f3:f9:e0:53:0c:b1:c1:86:4c:a3:f0:00:14:7e:85:
14:be:d2:e8:c7:7e:55:b6:df:cc:f2:69:32:06:cd:71:41:c1:
c2:1c:b5:8e:3e:1a:02:3c:0b:e6:d3:50:b7:13:75:32:bc:3e:
7f:26:96:99:8a:3b:eb:bb:b5:92:7c:12:6c:32:29:98:89:ac:
28:40:62:fb:e1:78:05:3b:a3:9d:e8:bb:92:a9:0f:46:cb:95:
b1:e2:58:77:b5:1d:40:dc:b3:ed:d0:f0:6d:51:98:78:91:73:
a6:05:be:3b:1c:63:02:c2:4a:fa:5c:41:c8:ca:60:1c:d2:54:
ba:b9:7b:7d:52:1f:02:e8:a7:06:47:79:eb:09:03:87:bf:72:
e5:7c:87:cc:bf:5c:dc:03:3f:47:c6:80:66:37:0c:f3:7c:1c:
85:03:35:1f:41:55:7d:ca:78:4d:2a:ae:ce:67:d9:1d:3a:5a:
bc:30:c5:8f:22:5f:2b:e4:c5:95:70:83:47:cb:bf:4f:51:44:
f4:1f:7c:95:59:5e:4a:ad:52:f3:62:59:64:a7:4d:69:40:98:
47:ac:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:24 2025 by rpki-client