Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
File: 4q7DyKsR_AWMmo70AO8cPRRKe6g.mft (raw, json)
Hash identifier: At1aIMiUH/aRuwzZzQ/mhLeZSTcFKfJ0mKHJfEMFr1Y=
Subject key identifier: 29:FA:40:6E:07:7A:10:01:2E:6A:2D:43:27:AB:20:87:D6:93:02:1B
Authority key identifier: E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
Certificate issuer: /CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Certificate serial: 0199FEEB8A89FFBA368A81DF9D4C47AD1E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
Manifest number: 0969
Signing time: Mon 20 Oct 2025 00:01:13 +0000
Manifest this update: Mon 20 Oct 2025 00:01:13 +0000
Manifest next update: Tue 21 Oct 2025 00:01:13 +0000
Files and hashes: 1: 1qu70rxHLlsLAV5g5Efa66s6iag.roa (hash: YmJJTTwGISEG6l96iV4cbfKm+Xa4J2z07ynSRxjgi3U=)
2: 4q7DyKsR_AWMmo70AO8cPRRKe6g.crl (hash: E7qnwieZQR0aD+WytGXOFtlxNEJBirR25zR3rQKCusw=)
3: q1pnCW-BLUiZBZvb23K3UxB_wVE.roa (hash: pCVPRKxVl5EU92p/4v7xk8uVkYaxmpQbOuLsACDt2jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:8a:89:ff:ba:36:8a:81:df:9d:4c:47:ad:1e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aec3c8ab11fc058c9a8ef400ef1c3d144a7ba8
Validity
Not Before: Oct 20 00:01:13 2025 GMT
Not After : Oct 21 00:01:13 2025 GMT
Subject: CN=29fa406e077a10012e6a2d4327ab2087d693021b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:e8:6e:c8:88:50:be:5d:df:2d:79:73:6a:
5f:bc:a8:5b:6f:f6:49:f6:bc:ae:78:f1:cf:e0:2b:
3c:bc:88:3d:26:22:4d:7d:96:66:47:b5:3a:b8:16:
ea:a3:41:ab:5b:d9:0e:79:63:4f:85:31:69:f3:6e:
7a:15:b1:27:4b:a1:43:e9:80:9d:0b:1b:63:9c:3d:
fe:86:67:27:6d:52:32:0d:79:73:02:17:72:2c:40:
09:0b:1c:6e:b6:25:d3:61:76:66:32:4c:17:05:13:
b4:fe:00:12:16:7a:25:01:29:36:e1:6d:76:a4:61:
65:05:1e:3b:7e:b2:6c:8e:0d:82:d9:7f:37:15:3c:
90:08:5d:aa:92:9f:9f:1f:c7:7c:c2:87:66:a0:87:
be:5c:70:11:f2:1f:75:65:c2:76:84:78:d5:06:eb:
84:9c:e7:96:e7:86:74:6b:5d:3e:92:9e:ad:eb:86:
12:3a:ac:f8:32:1f:cc:99:3b:5a:d7:51:9e:c8:5f:
6c:b5:a0:35:66:10:89:a1:40:d3:47:d9:f1:bf:ed:
be:0b:37:19:6c:88:8b:51:25:78:4b:7e:82:41:3e:
df:db:4c:7d:24:38:7f:3e:b2:d6:b8:c1:a2:f1:57:
bf:33:6f:31:39:6d:86:fc:24:37:42:cb:fd:8d:8c:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:FA:40:6E:07:7A:10:01:2E:6A:2D:43:27:AB:20:87:D6:93:02:1B
X509v3 Authority Key Identifier:
keyid:E2:AE:C3:C8:AB:11:FC:05:8C:9A:8E:F4:00:EF:1C:3D:14:4A:7B:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7DyKsR_AWMmo70AO8cPRRKe6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ba19e4-71cc-470e-bda5-9da4cc620533/1/4q7DyKsR_AWMmo70AO8cPRRKe6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:9e:42:5c:59:d4:21:f9:88:0c:7b:09:e9:3a:c1:13:f5:32:
e3:36:f1:d7:12:bc:cc:34:d5:58:74:52:7b:f2:18:76:7b:c7:
8e:2d:73:74:dd:60:d9:51:af:b5:5d:5f:b8:41:c6:67:d5:d4:
fb:1c:a0:11:7a:26:12:31:f5:12:d4:6f:2f:65:df:ff:10:04:
87:2b:86:0c:67:26:55:f5:5d:7b:95:12:12:db:24:cd:d8:f0:
fd:87:fc:ef:0f:cf:fe:d9:08:9a:84:f7:b8:25:be:f6:38:68:
6e:c5:6c:1e:46:58:7f:b1:a6:d4:db:50:fd:60:68:23:7e:bc:
17:7b:23:c9:b5:7a:a3:ff:c9:e4:73:d0:01:37:70:cd:4b:ba:
9d:8a:53:48:b7:c5:c8:fa:10:6b:65:ea:55:c9:49:98:48:c8:
23:17:91:98:6e:0b:e7:a8:36:03:22:38:b5:aa:2e:52:01:85:
24:03:99:e5:05:18:4f:bb:58:ba:20:ef:05:bd:7d:43:51:be:
66:fb:d7:58:cf:ae:40:ca:9c:e0:09:c5:37:60:1a:12:2f:60:
fc:aa:20:04:75:01:0e:b6:42:41:f1:b3:a2:6e:8b:8b:ed:10:
02:14:cf:d6:26:73:3f:54:26:96:fb:02:ed:59:d6:34:8d:c8:
3e:c2:2e:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:55:30 2025 by rpki-client