Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier: yRmWvjQMYHHHf2TqW++dpYe2bo4mb2rUmiSV0yaGPXA=
Subject key identifier: A7:6F:B3:F6:AE:E7:B9:29:E9:65:86:E4:96:1E:20:06:20:FC:89:1E
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 019A0147FEC7B4A8A8B5682A4AE9370BBFD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number: 1188
Signing time: Mon 20 Oct 2025 11:01:26 +0000
Manifest this update: Mon 20 Oct 2025 11:01:26 +0000
Manifest next update: Tue 21 Oct 2025 11:01:26 +0000
Files and hashes: 1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: v+4bMuIY0gJjOWT0Qs/f/p8vgwrnE7zW9KguoUiELPI=)
2: 8VHFK74OMKQnD381WiG3ZZR7ozs.roa (hash: B7p/Hrvwz47SgwLmobk1ZKXWoI4oqfm1r3I4SkLnjp4=)
3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=)
4: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:fe:c7:b4:a8:a8:b5:68:2a:4a:e9:37:0b:bf:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Oct 20 11:01:26 2025 GMT
Not After : Oct 21 11:01:26 2025 GMT
Subject: CN=a76fb3f6aee7b929e96586e4961e200620fc891e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e4:ef:b6:c9:63:76:fd:2d:4c:21:b1:62:90:
8f:53:ec:8b:40:82:5a:6e:7f:57:a0:58:1d:1f:c2:
02:06:11:de:f1:c2:41:2a:cb:2f:c6:37:84:88:43:
44:e0:d0:e0:b8:98:7b:3f:d5:64:f1:0e:c4:9b:99:
6c:a7:e1:d1:d9:d9:27:c6:90:6f:be:b3:3e:73:ae:
d5:92:d0:15:ab:74:e1:05:8b:3a:a5:6c:0f:46:55:
cc:2a:f7:8b:03:65:cd:8e:ad:b8:e1:28:d8:e1:83:
dd:00:4b:f9:df:bf:bd:65:d6:fd:b4:f9:1a:40:be:
7c:82:b1:5b:a2:b4:b8:60:80:8f:ad:d1:a8:8b:51:
57:b0:a8:0f:8a:e5:5a:1e:cb:35:fe:8c:9e:6d:8a:
bb:d4:78:4a:de:a3:b5:92:59:7d:0c:fa:30:c3:b0:
92:0f:ec:cc:95:a1:79:d4:7c:8b:82:94:2f:b7:c4:
8b:dc:ed:7e:f4:f5:2e:71:75:b4:9f:1a:84:d4:c2:
43:cd:22:f0:5b:6b:ca:55:7b:ab:e9:cb:b7:20:76:
61:7c:33:7a:b4:b4:65:52:e9:7e:45:81:15:7d:8b:
fe:b6:08:a3:39:d6:a3:60:a9:d1:b2:15:53:15:89:
29:4f:be:d7:58:18:fe:6f:80:76:53:a9:ef:5f:f9:
fd:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:6F:B3:F6:AE:E7:B9:29:E9:65:86:E4:96:1E:20:06:20:FC:89:1E
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9f:29:b2:9b:e7:94:bf:70:e7:b5:51:93:82:9b:e4:68:3a:
56:7d:be:2b:69:40:49:7e:e7:b7:34:63:b8:2a:04:4a:39:6e:
27:1d:5c:fb:1f:60:9d:10:89:76:d6:58:bb:ac:28:0b:89:75:
4f:a9:f7:d3:f2:7d:c4:5b:1a:95:65:6f:fd:6f:7c:51:3c:9a:
b2:af:33:7b:72:db:0d:0a:7c:f0:56:0b:a0:b4:a9:75:f3:ec:
0a:c1:0c:a4:c3:e4:c4:a1:b1:e1:e4:55:9a:7c:cc:d0:58:67:
13:d1:0d:df:e5:86:11:b6:74:72:fc:2e:df:b8:cc:8d:db:b1:
df:1c:5f:c3:a5:d1:f7:11:5e:0e:01:f3:82:20:f4:04:52:8d:
e7:79:14:c2:a1:35:6f:ff:8b:69:fd:6e:21:a8:d0:0e:ab:aa:
6a:45:34:db:84:49:bb:f3:3f:a1:8f:50:4b:40:bd:70:a3:ea:
61:8e:18:32:e2:87:e7:44:8c:2d:76:22:32:b6:36:89:90:cf:
b2:4a:b3:41:38:e5:22:0b:9b:20:21:35:32:c9:3d:0a:2a:49:
d9:81:9a:4f:5e:ec:b6:fa:b0:d4:38:9f:9a:b5:c3:40:ec:94:
a1:25:ea:1a:a2:23:cd:25:52:da:57:68:12:b4:6f:9b:6d:c4:
b8:41:06:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:27:05 2025 by rpki-client