Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier: 5ZJLy6nSm/5vbkMPHGBw8h8x7C9F7hE9l1awsNG98Ow=
Subject key identifier: 9F:0D:C3:00:BB:D2:7F:AB:83:98:7B:74:18:9D:91:E6:4A:C6:97:10
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 0199FBEC062E87F450F82A358C989E439938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number: 05DE
Signing time: Sun 19 Oct 2025 10:02:53 +0000
Manifest this update: Sun 19 Oct 2025 10:02:53 +0000
Manifest next update: Mon 20 Oct 2025 10:02:53 +0000
Files and hashes: 1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: hXcHqt//e3AosAfoSuiEyB/SjWuWWympIr4PJCjyCKs=)
2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:06:2e:87:f4:50:f8:2a:35:8c:98:9e:43:99:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: Oct 19 10:02:53 2025 GMT
Not After : Oct 20 10:02:53 2025 GMT
Subject: CN=9f0dc300bbd27fab83987b74189d91e64ac69710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:26:e7:0a:f9:98:21:9b:f6:c5:0b:37:ac:47:
7e:92:11:a5:26:00:38:5c:f7:14:49:13:07:f6:d2:
1c:26:51:02:7e:1f:5b:79:99:42:de:0a:d0:01:81:
52:84:53:0d:f4:5f:d6:a1:70:12:b9:fb:6c:f9:8c:
a8:e8:6a:55:02:1a:a7:e0:37:11:64:34:82:b0:2f:
61:fc:e3:a6:2c:06:bf:62:c2:88:b0:3c:d5:ba:f3:
5c:34:e9:66:2e:c9:e8:c7:ca:ed:8e:19:60:16:65:
4b:81:ad:05:16:36:7c:01:4a:81:ca:8a:bd:14:75:
66:04:39:56:77:29:7a:0e:5c:6b:2f:69:3e:99:41:
89:79:82:81:ed:0b:d0:44:e6:c8:b7:15:27:bc:50:
ca:13:4b:29:c2:f7:ee:97:37:b8:7b:b9:6e:f9:b4:
87:23:85:89:69:8e:13:dc:d7:50:f3:ec:ed:e3:83:
44:e7:68:d8:8e:98:a4:7f:8c:77:1b:8c:33:9b:ac:
a3:85:a6:e8:c1:b6:c9:4f:dd:51:25:04:a4:2c:04:
6c:fe:0c:35:48:f0:0d:43:0a:cf:d5:6e:f3:d1:2a:
00:94:03:31:87:91:5b:2a:5d:55:53:8c:67:57:6f:
79:7b:d9:3e:6e:a8:90:e8:fd:02:64:6c:95:6b:2c:
b8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:0D:C3:00:BB:D2:7F:AB:83:98:7B:74:18:9D:91:E6:4A:C6:97:10
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cf:fd:3b:3c:28:2f:6b:cd:24:39:87:88:99:e3:05:9e:a9:
e2:56:4a:5b:8a:08:a4:ac:85:d3:05:9b:10:e6:46:b0:75:4d:
cf:8d:51:ae:71:81:57:b7:27:31:b2:43:20:de:41:96:e6:3a:
de:ea:ab:66:e2:9d:c4:8b:e3:f0:0b:bf:40:04:d7:fd:1d:af:
e9:24:a3:ae:d3:98:2f:e7:71:bd:0d:dd:2e:79:27:b3:f3:43:
92:3e:c8:03:41:36:8c:19:c1:64:87:4a:0a:a1:12:b9:7b:4c:
74:2d:1b:44:c8:fb:57:fd:4c:2e:41:6c:81:3a:ac:e4:d0:6f:
6e:f4:0f:f4:d7:20:11:92:82:d1:6a:50:8d:60:1c:5d:30:56:
4a:f6:6a:ba:e8:61:84:eb:7f:77:35:99:49:12:4b:60:40:23:
51:3c:00:d8:8f:79:52:35:8d:0a:6d:10:82:23:af:19:89:71:
51:74:96:af:81:45:fb:b8:ce:c1:82:c7:9c:e2:be:85:92:2f:
ed:56:10:a4:d8:fe:6d:2b:d3:1a:23:a2:c3:da:56:b9:b8:fd:
76:eb:cd:50:f2:20:c5:fd:68:4f:f0:ff:42:a8:0d:cc:5a:7c:
be:76:26:d0:d4:56:42:e1:01:f0:ea:37:4a:f3:ce:e5:e5:42:
28:99:7c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:30:07 2025 by rpki-client