Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
File: 4rRpKpKR8sZ7VswV2k0xASAjAXc.mft (raw, json)
Hash identifier: oawyMho8gop2cg69t9I2EgDwX3lPWWiP0+sBTRqL7Fo=
Subject key identifier: BE:9B:1E:9B:DF:E9:82:04:44:18:F9:A8:42:9B:F2:30:2B:D8:42:1E
Authority key identifier: E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
Certificate issuer: /CN=e2b4692a9291f2c67b56cc15da4d310120230177
Certificate serial: 019A03A4CD60273244E49AD88F5664F5FD96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
Manifest number: 0349
Signing time: Mon 20 Oct 2025 22:02:03 +0000
Manifest this update: Mon 20 Oct 2025 22:02:03 +0000
Manifest next update: Tue 21 Oct 2025 22:02:03 +0000
Files and hashes: 1: 4NCyaBU3y3IsV-tIz8ykBHkjQrA.roa (hash: 6MR/wTh/d3g4brX5BBFxl1tdarfWH7geP5gRFSxNByI=)
2: 4rRpKpKR8sZ7VswV2k0xASAjAXc.crl (hash: yBptodZviiIDqFbj4dIPQD9RqzbP5b4bWrib/+S5lF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 15:16:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a4:cd:60:27:32:44:e4:9a:d8:8f:56:64:f5:fd:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b4692a9291f2c67b56cc15da4d310120230177
Validity
Not Before: Oct 20 22:02:03 2025 GMT
Not After : Oct 21 22:02:03 2025 GMT
Subject: CN=be9b1e9bdfe982044418f9a8429bf2302bd8421e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a0:92:82:b7:bc:2b:9c:55:cb:52:35:b8:61:
9e:ea:17:21:f6:d6:52:ba:84:79:a8:90:b4:94:fb:
1e:40:5e:f8:93:1e:23:a9:6f:be:fb:e0:ab:08:3a:
9d:fc:57:a9:d1:fb:f8:42:ea:2e:9b:73:2b:72:34:
08:c9:6d:50:a8:1d:0f:20:2d:f9:a7:d6:51:94:04:
06:73:8a:e7:d0:64:cf:67:71:86:5b:73:b1:a1:63:
26:ce:56:14:07:cf:20:0e:ec:ae:27:79:c6:a0:8b:
ee:cd:97:83:48:35:94:63:fe:d0:86:13:3a:de:93:
62:d6:13:37:d4:98:64:13:33:63:33:f2:93:c6:f3:
54:06:3c:aa:98:a6:45:29:65:61:00:f6:4e:79:8c:
ed:be:88:12:3d:ac:88:b8:66:80:a7:c1:04:ff:d7:
fa:be:45:20:e3:c0:b2:a9:84:1d:08:55:1d:f7:65:
e7:99:24:77:e0:f6:be:ea:be:5c:66:21:82:7e:f5:
fc:2b:13:8a:91:bd:aa:37:d0:a6:76:a8:8c:06:85:
a5:7a:15:d1:19:ef:9e:45:cd:6e:14:95:52:59:70:
00:20:e5:a2:67:32:7e:a7:83:97:37:c3:9f:78:6b:
1c:23:bd:f4:60:2f:16:ef:f8:8c:b9:70:0b:b1:6a:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:9B:1E:9B:DF:E9:82:04:44:18:F9:A8:42:9B:F2:30:2B:D8:42:1E
X509v3 Authority Key Identifier:
keyid:E2:B4:69:2A:92:91:F2:C6:7B:56:CC:15:DA:4D:31:01:20:23:01:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRpKpKR8sZ7VswV2k0xASAjAXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/659d27-bbb5-49f4-8fd1-c264b75b6b78/1/4rRpKpKR8sZ7VswV2k0xASAjAXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:cc:23:db:38:ef:f4:e3:fc:8d:92:27:74:bc:7b:e7:e2:b6:
e9:03:1f:74:0b:fb:04:3b:d9:53:f5:17:95:ed:c4:2b:f9:92:
92:90:78:9c:73:b7:58:f7:bc:e0:96:31:ff:77:7b:a7:f9:d2:
c3:b6:bf:3d:dd:db:6c:16:5c:7f:58:f9:fb:5f:a5:fa:4f:86:
a5:ed:13:71:0d:89:c3:b9:95:5d:5b:06:51:96:10:a6:7b:34:
6f:2a:8e:ed:0a:de:82:f9:cb:5e:4a:7b:c6:19:30:f6:b4:d5:
7e:32:0e:94:f3:95:76:29:c3:fb:b5:53:67:07:66:bc:73:6f:
0b:1c:93:14:6e:91:81:db:a4:ec:d3:2d:3a:1e:45:b4:5b:28:
ca:06:1e:79:ae:ef:a7:f9:57:20:61:42:60:2f:91:06:b1:3a:
13:69:b6:2a:e4:99:dc:4c:82:f2:3a:bd:b6:da:0a:10:63:ff:
8c:35:a1:b8:15:e4:aa:71:b1:61:89:d3:02:f8:45:22:18:1f:
64:bf:82:50:cf:bf:70:6b:79:50:7e:5e:b4:be:cd:06:cc:c4:
dd:a9:7e:6a:4c:38:3c:a8:4e:87:d7:db:30:00:fa:3c:05:ca:
e3:c2:89:95:1d:a7:40:5b:52:5d:b2:9c:51:5b:f2:3f:77:41:
86:f6:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 00:41:25 2025 by rpki-client