Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier: 3QQ0qRvSjsNR+KB3/RGcTqOU8fnnz9tiTjl7DkpD3c4=
Subject key identifier: F2:D7:86:63:37:5C:98:F9:73:55:15:AE:5E:EF:79:3D:75:3D:31:84
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial: 0199FC58F3536304427FB771C34A19E165F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number: 0763
Signing time: Sun 19 Oct 2025 12:01:51 +0000
Manifest this update: Sun 19 Oct 2025 12:01:51 +0000
Manifest next update: Mon 20 Oct 2025 12:01:51 +0000
Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: P9xiiFGeMED+BxiIUoUT+2t16/zUbipyKVmcWOYbpz0=)
2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f3:53:63:04:42:7f:b7:71:c3:4a:19:e1:65:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Validity
Not Before: Oct 19 12:01:51 2025 GMT
Not After : Oct 20 12:01:51 2025 GMT
Subject: CN=f2d78663375c98f9735515ae5eef793d753d3184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d7:a0:2a:f9:dd:2e:29:fa:56:2d:7c:e6:97:
84:ad:cd:de:2b:c1:46:93:ad:52:c9:bc:3b:d6:bd:
e9:9b:87:99:bf:53:c5:d5:71:2c:72:6e:b8:71:eb:
08:5b:ef:33:32:f6:78:91:08:2d:c7:ea:91:ce:fb:
38:a0:93:38:1b:b2:2f:83:a4:1e:3c:b4:41:e1:6c:
35:52:d0:2d:8d:cd:c7:c9:be:d4:a5:6a:af:02:4d:
30:ab:28:42:68:be:e9:51:02:42:be:4f:0c:52:e1:
79:f1:5b:54:09:19:4f:eb:35:fb:04:8a:7d:53:48:
dc:8f:0d:a5:8f:07:1c:e1:22:bd:68:bb:43:c7:27:
02:45:f1:73:33:05:58:88:2b:57:9c:fa:33:0a:b5:
61:03:b8:92:09:8a:f3:e5:e6:5d:d3:06:1c:19:81:
e7:98:35:fb:16:04:f2:68:60:ca:8a:8e:fb:10:36:
a7:71:33:90:e5:6e:3f:38:7e:17:f4:e1:86:a8:8e:
62:0c:ed:3c:cc:6d:3f:c1:2d:03:2a:7d:15:83:63:
aa:2c:b2:ed:d1:ba:14:bd:59:ea:50:6d:d4:3a:4f:
94:91:06:39:b8:b0:a2:32:bc:9e:db:f3:c9:d8:b6:
9e:c7:6b:26:46:18:95:46:de:0f:4e:d8:5a:92:51:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:86:63:37:5C:98:F9:73:55:15:AE:5E:EF:79:3D:75:3D:31:84
X509v3 Authority Key Identifier:
keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ce:91:e2:66:c9:6e:55:80:ba:ba:49:5f:3d:91:04:a6:c4:
96:6f:9b:dc:6b:42:1a:be:fb:d2:3c:77:31:8a:97:fd:34:f8:
ca:09:d4:76:62:8d:f0:a1:75:da:5b:7f:68:09:e0:67:c1:b3:
77:7f:f7:94:11:5e:9f:b1:30:f1:c5:67:ea:4b:b6:13:bf:ea:
cf:8f:12:2f:3c:67:a4:5a:41:b8:e6:0c:70:b8:8b:e9:f9:6c:
f7:6a:a5:f0:97:74:2a:68:f8:ca:8c:d7:00:e3:6e:e7:70:17:
7a:21:6d:80:14:28:4a:e9:c1:72:b8:ce:c5:b7:37:2f:44:c9:
8f:50:4b:a3:84:32:eb:9c:ef:aa:ca:2d:43:bf:a6:b7:2b:22:
6f:23:ed:fb:56:31:7a:68:93:75:9a:e9:a0:4d:73:b0:f1:0e:
c7:89:e3:6e:4d:60:52:67:89:44:91:e9:72:a0:07:ba:5c:cd:
22:58:14:87:62:85:75:da:1e:1c:71:d9:9a:bf:a8:ff:6d:f6:
e8:7b:40:a1:1e:fa:ab:08:01:2f:bc:6b:a5:4d:0b:dd:f0:41:
9d:48:a9:5c:31:38:eb:c8:75:fb:a5:33:5e:4f:28:2a:4e:04:
c1:33:5e:e0:e1:b1:5a:c2:af:fd:50:62:96:d5:60:d6:6e:0d:
38:79:ee:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:07 2025 by rpki-client