Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: ROwyuqW3rTjFs0WpI1rcFcqLCciSjhkOp/Eg0z9FGH8=
Subject key identifier: 57:0A:F0:AC:BC:88:43:29:FE:BC:0B:94:A6:61:56:B2:36:B4:B3:C1
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 0199FE102D76FC1FB23EA25D4A7E913FF22C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 16E7
Signing time: Sun 19 Oct 2025 20:01:37 +0000
Manifest this update: Sun 19 Oct 2025 20:01:37 +0000
Manifest next update: Mon 20 Oct 2025 20:01:37 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: 0uoQ4vJDaQKCou1aEkyJLb1T68FC5X6qUGEYwiIujsA=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:2d:76:fc:1f:b2:3e:a2:5d:4a:7e:91:3f:f2:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Oct 19 20:01:37 2025 GMT
Not After : Oct 20 20:01:37 2025 GMT
Subject: CN=570af0acbc884329febc0b94a66156b236b4b3c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2b:a4:23:a0:d5:b6:c3:87:dc:f3:db:5b:29:
a1:92:26:7d:26:d7:71:ec:e3:f2:76:f4:c1:07:c4:
63:69:e9:20:bc:c1:99:6b:d9:b9:94:55:8c:5d:4d:
0d:f5:13:de:c7:2c:0d:6d:42:a7:54:dc:31:8b:1c:
50:44:b3:06:78:df:ec:d0:87:1b:15:e3:af:89:aa:
08:5e:73:43:cd:31:87:8d:01:80:6a:63:44:e5:5d:
9b:8f:99:b6:f2:90:5e:4d:c4:dc:4e:e1:ec:27:42:
af:97:43:0f:76:0d:90:b2:f3:03:31:5e:10:31:1d:
45:5b:8f:1f:21:f0:5f:76:99:f0:d3:9f:87:54:d3:
ad:6d:ac:21:7f:ee:28:83:59:5c:c4:c5:bb:3e:37:
0c:03:2d:f1:6d:50:67:62:c6:fa:48:df:c5:36:58:
f5:96:0c:c2:82:83:9a:a8:45:d0:16:61:de:83:d0:
1a:82:d9:9a:5d:49:97:f4:e1:b8:1f:23:a8:50:8a:
53:aa:c5:7e:c8:a2:35:7e:94:ce:b8:8e:09:6c:de:
aa:a8:78:ad:6f:78:69:c7:7f:b3:f2:8b:2b:15:71:
cd:40:5e:61:05:2b:4c:a6:7d:05:cf:41:80:35:89:
67:35:e3:2e:86:6b:b8:fc:f0:1d:08:49:c2:5b:a1:
9f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:0A:F0:AC:BC:88:43:29:FE:BC:0B:94:A6:61:56:B2:36:B4:B3:C1
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:b3:95:31:84:bc:6b:69:56:e9:36:a7:d0:7e:4e:31:ce:4d:
dc:30:ec:50:29:55:ba:56:e5:8b:1d:b4:e6:0e:67:2e:aa:13:
ea:07:60:05:88:b4:81:06:42:b0:ff:03:25:8c:c1:d5:8d:86:
29:84:88:1a:7c:25:f2:9d:5a:13:30:4b:bf:5b:f3:39:a2:9e:
54:51:c4:3d:eb:9a:a4:fa:5a:74:76:d1:3f:8d:38:4b:aa:d2:
80:13:d9:53:02:3f:9f:9b:c2:b5:ba:94:d9:21:ac:b2:a2:9b:
c8:94:21:d7:9c:17:68:f5:40:07:71:3f:40:23:db:d5:25:16:
ae:be:f6:4f:9e:a2:c4:11:ef:57:0d:7f:87:26:91:8d:6b:48:
01:b8:c3:05:f4:4e:2d:9c:df:e0:f2:d3:4d:2d:5e:6f:8c:82:
01:1a:41:dc:36:84:94:df:d0:77:7f:ef:cc:2d:2c:6f:ee:dc:
c5:29:e7:83:26:d9:63:98:38:fd:73:aa:c1:dc:91:11:ff:9e:
73:d5:69:fd:6f:f4:c3:82:df:b1:76:3a:aa:6b:fa:1e:b4:08:
76:36:04:a3:e8:fc:b7:46:61:b0:2f:63:2b:ba:28:04:7d:1b:
46:4c:c5:d4:2d:a7:15:20:9c:b9:75:c2:aa:61:a7:5c:de:b0:
b6:58:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:47 2025 by rpki-client