Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: HgwaK7ao9t2W1+0i1mwAxsGmyxTgbIyflZ6wsRYmDoE=
Subject key identifier: B7:A6:6E:D2:BB:93:12:05:02:04:25:F0:38:4A:DF:E9:98:D6:9E:96
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 0199FFC726B897F1250C054982297FEDA226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 16E4
Signing time: Mon 20 Oct 2025 04:01:05 +0000
Manifest this update: Mon 20 Oct 2025 04:01:05 +0000
Manifest next update: Tue 21 Oct 2025 04:01:05 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: Z/2GL3iWWxEhh+WQ0IId5OddQRY5bJVkAUHagTebV/A=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:26:b8:97:f1:25:0c:05:49:82:29:7f:ed:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Oct 20 04:01:05 2025 GMT
Not After : Oct 21 04:01:05 2025 GMT
Subject: CN=b7a66ed2bb931205020425f0384adfe998d69e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:91:f3:f5:a0:76:90:0a:a8:f4:09:c2:ad:b2:
fb:9a:03:d8:2c:8b:80:14:78:79:86:67:91:19:a0:
16:da:ab:68:d9:f4:8c:65:52:45:82:3d:cd:d0:3f:
fa:fb:97:3f:f7:68:08:af:dd:89:12:7d:6c:f4:73:
b3:f0:b2:94:9a:eb:1f:3e:a8:df:1d:11:01:72:e5:
29:32:bf:0a:c2:fc:19:35:71:58:97:1f:9a:1f:73:
f5:35:d4:4d:af:1b:19:2a:46:63:7e:3b:dc:f3:5a:
90:39:59:00:39:ff:02:22:15:f7:23:90:90:36:a8:
04:54:87:32:33:69:79:9e:a7:6b:bd:83:63:f1:6d:
8e:78:fc:df:9c:96:bf:d3:19:0e:ec:8d:a3:85:3d:
fe:92:6f:58:18:db:7e:01:97:66:58:3f:2c:a8:2c:
6d:b2:86:02:37:6a:7b:97:26:68:ed:ce:2a:5e:2a:
38:c8:eb:21:9e:73:29:de:f1:e8:97:93:d2:07:d7:
2a:4c:70:f0:ee:cc:83:32:51:62:46:7f:4d:13:69:
72:c2:ad:9a:78:9b:74:1d:c9:7f:44:d5:f4:fb:95:
d8:e6:ec:c7:3e:eb:31:cf:47:bf:78:ac:cc:e2:16:
37:1d:d9:21:46:16:4a:89:a1:d0:08:8a:82:51:48:
3f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A6:6E:D2:BB:93:12:05:02:04:25:F0:38:4A:DF:E9:98:D6:9E:96
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:d3:ec:52:1b:93:e4:b1:81:cd:42:45:3a:cb:46:a7:c3:28:
d6:fc:3f:dd:52:78:2d:77:e6:23:49:97:ce:39:39:36:9b:95:
e4:d2:a9:b4:2d:c5:97:85:e1:ae:b4:c7:76:c2:ba:aa:80:68:
10:e7:c4:38:b2:c0:f0:df:13:90:ff:10:84:fe:8a:d3:dc:14:
45:03:b7:bc:e2:d8:b1:9a:ae:78:64:83:5c:21:1e:8f:4b:89:
ad:1f:f4:ea:6f:22:c4:2f:b6:82:5a:cc:b0:13:16:6a:34:4f:
d9:eb:7b:2d:9b:55:35:d3:2d:bb:da:79:ef:12:af:a6:00:e6:
50:12:76:de:d6:cf:10:ec:da:ff:b6:fc:54:6c:cb:05:79:bb:
81:ed:85:17:22:ce:de:b6:82:6d:44:a8:63:13:2f:99:76:9f:
01:8f:46:70:20:29:4b:b8:d2:d4:2d:89:c0:9d:21:44:8a:3c:
2d:e7:74:7a:40:26:a7:64:c6:be:6d:82:03:59:d7:bf:6e:79:
1c:c0:ef:33:64:6c:f6:30:00:2e:89:f7:c5:06:e9:96:2b:53:
41:22:be:34:9b:93:ab:83:69:9e:bc:65:61:ff:4e:96:5f:fa:
34:fd:b7:40:6c:23:53:a7:81:ca:32:be:eb:15:83:6a:e1:eb:
8c:c7:eb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:51:47 2025 by rpki-client