Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
File: x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft (raw, json)
Hash identifier: qBzMzWZRSAjxh2QSuKzcRiyHatQiNqpZOFiReaRhWUo=
Subject key identifier: D4:94:23:4C:A4:B0:50:3E:DB:B0:C6:41:6F:98:CE:95:82:AA:D4:1D
Authority key identifier: C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A
Certificate issuer: /CN=c7872da032251bae0de510ac5ea6157e4e4e868a
Certificate serial: 0199FAA0FB3E4B2E37C3EB27C098B2E0D9FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
Manifest number: 49
Signing time: Sun 19 Oct 2025 04:01:18 +0000
Manifest this update: Sun 19 Oct 2025 04:01:18 +0000
Manifest next update: Mon 20 Oct 2025 04:01:18 +0000
Files and hashes: 1: f0fN8BxAGys1wxUtC0u2VgJRTl0.roa (hash: 07e26/1ojthsdFcmpuogqBJZxqHxhDaHvUP9ikqQQeg=)
2: x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl (hash: lYTmTUScVLKqKcJRgZIoWhEk9/jjN+nLfgMW8c/d7eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a0:fb:3e:4b:2e:37:c3:eb:27:c0:98:b2:e0:d9:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7872da032251bae0de510ac5ea6157e4e4e868a
Validity
Not Before: Oct 19 04:01:18 2025 GMT
Not After : Oct 20 04:01:18 2025 GMT
Subject: CN=d494234ca4b0503edbb0c6416f98ce9582aad41d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:34:d6:ad:7a:a9:93:1c:1b:68:40:a0:f2:
5a:7e:80:f2:d1:c4:7d:36:ee:23:1e:1c:3a:18:1c:
ff:38:06:94:9e:95:20:8a:b2:ac:00:da:15:24:a5:
a1:77:2c:4e:be:a8:a8:79:5f:a3:2d:d8:06:d6:58:
96:5e:8a:25:65:e6:e8:65:2e:fb:ed:ef:de:a6:da:
23:21:04:03:70:3b:74:df:3d:8a:64:52:3b:19:cb:
d5:06:3f:5b:8e:a8:89:f8:f4:0d:c9:67:22:ca:e0:
b5:57:c5:17:ec:ca:f9:cd:b8:74:a6:92:22:e2:51:
b4:90:58:77:ab:34:4a:1f:79:06:06:6a:d1:22:55:
26:36:52:c4:6b:3f:57:c1:5c:52:82:85:6b:c1:c5:
17:37:7e:88:46:3a:e6:20:79:ae:91:b8:f9:aa:6e:
45:c5:80:2e:be:e6:a1:54:7a:2a:dc:dc:40:4c:11:
21:e4:37:36:b5:fd:45:3f:6a:5f:4a:49:7c:50:6e:
7e:d0:8b:d5:89:37:d4:72:4f:49:5b:af:d6:f4:4a:
4e:f3:c1:a2:a2:86:d5:d5:63:4c:8f:f0:c3:67:a9:
a1:fe:ea:6c:4b:ee:3f:5f:75:76:7f:c6:d6:c0:6f:
49:c1:00:8a:00:c6:cf:54:63:da:bb:4e:44:ac:2f:
11:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:23:4C:A4:B0:50:3E:DB:B0:C6:41:6F:98:CE:95:82:AA:D4:1D
X509v3 Authority Key Identifier:
keyid:C7:87:2D:A0:32:25:1B:AE:0D:E5:10:AC:5E:A6:15:7E:4E:4E:86:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4ctoDIlG64N5RCsXqYVfk5Ohoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/9e3e16-6916-4ca4-b6cd-a9e4a7ddfe59/1/x4ctoDIlG64N5RCsXqYVfk5Ohoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:38:1f:11:fd:07:12:cd:42:91:00:64:26:a1:6a:47:ab:7d:
85:91:3c:8e:7c:df:bd:63:11:43:8d:ca:cd:6f:50:d8:c6:54:
91:57:25:57:11:ae:f2:f8:3a:c9:e1:37:8f:1a:22:1b:9f:dd:
96:28:b2:38:98:ed:40:b8:f1:73:2e:d2:de:c5:c5:b6:a3:c2:
48:a1:fe:b0:03:6f:65:1a:fe:30:83:03:90:f0:b8:05:77:e3:
21:93:b1:a8:52:dc:98:da:90:79:82:ba:7d:44:f1:f0:53:37:
6a:6f:e1:bb:bb:98:8f:a4:58:6f:90:06:9e:15:41:40:d0:6b:
4e:e2:c8:5a:53:4d:69:44:14:b2:8e:10:b6:3d:1a:39:68:35:
a8:b8:6b:49:c1:1b:59:4f:18:bb:3b:2d:a6:38:2a:70:c7:c6:
72:82:16:5a:8d:5e:ca:86:81:54:07:2b:e3:ee:57:1c:f1:a1:
66:c9:5c:4f:8c:eb:7c:53:26:67:61:a6:7c:3d:a5:81:c6:61:
8a:8e:51:98:24:c7:07:07:e1:c6:3e:e1:e8:e1:80:ac:4f:96:
5e:14:7f:53:31:14:80:38:f7:c7:e2:c6:de:84:77:19:f4:67:
2e:76:aa:98:b6:37:6e:b9:02:00:94:1a:91:cc:2c:42:32:b4:
f7:5c:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:34 2025 by rpki-client