Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: 3h0rKRNN7QezTMJNxc2x9lpLiHOZ5tVzbiH3bT2H0kw=
Subject key identifier: 6D:21:20:E3:77:C2:DE:7C:90:5B:45:87:26:85:6B:DE:30:1F:62:A5
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 0199FC21723A55B669CB7B40B0A33A84599D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:14 +0000
Manifest this update: Sun 19 Oct 2025 11:01:14 +0000
Manifest next update: Mon 20 Oct 2025 11:01:14 +0000
Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: xiJMXBmmbBrq5F5iXBwHyNGKRlcV1CNFTs7hzUOz2yI=)
2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:72:3a:55:b6:69:cb:7b:40:b0:a3:3a:84:59:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Oct 19 11:01:14 2025 GMT
Not After : Oct 20 11:01:14 2025 GMT
Subject: CN=6d2120e377c2de7c905b458726856bde301f62a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:dd:e7:47:df:83:69:3c:0c:08:c4:8e:d3:
34:d8:32:06:24:07:36:d7:95:67:57:64:05:58:17:
cd:6b:22:b4:c4:f0:d5:a7:f1:a8:62:ae:76:2c:30:
a0:76:66:ce:cb:a1:59:e9:33:02:a0:b9:81:2d:42:
e0:d5:25:6b:b8:59:3b:84:1f:08:00:0f:99:20:7b:
3a:8d:f2:31:a0:56:04:a3:29:23:5c:2f:87:76:19:
9a:be:11:ab:75:9f:73:f7:17:0d:ac:93:2a:7a:f6:
88:e5:e2:52:1e:fe:3d:bf:a9:7e:ab:16:cd:92:2b:
9d:57:e4:b4:f0:15:c6:98:89:16:65:29:22:fb:d8:
48:7f:60:39:23:b2:b5:4a:4a:39:fc:01:30:eb:a0:
a1:c9:c3:f4:6b:b1:51:b1:5b:3c:5c:58:75:84:c2:
7c:b6:93:03:aa:76:d4:53:20:34:7c:c2:14:f8:92:
52:2d:cc:ab:f7:0e:cb:db:96:96:83:93:c3:0b:d1:
4d:c9:e9:aa:84:44:12:1d:69:b6:7c:de:db:2e:bb:
6c:a6:ae:cc:03:69:94:23:2e:e2:6a:9b:95:28:ed:
03:3f:f3:5c:7a:fe:95:c6:d6:85:a7:b8:14:d6:0c:
a6:87:c7:2f:9f:24:94:5e:9e:5e:00:55:09:cc:a0:
e5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:21:20:E3:77:C2:DE:7C:90:5B:45:87:26:85:6B:DE:30:1F:62:A5
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:97:11:96:64:d9:af:4e:91:26:64:21:32:74:76:c5:dc:da:
38:2b:f5:dd:07:46:38:34:bf:ce:4b:69:42:78:b2:42:d1:4c:
ce:62:b5:e6:65:83:cb:d5:6c:64:07:6e:3b:a8:0c:fe:5f:59:
d3:eb:9d:09:8a:fc:aa:e4:10:81:db:af:a5:d1:da:04:5a:7e:
c0:52:fc:8f:b0:77:90:e2:ec:a3:72:29:17:b8:91:9f:31:3b:
b7:19:85:79:d1:53:c6:0f:c1:4e:a7:8e:da:6b:f8:84:43:31:
ca:e1:41:0b:36:98:b7:e6:03:e1:7e:6b:95:0f:5e:0f:90:ed:
d2:7c:ca:1d:79:72:17:50:bb:6f:c3:fe:cc:c8:a6:4a:d1:46:
b9:22:34:05:31:ef:d5:0d:32:56:09:f1:26:e3:8d:95:77:c0:
ab:70:34:e0:ad:1d:c0:9e:73:9b:e8:5f:1e:37:b4:3f:e9:dc:
32:b6:f6:f8:b0:c2:5d:26:9d:8f:e2:6a:4d:a5:c0:ee:4a:bc:
33:a0:dc:36:a8:1e:fd:82:0f:07:21:81:c2:99:79:95:e8:34:
32:22:d6:f0:ba:68:00:ab:5e:6f:22:ac:ea:6b:8d:39:38:1e:
13:d9:dc:09:22:ce:cc:c2:93:eb:c7:68:e2:fd:0e:59:6c:a5:
03:ac:cc:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:21 2025 by rpki-client