Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier: WhDwR2Yx1nKErE8kZCm+zWd1GkCqIvY2uXyLhLuGJWs=
Subject key identifier: 58:78:1A:B7:31:F3:5D:92:4B:67:A2:B4:0D:9E:47:16:C1:08:FD:BD
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 0199FFC79DDFE070C9F5A6DD29B2596A6FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number: 0949
Signing time: Mon 20 Oct 2025 04:01:36 +0000
Manifest this update: Mon 20 Oct 2025 04:01:36 +0000
Manifest next update: Tue 21 Oct 2025 04:01:36 +0000
Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: UuFOuAvjgcf/qspYglgPTDaruU5KBLfSbammwibAkWY=)
2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:9d:df:e0:70:c9:f5:a6:dd:29:b2:59:6a:6f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: Oct 20 04:01:36 2025 GMT
Not After : Oct 21 04:01:36 2025 GMT
Subject: CN=58781ab731f35d924b67a2b40d9e4716c108fdbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:11:be:9c:d9:06:da:62:7e:03:ba:25:fe:ed:
f9:50:74:be:ba:0b:d9:44:29:a7:5a:f3:35:2f:e4:
54:28:ff:a9:6f:e1:a4:e2:4d:82:d8:cb:c3:a1:c0:
e7:b5:b9:03:f8:03:13:0f:33:71:ce:2a:1c:02:46:
d4:94:ef:b8:f8:26:26:9c:94:a1:48:37:99:3d:3e:
26:87:86:bb:a9:38:1c:25:37:80:70:85:14:ab:e4:
b4:7d:cf:36:79:ff:fe:71:dd:10:80:5a:37:45:c7:
45:5e:b6:28:73:16:52:7a:51:0d:fe:26:f6:d4:bc:
93:31:12:b7:ff:51:8f:51:26:a8:a6:99:b3:1a:8e:
09:00:64:d2:bb:63:bd:5a:17:7a:33:bc:99:88:a6:
36:57:be:6a:49:6a:fd:7d:38:b7:4f:62:47:3d:ef:
bb:8c:9d:21:c4:1a:0b:0d:00:5d:44:c5:5c:2f:a1:
80:39:a0:88:d3:46:ef:6d:19:65:4e:4b:95:48:94:
ad:cc:aa:71:bf:40:97:2f:14:c8:40:5c:90:f0:f9:
7c:34:44:b1:74:41:28:b3:1c:59:c4:de:24:ab:12:
6c:53:f3:48:29:20:e2:93:6a:50:34:ea:a3:45:50:
73:cd:9d:a8:c8:2b:8e:05:7f:5d:0b:15:ad:e9:bf:
10:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:78:1A:B7:31:F3:5D:92:4B:67:A2:B4:0D:9E:47:16:C1:08:FD:BD
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:aa:a8:f3:48:c2:40:32:71:70:5a:0b:5d:12:bc:da:b1:ad:
9d:66:49:5f:6d:a7:f9:17:f8:a1:c2:7a:5d:0d:ee:87:61:b8:
2f:37:3e:66:4e:7e:5d:89:32:bd:31:77:c1:3c:ec:cc:72:3f:
ca:07:b7:ad:f5:0e:6f:43:07:49:3a:0a:fd:0e:ed:ae:9d:bd:
a9:f8:12:de:1c:e5:3d:17:46:fa:1b:cf:7b:72:cc:1a:e5:6b:
55:cb:21:79:aa:51:ca:46:e4:ed:ba:d5:3a:7f:33:75:98:9d:
86:4d:10:fb:d2:d4:25:43:1b:7e:1e:f9:91:da:6c:58:88:28:
f5:3c:ab:cd:55:e4:90:e7:c0:0c:2e:cf:20:3b:1d:9e:8b:1b:
dd:1e:c6:3f:c6:31:74:a1:da:b5:9c:37:a1:95:04:66:a1:03:
31:55:a7:ca:95:58:af:3e:54:ce:31:b0:b6:7f:30:71:8b:de:
49:23:b9:94:28:db:29:54:d8:b4:73:ae:d4:0f:0d:91:fd:03:
e6:d3:f9:3d:7b:27:89:df:91:33:51:a6:d0:57:23:7f:51:73:
9a:76:6b:6c:3e:12:92:16:75:3b:8b:46:6b:22:ab:e7:95:53:
3a:99:ef:35:94:c4:85:a2:a8:a0:18:40:11:13:a4:05:cb:e5:
d2:a5:77:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:59:31 2025 by rpki-client