Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: k2cba5Y6MjEu8mJFrRmHUN7Hv3LFRQHxfp1r9lpTUG0=
Subject key identifier: A0:61:72:A6:FE:2E:BB:E3:22:0A:26:90:B5:8F:D7:FA:9F:81:63:7C
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019A0411C15ED8998484CD3E061970252474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 16EE
Signing time: Tue 21 Oct 2025 00:01:03 +0000
Manifest this update: Tue 21 Oct 2025 00:01:03 +0000
Manifest next update: Wed 22 Oct 2025 00:01:03 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: krg/eXrEHzlGHImspUM4DmOZVs9EjskQgobFTyCHvik=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:c1:5e:d8:99:84:84:cd:3e:06:19:70:25:24:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Oct 21 00:01:03 2025 GMT
Not After : Oct 22 00:01:03 2025 GMT
Subject: CN=a06172a6fe2ebbe3220a2690b58fd7fa9f81637c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:7b:89:4e:fe:66:e1:46:d5:40:2f:6c:7a:
fa:03:3b:84:ff:b8:bb:60:8d:cf:2b:8d:db:fd:20:
26:87:6d:36:64:71:06:c0:f2:89:b9:69:0b:44:d8:
a3:95:90:cd:2b:c5:1c:89:46:ec:65:c3:d7:89:78:
70:43:7c:3b:53:71:bd:34:8c:ba:e3:4f:9f:e0:e7:
8b:9a:71:31:ba:bc:5b:89:e7:59:39:53:07:d4:55:
eb:f2:7d:97:01:ac:5d:25:51:39:55:e1:e2:fb:7b:
80:12:5d:4b:a7:1b:c9:a3:db:f0:21:a2:74:c0:9f:
9a:8e:9b:94:6c:12:ab:58:30:a8:74:b6:e4:ce:aa:
18:e8:8c:9e:73:8e:97:8a:28:4f:d4:d8:aa:57:1c:
92:14:8d:1a:6e:21:ac:1a:34:3e:ce:41:b0:23:af:
8d:5a:77:3c:13:fc:42:ea:8d:31:0f:54:ca:2d:e0:
ad:66:97:b4:e1:c2:0f:e9:14:fb:36:2d:0d:f1:77:
7c:e0:08:c3:0e:b0:24:c4:99:dc:e0:22:b5:7f:8d:
70:0c:57:86:08:f5:58:18:04:5c:af:c6:06:3e:75:
6e:84:f7:ce:0e:5b:1a:21:9c:20:e5:49:c9:94:80:
98:6e:30:1e:31:7e:b7:f8:3c:ce:25:eb:39:6c:69:
68:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:61:72:A6:FE:2E:BB:E3:22:0A:26:90:B5:8F:D7:FA:9F:81:63:7C
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7f:3c:86:15:b5:6b:a9:2a:f6:4a:9e:5b:d9:8b:b5:14:5a:
72:2e:89:50:75:54:77:ed:47:69:2d:da:6b:f9:14:da:87:5e:
de:5a:a4:60:b5:78:34:d7:7e:2b:d5:36:37:01:61:5b:d3:08:
d9:a4:04:51:a1:6e:d5:d5:53:44:37:d4:ef:f1:9e:29:bd:dd:
2b:78:6a:cf:88:a1:4f:ee:7d:8e:f8:f7:4a:48:bc:5f:a1:7a:
68:01:f9:74:db:ec:b1:cf:56:17:93:7a:1b:ae:ad:f2:25:ba:
1d:4a:b6:4b:a8:ca:26:7d:7a:18:80:c2:4d:4a:76:b5:b7:2a:
48:16:fc:64:d0:b1:40:09:22:c5:30:cc:31:c8:ca:37:1d:9f:
24:82:84:4c:d2:59:a0:c6:9f:72:cf:76:88:f0:14:70:f7:b0:
58:3d:1f:e5:25:a6:9c:7c:b4:28:61:74:8a:76:7e:bf:cf:e1:
4d:18:ed:bd:a7:f8:69:6c:d5:79:c8:f7:66:4c:16:c9:59:02:
e5:c0:93:70:1c:26:8e:44:bf:3b:42:6b:8b:08:95:8e:b6:62:
15:d4:8c:8f:2e:69:40:72:11:15:12:9b:31:27:f0:ba:d7:73:
14:35:2a:be:fa:f8:55:1e:af:c0:d9:e0:b3:3f:11:f3:13:d0:
79:07:ca:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:42:24 2025 by rpki-client