Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
File: 4FdMKHjWtTYTm4lfCMnG2xjhKps.mft (raw, json)
Hash identifier: yHAiTPc8e8EtQguq8ruhNDO7LOjWxiXd4BFPxIKPYuo=
Subject key identifier: 9A:81:97:D4:4E:C9:2F:55:7E:1B:74:25:B0:8B:FD:DD:13:86:24:5A
Authority key identifier: E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
Certificate issuer: /CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Certificate serial: 019A0222F9CB66C8A27E243D647503B33A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
Manifest number: 16ED
Signing time: Mon 20 Oct 2025 15:00:37 +0000
Manifest this update: Mon 20 Oct 2025 15:00:37 +0000
Manifest next update: Tue 21 Oct 2025 15:00:37 +0000
Files and hashes: 1: 4FdMKHjWtTYTm4lfCMnG2xjhKps.crl (hash: XK6OVJ5d6S7Yrjq7xiJLhQhSN5h3yAoRi/jCPx9e/S0=)
2: F5_lNgEgzfWoE5_Cqsta810GUD8.roa (hash: iFMsbMYL1gucfU8DYPuCeVZjMtj1pfRR/WALBk/WmbI=)
3: GPk2iBuHJkhE3vpf7v6PEKywv7w.roa (hash: GWqOVJmjwk1Pn1GbnWABjMV1e5ehhhP81Lyr4q/ji2E=)
4: OflCzXga8ucfjVqp9uUhh7zK_qM.roa (hash: tJ4j/9WnUQafTpRcoYrdjgTWc0yGFpsicsnou7Bw3VU=)
5: SwP1NYlZc5jbDBXXeMNl1hjy1LA.roa (hash: DMSgzACIbB/JZuNfMaMP2kCv3jA/gmECBXJyT4DQzwk=)
6: W6KxeoLPp69-NZgXYljCkgfMzmI.roa (hash: WWTdkNcNGcm7BbXaoCx/steftEF6zzmySvzLX5r6lpM=)
7: aAP3usYXoFfJgmCfE8_VSaJGbTU.roa (hash: x6wsw/R7hONUKg46ARfXmJgysd6wAhjXDI0EDejXv3A=)
8: uGW4wsIIh4UfRdPgdZPrknwT0_s.roa (hash: DewiqU6mTjj3HeFVXlyQsAjNkoAtpsCRp10m8FffrLA=)
9: x9MROVO0I_4DbRC-cdgvtpUcqSo.roa (hash: nmMjnQZ2GqEE7VMtJSqrjcD6wbWb5UdEwkmJmCMyG7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:f9:cb:66:c8:a2:7e:24:3d:64:75:03:b3:3a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0574c2878d6b536139b895f08c9c6db18e12a9b
Validity
Not Before: Oct 20 15:00:37 2025 GMT
Not After : Oct 21 15:00:37 2025 GMT
Subject: CN=9a8197d44ec92f557e1b7425b08bfddd1386245a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:29:e9:7e:68:d8:76:10:b8:4c:34:ea:14:43:
31:aa:85:ec:94:a7:05:21:55:76:0a:b3:08:cd:1a:
fe:cb:aa:ab:51:6e:dc:d4:85:f3:39:f6:60:fb:cd:
b5:2f:24:9d:f9:37:16:62:da:b6:86:87:29:e2:d4:
d4:86:f8:1e:11:dc:8f:f6:09:88:ff:e4:7e:4e:b1:
16:00:e3:db:22:c1:3b:e2:c7:2f:b5:6e:95:06:4d:
4a:c8:e3:50:48:ab:9c:44:c6:10:c8:d5:3f:e4:8e:
a6:ff:1b:aa:af:01:b9:3f:3b:76:33:d3:b5:e6:e4:
7a:2a:cc:84:0c:48:3c:0e:cd:93:b7:4e:5c:60:e2:
c2:18:af:c1:5c:ce:86:35:d8:33:1a:1f:c6:dc:d0:
5a:46:c0:06:67:d9:a1:11:3d:51:0b:e7:7d:f6:74:
83:db:96:da:e3:be:e7:90:7e:59:f8:83:08:2a:a0:
47:01:bd:e6:d4:78:7b:4c:90:64:57:22:3b:66:11:
cd:6f:5d:f4:d7:57:3d:52:50:a6:ca:b3:cb:c5:4e:
84:5d:e1:d5:f8:fd:49:f3:4a:c8:c8:8e:7f:ee:b4:
69:b8:c8:21:e2:c4:e7:c7:c1:2e:fb:e4:da:24:db:
2f:b9:df:13:17:de:69:cd:4e:26:6b:2c:b5:50:69:
6a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:81:97:D4:4E:C9:2F:55:7E:1B:74:25:B0:8B:FD:DD:13:86:24:5A
X509v3 Authority Key Identifier:
keyid:E0:57:4C:28:78:D6:B5:36:13:9B:89:5F:08:C9:C6:DB:18:E1:2A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FdMKHjWtTYTm4lfCMnG2xjhKps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/28d600-a869-4ab1-9b2e-446019966a19/1/4FdMKHjWtTYTm4lfCMnG2xjhKps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:24:df:ad:e5:e3:49:2a:67:74:0f:1f:8c:b2:03:19:5a:40:
49:ff:11:c8:ff:0d:8f:67:6b:2b:74:d4:a5:e5:1e:f0:f0:78:
c6:fd:a8:f0:a0:02:a6:99:52:72:43:58:f7:04:b5:df:43:58:
82:79:1b:87:03:53:c1:36:d7:55:16:57:0e:cc:26:8a:89:b7:
6f:1a:bd:56:ed:15:04:d7:08:60:75:98:8f:e9:d3:05:f2:cb:
df:ee:4f:41:f0:93:ea:8a:2a:36:74:64:9e:fa:f7:85:da:98:
08:95:83:bc:34:cd:4c:cd:fe:b2:8e:23:18:e8:54:55:a2:40:
b2:66:24:52:e8:c5:5f:01:d7:58:2c:0d:ef:25:8e:3f:37:eb:
5e:dd:ed:dc:fd:ba:7d:76:02:76:d6:b4:06:b6:13:85:6f:25:
3c:46:1c:2a:76:28:79:35:a1:10:23:25:d9:e4:b5:bc:c9:f6:
38:44:45:33:00:f6:2b:ba:81:e5:8d:20:71:67:40:a3:bf:93:
78:37:f8:1b:e3:b5:d6:a3:9a:33:8b:80:bc:1d:0b:78:0b:6a:
6d:08:a2:06:2a:82:68:a7:6f:97:3c:1d:34:23:56:d3:b1:53:
d5:f0:e5:9d:11:40:e5:30:02:79:6c:7d:5f:8c:6a:87:85:2e:
dd:c5:34:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:41:21 2025 by rpki-client