Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: tddFgpa8va/qo8NXTgCUj5GlTsT1PPizRvF5EL0EnO0=
Subject key identifier: 6E:77:50:0C:DA:92:E0:9A:FD:C7:C0:CB:C1:09:67:E1:6C:6F:B4:F9
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 0199FC8FC1C6A6D32F11085C465A87FC26E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 0AA4
Signing time: Sun 19 Oct 2025 13:01:43 +0000
Manifest this update: Sun 19 Oct 2025 13:01:43 +0000
Manifest next update: Mon 20 Oct 2025 13:01:43 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: gsgj78Xzc2XAkELVswi57Zggf2kWzvg+Z8Y9goPscyQ=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:c1:c6:a6:d3:2f:11:08:5c:46:5a:87:fc:26:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Oct 19 13:01:43 2025 GMT
Not After : Oct 20 13:01:43 2025 GMT
Subject: CN=6e77500cda92e09afdc7c0cbc10967e16c6fb4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:bc:c2:30:0f:30:7e:7e:3c:1e:de:a4:cb:
f0:da:06:f8:28:a7:9c:32:ac:18:a9:6d:03:83:6c:
4a:b1:03:f6:66:cb:d8:03:14:59:98:6c:ed:80:21:
e0:48:61:a0:35:16:bd:e6:bb:64:85:e2:18:69:6f:
9f:c0:7a:42:a4:01:94:5d:88:9f:11:96:9e:24:17:
8e:0f:ea:a9:aa:bd:9f:4d:22:a8:85:d7:a1:bf:c7:
65:95:94:28:31:f3:c4:e4:1a:44:26:5d:1b:34:50:
f9:5b:a5:8f:b6:4d:40:3e:79:b2:c8:92:bf:f8:a0:
61:64:8b:18:75:c1:dc:64:65:c2:a4:6a:23:aa:1b:
42:44:86:99:0f:05:4f:b3:6d:bf:9d:78:ea:b1:0f:
98:19:7a:a7:b3:38:44:84:8e:cb:8c:70:d0:41:45:
ed:b3:24:1e:31:27:3d:f2:6c:e9:22:8c:00:3d:d2:
93:12:20:4a:f2:f7:02:db:ca:95:e8:04:0a:39:31:
a6:39:7a:e8:a3:77:52:0c:99:37:eb:51:ce:23:ed:
16:bb:97:6b:cb:78:5e:7e:f7:49:55:e6:47:e2:27:
99:19:7f:30:00:6e:cb:b0:a4:13:36:90:df:fb:1e:
f6:8e:0a:2d:a0:9e:5c:fe:98:41:df:5b:6b:0e:64:
08:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:77:50:0C:DA:92:E0:9A:FD:C7:C0:CB:C1:09:67:E1:6C:6F:B4:F9
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:76:77:38:20:dc:2e:cf:bf:63:27:0b:ff:fe:5b:bf:ba:ff:
54:0c:3d:fb:bf:67:17:69:3d:65:af:76:3c:e2:fe:b4:bc:d6:
3a:2a:5e:51:ab:a7:ce:90:ec:8a:59:ed:5f:fe:76:c5:5e:f7:
10:92:ce:08:db:21:5f:28:b0:fd:fa:33:20:1f:9d:33:d3:e1:
1b:c8:18:b7:a7:26:fc:c7:b3:91:9d:f7:23:16:21:42:8f:8b:
60:e3:78:ee:e9:0f:db:94:72:1d:db:c4:3e:9c:9c:2a:99:15:
2a:9f:71:68:2c:65:87:b6:f5:89:42:21:67:47:3f:69:b5:86:
1f:45:9e:34:a0:7e:de:ee:56:7c:8f:50:59:02:b3:49:fb:1d:
e2:e7:68:b9:38:2f:0a:2e:ef:e8:87:ba:08:67:c2:ff:4b:e6:
7c:c8:84:f0:e5:48:60:d7:4c:8e:0a:f3:9f:7b:50:93:e6:aa:
e6:6c:24:9d:8a:ec:dd:a8:dc:3f:9d:ff:65:75:99:2f:0e:63:
ed:68:f1:b2:d1:3c:50:75:32:d2:5b:ff:da:c4:9c:02:3b:b2:
a6:fb:1b:4e:8a:e0:b4:9b:38:5d:f5:f5:30:f0:0f:74:8e:8a:
44:7a:4c:a9:cd:69:5f:56:50:2f:f2:49:f5:f7:61:4c:5d:58:
97:a0:0b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:32 2025 by rpki-client