Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
File: s4slrXyWWJ5KjKpfpIksxN_Me1M.mft (raw, json)
Hash identifier: lA6rk1CZN1QlUvF8YgGnGz2XD+F8D8QN6A4lwXai87w=
Subject key identifier: AB:CA:79:77:9F:5C:A8:EC:EA:B7:D8:85:4F:26:C4:40:7D:52:46:4D
Authority key identifier: B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
Certificate issuer: /CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Certificate serial: 0199FB7CBF9B39EA2F4572CC1E1E621E7E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 08:01:20 +0000
Manifest this update: Sun 19 Oct 2025 08:01:20 +0000
Manifest next update: Mon 20 Oct 2025 08:01:20 +0000
Files and hashes: 1: JJG6lSZApZVFWCoCMzoaHnqrdjA.roa (hash: /ZXBf7GoIevwDbia6b3jjdIqB98IB5pgV+PKh4AI8CE=)
2: s4slrXyWWJ5KjKpfpIksxN_Me1M.crl (hash: 2VJ7WeFZKCQWLbQ0N9mQuYzE7wlzs1Y5oubpTBPG1Vw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:bf:9b:39:ea:2f:45:72:cc:1e:1e:62:1e:7e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38b25ad7c96589e4a8caa5fa4892cc4dfcc7b53
Validity
Not Before: Oct 19 08:01:20 2025 GMT
Not After : Oct 20 08:01:20 2025 GMT
Subject: CN=abca79779f5ca8eceab7d8854f26c4407d52464d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b3:d8:31:d7:3c:86:7d:aa:a7:06:63:f7:3e:
88:16:c8:cb:a1:08:63:2c:66:c7:38:21:fd:59:55:
e8:4f:80:a6:8f:00:ce:00:5e:bf:01:45:df:6c:b9:
7f:2c:a6:4c:99:ec:dc:13:bb:fb:14:5f:53:62:47:
18:6e:43:95:64:95:78:35:4e:04:53:cf:6e:93:ec:
4d:c8:5f:21:58:3b:dd:97:c6:64:b0:f4:b5:98:28:
be:69:7c:31:13:07:71:dd:0a:f2:86:1d:04:72:e9:
f7:a5:bc:5b:bc:f4:c1:84:a2:d1:be:04:18:ae:ac:
7c:4e:b0:39:4b:42:2e:8e:d4:3c:5a:6d:0d:0a:19:
d9:84:3f:67:bb:d4:a7:9d:ba:4b:dd:9d:4e:60:43:
c4:a2:35:e4:c0:11:bb:14:50:09:dd:ff:f5:a1:c2:
c1:45:69:87:02:0e:5a:5a:31:2b:03:ff:0f:70:93:
8c:7e:93:7e:5c:e9:63:a5:0f:2e:a1:e8:2c:de:af:
f5:5d:6f:f1:59:50:5b:f0:a2:70:70:15:d1:58:7c:
d2:8a:6e:19:2d:a0:a0:62:a0:f0:11:e8:87:ac:3e:
7a:e5:05:bd:65:35:08:75:fb:c0:8d:11:0f:ef:49:
90:18:04:63:66:bb:7d:2b:cf:a4:ba:c4:5c:4d:5a:
cf:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:CA:79:77:9F:5C:A8:EC:EA:B7:D8:85:4F:26:C4:40:7D:52:46:4D
X509v3 Authority Key Identifier:
keyid:B3:8B:25:AD:7C:96:58:9E:4A:8C:AA:5F:A4:89:2C:C4:DF:CC:7B:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4slrXyWWJ5KjKpfpIksxN_Me1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/4291a2-03a9-4195-b1a7-3f40547e52d1/1/s4slrXyWWJ5KjKpfpIksxN_Me1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fe:09:5b:43:14:6c:1b:b3:06:96:36:e3:b6:c6:f1:5c:ea:
1d:be:80:09:0c:70:c0:7e:ba:2f:d5:e4:30:0f:a9:33:a9:f6:
ae:5f:a1:e7:4a:6b:2e:f5:a6:78:ea:7f:f5:bd:7e:f3:63:79:
fd:02:c2:d1:69:7c:2c:60:f1:e9:dd:54:24:26:95:80:e2:a3:
ee:e9:f4:57:af:10:b0:f0:8f:e1:fc:c7:53:78:32:9e:f7:9c:
cb:9e:1e:67:60:ff:f5:9d:57:8c:86:61:a6:6d:9e:42:3e:b4:
2e:80:24:2c:71:e8:09:43:59:60:b4:9d:65:9e:01:a0:e8:a1:
86:f2:80:4b:e1:a2:ce:e3:ed:3d:28:df:24:5e:7f:39:dd:e2:
71:25:ce:c1:41:d8:97:07:eb:bf:51:81:4c:90:dd:89:db:b5:
b9:fe:b1:17:04:c2:23:94:d3:81:be:74:8e:f2:1e:3c:97:13:
4c:62:1f:09:11:49:a6:21:05:d5:c9:7d:46:9b:a7:db:8a:ab:
21:67:fa:a7:87:c3:bf:5e:43:07:d7:e0:7b:7e:b7:69:6c:1e:
b0:f1:8e:9f:e1:7e:18:f2:b7:21:15:2b:20:f2:4b:f1:d6:2b:
fd:23:e1:dc:43:3a:43:fe:fa:3e:68:c7:5c:1e:10:77:cb:9d:
e0:57:79:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:24 2025 by rpki-client