Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier: 5+mcg0aH/fAusbL7ayNMqR1OZ7YacOmWTESLB75zv+A=
Subject key identifier: 5B:E1:9A:8D:4C:1F:82:F8:65:CB:22:4C:DD:33:11:A2:E3:4B:B8:0E
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial: 0199FC58F40A8406E7B914D54CEC2870ED54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:52 +0000
Manifest this update: Sun 19 Oct 2025 12:01:52 +0000
Manifest next update: Mon 20 Oct 2025 12:01:52 +0000
Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: FIQC/o27JW71LRwnbVMTCuTxZdnBfPUFCt57K2eurKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:f4:0a:84:06:e7:b9:14:d5:4c:ec:28:70:ed:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Validity
Not Before: Oct 19 12:01:52 2025 GMT
Not After : Oct 20 12:01:52 2025 GMT
Subject: CN=5be19a8d4c1f82f865cb224cdd3311a2e34bb80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:5e:6b:b4:31:92:91:b1:bc:d8:50:8b:db:
13:0d:23:07:87:4e:7a:13:ad:7e:e0:a9:7c:d2:02:
71:a0:35:88:c1:d2:7b:f2:86:2f:27:11:5b:27:63:
48:b2:16:a0:b2:48:e6:3b:c3:b3:79:85:3b:32:13:
2f:1e:74:90:e5:e5:a3:d0:7e:e5:91:77:41:bc:b4:
cc:3a:eb:2d:07:7d:d3:fd:1d:d6:98:72:b1:8d:09:
54:52:0c:27:b9:05:96:4c:c0:e7:db:26:a6:2a:8b:
f4:04:83:a2:18:18:7c:29:d2:3a:bd:fe:9a:86:fb:
ba:28:f9:48:89:a3:33:1e:19:84:e9:32:a0:98:b3:
48:6b:fc:7c:22:7a:fb:fd:f2:e7:ab:d6:ce:eb:62:
df:b1:30:56:19:5c:6f:e6:aa:02:a4:f8:12:e6:e4:
76:04:96:fe:2e:ae:de:9b:7b:65:12:52:ba:6f:d9:
4d:20:96:ea:db:71:3b:11:e9:c1:95:20:f9:a8:b4:
7d:94:9e:96:a1:5d:06:74:c3:56:d3:a1:67:24:8b:
09:f1:4d:f1:2a:5f:97:ac:75:c7:ed:3f:46:54:ee:
f7:7a:fb:dd:b9:19:58:f4:bc:39:b8:22:03:fb:88:
90:a1:8d:fb:61:bc:1f:b0:d0:a4:b7:b0:cf:61:d8:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:E1:9A:8D:4C:1F:82:F8:65:CB:22:4C:DD:33:11:A2:E3:4B:B8:0E
X509v3 Authority Key Identifier:
keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:2a:17:2e:bd:af:52:66:9c:71:7b:8d:61:24:7e:ae:b8:71:
f5:c2:50:6d:3c:8e:e9:55:4b:21:31:be:f1:68:96:d6:69:bc:
49:3e:d4:58:f6:54:de:e6:d9:61:bd:71:e0:4f:99:04:3e:73:
f6:f0:a3:46:9d:3a:31:91:9b:88:ef:e8:b7:84:d3:b4:11:a7:
8f:cb:f3:7a:c5:fc:75:30:52:f9:22:e7:e8:e5:6a:86:85:66:
29:22:47:a7:57:d3:2e:a8:7b:1a:37:7f:d1:7b:97:04:27:19:
da:b0:46:30:21:76:47:7b:68:6d:f8:c8:4e:de:15:57:92:04:
73:1d:39:54:8a:ff:a3:e0:65:e2:d3:0f:91:fb:24:17:4d:6a:
f5:61:37:b8:15:16:b0:87:1e:10:f5:bb:83:e2:87:c8:66:22:
78:e7:31:60:51:83:37:a3:34:8f:fd:78:32:d1:3d:9e:30:4b:
36:bd:df:2e:3f:b6:1a:3c:e5:6f:a3:8c:5e:d6:48:ee:bb:70:
8b:6c:68:d1:89:9b:b7:2a:e0:8b:eb:6e:a3:59:d6:53:14:b8:
cc:bc:79:56:ae:db:e1:60:f1:87:db:b7:f6:36:36:f2:f6:10:
64:c7:fa:25:93:44:40:be:81:89:bb:74:ab:3c:3d:8b:72:ae:
1f:78:05:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:02 2025 by rpki-client