Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
File: R4x_xrIR4nH3SD9yHUXyON195cQ.mft (raw, json)
Hash identifier: ra/Ff5vKXbegRXrjEqWAyxti0DEa9SBC63P0AACT/rk=
Subject key identifier: DE:B5:94:94:A3:0F:99:A9:BF:1D:C2:AE:CC:27:68:AF:63:FC:A1:ED
Authority key identifier: 47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
Certificate issuer: /CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Certificate serial: 0199FBEB5AE8B2FC2FFC2C3068BDE9E6A603
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
Manifest number: 088D
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: R4x_xrIR4nH3SD9yHUXyON195cQ.crl (hash: nGzSGmBhJ1kQFYJs2L9j1udLyrp80PtEUYgRH0Mibp0=)
2: bgKhGgsXnxYOt5etHFWwqDnUeNs.roa (hash: uM75kFMM5Lx2SB0GVKIXvYn71xMx4/TssgSDMD0euaE=)
3: eJaPcqVrFJ9nAn0ii5m8-wTNE2M.roa (hash: LKpNzbSMRXo8Ez4GuvTIIep3ThOtGE1xLAuyWwSMRJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5a:e8:b2:fc:2f:fc:2c:30:68:bd:e9:e6:a6:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=478c7fc6b211e271f7483f721d45f238dd7de5c4
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=deb59494a30f99a9bf1dc2aecc2768af63fca1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b2:9c:5e:52:78:f2:6c:d4:82:26:91:a1:b3:
61:1d:6c:2f:99:98:77:0a:12:80:71:9e:89:a7:71:
bc:88:0d:79:b5:cb:79:f8:d0:19:b2:22:85:2c:13:
3c:d3:9e:a5:42:fe:52:8d:4f:bd:d9:a0:9d:d6:37:
d5:b7:f7:ff:cd:08:1d:3a:8e:39:31:19:e4:aa:f1:
4d:75:b4:0c:93:10:a4:7a:f5:a7:ab:5a:54:28:0b:
e7:64:97:2b:f3:84:da:ba:ce:8f:4c:3b:8f:fe:4c:
60:93:dd:fe:54:49:eb:22:c0:0c:29:cd:bc:d8:28:
fd:77:43:36:fc:ce:3a:b9:04:81:89:03:49:37:77:
79:25:4d:a3:cf:96:9c:d6:81:e1:f1:c7:d1:8a:72:
51:01:3e:c4:4e:e0:96:72:80:fa:ea:f4:04:69:b9:
60:d5:5b:82:43:44:09:8a:1a:54:c8:05:a5:f9:88:
5a:1d:cb:94:f2:86:ba:86:60:5d:73:73:3b:90:74:
b9:3f:31:ed:c8:46:47:4c:9f:c1:df:2b:e0:e8:29:
c5:b8:cc:af:21:7c:15:48:ef:b4:fb:a8:ad:f1:32:
f7:3d:4a:7e:62:38:1c:90:d0:94:49:4d:0c:59:e0:
ca:b6:ba:f6:13:1f:f2:da:fa:a4:d1:61:3b:4a:ad:
ab:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B5:94:94:A3:0F:99:A9:BF:1D:C2:AE:CC:27:68:AF:63:FC:A1:ED
X509v3 Authority Key Identifier:
keyid:47:8C:7F:C6:B2:11:E2:71:F7:48:3F:72:1D:45:F2:38:DD:7D:E5:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R4x_xrIR4nH3SD9yHUXyON195cQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6e2cbf-7056-4419-b51c-62b1da261329/1/R4x_xrIR4nH3SD9yHUXyON195cQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:81:a7:c8:e1:5b:1c:60:64:ff:f3:f0:5d:d0:1a:0c:54:af:
1e:25:6d:ee:3a:99:eb:de:2a:dc:d3:9a:d1:51:67:e2:1c:a4:
b1:8c:2f:8f:11:d7:d7:44:41:7a:92:33:ab:54:d4:00:39:4f:
b3:73:af:c2:d7:e5:d0:ca:27:fb:6a:17:74:de:1e:bf:48:9c:
16:e5:e4:5a:67:1f:c4:06:76:fb:9d:aa:32:9d:25:6c:0e:f0:
b7:ab:83:8a:74:64:88:f1:ff:b5:33:c0:19:69:3f:dc:43:b9:
d0:4e:76:a7:7e:e9:cd:61:4b:82:fc:7d:0e:02:6f:ed:d3:b2:
67:40:f3:0f:0e:da:8e:7d:79:1e:9f:00:97:4e:50:98:ed:08:
1e:49:f9:cf:75:bc:42:0e:c1:70:d4:dc:fb:8a:a9:5c:63:6a:
82:d8:c9:5c:eb:eb:75:ec:8e:49:fb:5d:38:f2:ee:ac:b8:68:
98:17:d8:ca:e6:8e:f9:93:64:ec:8c:0e:61:a7:02:84:c4:81:
93:ff:52:b8:cf:09:1c:ad:59:e1:4c:da:12:c1:46:33:ae:b5:
75:a4:c3:25:cb:02:4f:f9:4a:4e:56:21:ee:aa:57:b5:11:9b:
98:2b:be:67:e5:96:80:34:91:f8:cd:60:6b:b1:31:86:78:7a:
4f:cf:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:59 2025 by rpki-client