Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: 5Fmz0LaAlt7ZkGspNEB0CItSWLG708gUVmLNXZ0yi7Q=
Subject key identifier: 55:A6:CA:F0:06:96:BB:2E:75:7B:08:A7:9D:7F:50:05:BC:06:B0:1E
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 0199FC587BE1E114E0B1FCF31774CAE9425E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 12:01:21 +0000
Manifest this update: Sun 19 Oct 2025 12:01:21 +0000
Manifest next update: Mon 20 Oct 2025 12:01:21 +0000
Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=)
2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: hlerqpZhf8Bg5C3nNzoTYhuMomHJQWi/g4gertlsTAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:7b:e1:e1:14:e0:b1:fc:f3:17:74:ca:e9:42:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Oct 19 12:01:21 2025 GMT
Not After : Oct 20 12:01:21 2025 GMT
Subject: CN=55a6caf00696bb2e757b08a79d7f5005bc06b01e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:0e:dc:90:bc:21:6d:ef:1d:d2:4f:01:e7:
02:3f:a8:f2:19:b6:3b:aa:5f:89:ee:5a:40:48:f9:
ce:8a:57:3e:2e:b0:4d:cb:7f:ff:1f:71:37:9a:b7:
97:54:3f:b8:60:a7:01:53:65:8b:42:5a:a0:16:57:
cc:59:dc:af:e6:10:bc:b2:a5:0f:11:40:41:d6:47:
73:43:5d:d3:2f:f8:af:b9:e6:1d:5f:dc:f9:d5:11:
a1:e1:05:2f:84:a4:f2:71:08:3f:42:b6:8d:1a:97:
46:ae:e6:16:62:60:66:a9:4e:92:c3:e4:5a:80:c4:
03:18:c4:63:d7:a5:52:a9:e6:8c:a5:68:06:f4:43:
7d:78:8b:cd:0e:25:74:99:4b:0b:3a:bc:6a:92:db:
fc:b0:8d:2f:2d:e3:dc:89:c8:0b:4c:77:79:91:65:
07:d4:5e:63:e9:69:dc:d0:e1:01:13:82:d3:8a:74:
bb:50:5f:ba:9d:99:6c:b1:4f:b7:65:c3:a2:83:9f:
9e:ee:e4:b6:d0:4c:69:2f:88:c2:2e:51:60:0e:c7:
46:38:88:45:c0:b9:65:33:d4:d1:20:ff:7e:c8:95:
d6:24:98:88:23:b2:cc:e8:45:2c:d0:d3:7f:cd:5e:
01:c1:8c:98:ad:43:49:b8:98:88:93:d9:46:c1:3f:
26:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:A6:CA:F0:06:96:BB:2E:75:7B:08:A7:9D:7F:50:05:BC:06:B0:1E
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:69:14:25:d1:33:be:c8:39:ef:97:cf:b9:fa:29:22:1a:4d:
21:95:70:7f:aa:af:9a:51:72:3b:52:69:68:b2:81:d9:dd:e7:
b9:0e:fa:85:6b:89:2b:5f:c4:54:57:e3:bd:60:0f:a2:74:37:
52:ab:4d:03:5a:ea:f9:20:17:7c:b3:bb:12:41:3c:0f:ce:70:
33:58:f1:04:0e:0e:7c:cf:16:ce:9f:f7:07:63:5c:59:3a:ca:
be:ce:3b:3d:ec:d4:36:f7:ba:bc:51:0f:97:31:e8:89:ad:3f:
76:da:e0:c1:42:f8:27:15:8f:06:be:ed:f6:2f:15:db:23:d7:
59:af:a8:6e:5f:fc:24:a4:46:3c:75:0b:da:4d:ee:94:7f:67:
66:36:7d:78:6d:b9:86:20:83:6c:16:e2:39:f7:22:ef:b1:f9:
d3:9e:89:7a:03:3c:64:18:1d:a1:10:cc:ba:72:51:a4:27:19:
e3:28:f9:d0:15:65:66:92:ef:b3:99:c0:26:62:ba:22:b0:b8:
fd:b1:e3:2e:a8:30:4e:ec:a4:3a:d6:f4:2f:b0:53:2b:4e:6a:
d6:c1:f9:e9:ab:30:15:22:10:ff:31:b0:f3:8d:9d:f9:67:7c:
16:98:d7:ba:a4:e0:53:ac:ee:62:fa:bf:58:58:79:3f:8c:8c:
71:1a:33:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:08 2025 by rpki-client