Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: IlTJ/iZ4gKfReV+3q8k88FWSNUW5BFwQIF41+Jnkpfo=
Subject key identifier: 29:7E:03:1F:4B:C2:09:ED:CE:E3:97:A9:E5:B4:CD:32:45:17:4B:4A
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 0199FEB4BF0A01F409FDC2FA05D9086FFD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 23:01:22 +0000
Manifest this update: Sun 19 Oct 2025 23:01:22 +0000
Manifest next update: Mon 20 Oct 2025 23:01:22 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: Se95UxFe/oQsjfL+Tsj1KKkNev09Gm7XexG8CGKTQKc=)
2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:bf:0a:01:f4:09:fd:c2:fa:05:d9:08:6f:fd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Oct 19 23:01:22 2025 GMT
Not After : Oct 20 23:01:22 2025 GMT
Subject: CN=297e031f4bc209edcee397a9e5b4cd3245174b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ef:09:07:69:9a:68:22:9b:bd:de:61:40:5c:
6e:c8:3d:d5:35:56:2d:f3:54:7e:63:49:48:3b:dd:
0e:14:a2:d8:73:3c:d2:09:67:ee:1b:55:2e:f7:27:
8a:5e:21:23:28:21:42:12:1d:cf:f6:15:18:0b:42:
6d:1a:f7:1c:12:1f:88:c6:d3:32:81:ff:e0:75:77:
88:6e:37:25:84:23:3a:51:b2:a9:69:52:5e:31:1d:
93:7a:19:d8:6b:b0:2a:a0:41:85:82:e3:c0:a6:34:
c1:79:11:c7:73:11:95:b6:20:11:97:ee:54:ef:e8:
5b:69:00:4a:12:31:7c:61:ad:ff:c4:6b:6f:a6:eb:
da:8b:ff:6f:3d:62:2e:e4:c6:82:86:10:ed:ba:0e:
a7:5c:db:80:d5:ef:bc:04:05:21:62:90:cf:1b:b6:
86:06:60:8f:36:58:e9:2a:a2:ea:8c:dd:3e:49:d1:
a2:f3:77:88:b0:ae:6f:69:ea:53:0d:b2:c6:95:50:
ea:e0:f0:0d:70:24:a6:d0:2f:52:f9:dd:4d:ee:f7:
e6:d7:59:73:59:4d:dd:94:f0:d2:f2:6c:0a:04:ef:
d1:9e:c8:ae:dc:2c:85:fd:51:9c:ba:b9:41:b6:b3:
14:37:8c:f3:60:da:6e:cc:34:df:d5:79:cb:15:87:
53:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:7E:03:1F:4B:C2:09:ED:CE:E3:97:A9:E5:B4:CD:32:45:17:4B:4A
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:45:8e:04:1e:c0:c2:fd:48:d1:05:f8:71:74:95:43:70:09:
1b:48:68:40:9c:ef:b9:f4:7e:21:0b:56:06:e1:87:e2:90:8f:
7a:3b:dc:4f:17:ea:01:11:bb:35:20:f9:59:38:ce:bf:14:0d:
e0:06:e7:78:ea:c8:03:c6:84:3e:c5:59:ec:c7:49:c9:fc:3f:
17:40:f4:eb:95:b3:df:25:ac:9c:8e:1f:dc:8b:47:8e:f1:83:
e5:c8:59:a1:5c:06:59:95:2c:17:35:bc:69:58:16:b4:64:1c:
b0:8f:6a:a4:33:3d:e8:c6:28:d3:87:cd:a7:e6:3b:e4:b2:5f:
0a:7f:4d:d0:69:c4:85:a1:9a:ae:fb:9f:e6:d1:5e:57:1a:a8:
7a:da:dc:57:ba:8c:aa:26:2c:f8:bf:c2:1c:af:5a:76:1b:f2:
66:96:1d:64:97:eb:b5:b5:69:64:fa:03:38:a0:ff:94:8e:95:
58:0b:c7:0f:6b:ea:89:88:c6:86:cf:2a:92:38:e4:dd:7b:d1:
c7:07:85:9a:4b:34:a4:c1:cd:15:90:dd:41:f7:fd:e3:a7:8b:
f7:56:68:32:c9:8f:a9:38:93:cb:e5:23:ea:9c:68:41:fb:93:
20:f0:7b:76:bc:25:31:ff:9f:e3:b2:2b:e0:6e:c8:ff:de:23:
4c:ea:fb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:42:07 2025 by rpki-client