Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
File: 4i1-riHYuu6d5pQNjOaynZKpAx4.mft (raw, json)
Hash identifier: TLr89A5V551qcF7QCI9l0i6Z83fX8o4P3eCme4oQMLw=
Subject key identifier: D8:D0:D8:36:60:3A:C6:81:58:95:A6:0C:A8:80:49:54:99:93:B5:CE
Authority key identifier: E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
Certificate issuer: /CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Certificate serial: 0199FE10479B549617ED668895624BCD5B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
Manifest number: 0622
Signing time: Sun 19 Oct 2025 20:01:43 +0000
Manifest this update: Sun 19 Oct 2025 20:01:43 +0000
Manifest next update: Mon 20 Oct 2025 20:01:43 +0000
Files and hashes: 1: 4i1-riHYuu6d5pQNjOaynZKpAx4.crl (hash: 6oH1rHCZFU50ClNKfraF+6fbJmbE8d3422Kk3jypRW4=)
2: Ym4cY_1EuRnkCyF3T4bm70pYxjE.roa (hash: AkplZO86AEiMlgSJVWAGSBviunFDjdLnWUMhCPpbyQE=)
3: iIMfjrcM-EEaIrK48S4AaqdLSDc.roa (hash: kGHhJdo0yzn2T1RMM++JhdnOAbfrtsEDL/H5s4If3hE=)
4: kVLjxhxgFuqXEqXn9rCH2eEb9oA.roa (hash: QbtMbRiPhMHo4O/j41QZux+PuXLhM2M+5dr1jmr3fpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:10:47:9b:54:96:17:ed:66:88:95:62:4b:cd:5b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22d7eae21d8baee9de6940d8ce6b29d92a9031e
Validity
Not Before: Oct 19 20:01:43 2025 GMT
Not After : Oct 20 20:01:43 2025 GMT
Subject: CN=d8d0d836603ac6815895a60ca88049549993b5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:5e:bc:2e:10:6b:1c:fc:70:c2:9e:4e:73:
78:60:f6:99:5f:9a:5a:c0:02:72:71:52:f4:20:93:
e1:10:d2:83:60:2e:0c:7c:72:be:45:f7:38:2f:7a:
a0:be:bb:79:58:df:9b:81:de:7b:a7:a4:d0:2c:31:
9f:b3:49:4d:3c:9f:19:ff:9f:89:5d:6f:dc:87:19:
4f:4c:f7:b4:e6:c0:e3:dd:ff:84:62:56:9b:c9:bc:
f9:08:50:62:f9:37:dd:3d:c9:14:11:74:06:19:e4:
84:11:94:a3:51:23:e2:3c:d3:81:7f:6f:72:93:56:
d7:6c:9a:dd:a3:2c:32:5a:9b:19:37:b7:33:0d:72:
4a:4e:1a:af:51:a9:2e:f3:de:52:09:ba:45:3b:06:
38:3b:84:ff:c7:a2:2a:fa:b6:bd:41:66:a5:0f:be:
bc:54:5e:b6:f4:0d:21:b4:1c:61:96:86:54:78:61:
d5:ff:a6:7c:d2:14:34:17:45:e0:45:6e:d0:fd:93:
5c:d9:5c:f2:d2:21:e7:e3:7f:e3:99:15:f5:1f:b7:
6f:47:f0:37:b8:d5:be:60:89:7b:81:ef:68:53:2d:
a0:5c:6d:6b:fe:23:80:f8:04:58:eb:f0:cd:d5:95:
7a:d6:94:d1:f7:57:42:63:e8:63:cf:54:7e:3f:7a:
00:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D0:D8:36:60:3A:C6:81:58:95:A6:0C:A8:80:49:54:99:93:B5:CE
X509v3 Authority Key Identifier:
keyid:E2:2D:7E:AE:21:D8:BA:EE:9D:E6:94:0D:8C:E6:B2:9D:92:A9:03:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4i1-riHYuu6d5pQNjOaynZKpAx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ab8070-4f58-4634-9a44-387536d03a71/1/4i1-riHYuu6d5pQNjOaynZKpAx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:10:f7:cd:e2:91:c8:4e:91:71:5f:3f:72:13:d5:62:b3:68:
2c:02:70:fa:ad:98:47:f8:7f:08:1d:3f:80:cb:95:24:b4:d3:
f6:94:7c:90:6c:2e:64:ed:90:e4:9f:56:98:08:62:81:93:f9:
b2:76:a4:29:5a:c1:a5:45:10:1f:be:3c:64:00:d1:34:59:db:
cf:3b:0b:5f:b0:8e:8d:a6:69:bc:02:e4:b7:c1:81:9b:39:c6:
4a:54:82:c9:a0:ab:50:5f:71:c3:ce:ba:3e:9e:ba:4b:82:91:
99:6f:2e:dc:cc:f2:e0:27:d4:50:60:66:21:db:dc:37:da:d2:
d2:e5:de:1f:aa:34:1d:23:69:c2:c6:0b:e1:97:6c:6d:08:ce:
04:25:78:86:a0:1d:1f:31:d0:b8:b8:98:4f:2f:db:4c:8a:5f:
f2:39:09:f9:73:0c:23:3c:df:2b:32:b8:e9:47:85:d8:05:47:
d7:1e:a7:a7:90:cc:c5:a1:03:9c:7c:9a:8f:de:de:c9:44:c5:
5a:9d:ff:1f:30:6c:70:ce:b9:ec:57:71:04:73:fd:03:c9:28:
13:b8:77:64:f1:50:70:ad:c6:87:3e:c5:09:c1:ae:06:ce:1f:
cb:92:40:b3:e9:d1:ee:d0:11:dd:f9:83:fd:ca:42:25:a6:6c:
31:96:d0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:46:54 2025 by rpki-client