Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: 7gBknTORcA/yTutC84Xg467xifcPx5iA8K4v3jN3nWs=
Subject key identifier: 7F:7B:21:9F:A2:EE:2A:1D:51:92:E4:83:E1:62:9F:8E:8D:FB:33:81
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 0199FBEBE3FE22DF883782B49F2C0849C2CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:44 +0000
Manifest this update: Sun 19 Oct 2025 10:02:44 +0000
Manifest next update: Mon 20 Oct 2025 10:02:44 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: QSm4s48VA5Qfq0zWGTlRh5JmqhC22lj6QxiF8AJs/7c=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e3:fe:22:df:88:37:82:b4:9f:2c:08:49:c2:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Oct 19 10:02:44 2025 GMT
Not After : Oct 20 10:02:44 2025 GMT
Subject: CN=7f7b219fa2ee2a1d5192e483e1629f8e8dfb3381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:88:ef:3d:86:db:57:43:b9:4f:d6:a0:97:
9e:3a:a1:72:95:24:f8:80:cf:46:37:38:41:3c:70:
71:ef:c2:f9:8d:72:5a:b0:cb:74:6c:a8:e1:3c:88:
16:04:5d:76:20:6d:86:72:01:15:7f:45:3f:f1:c9:
5e:bf:2d:06:39:78:d6:8a:2a:50:08:cb:22:11:84:
ed:f8:f0:42:e5:c9:db:cf:80:39:d8:5e:bd:bb:87:
90:be:01:a1:56:c8:3a:f4:7c:07:51:8b:7a:ee:bc:
94:e1:e2:f9:8f:69:4a:9e:20:89:08:be:03:a0:27:
e5:57:a0:3b:4a:46:50:9b:c1:ad:45:a0:1a:b9:e6:
f6:2e:ea:16:f4:e1:5b:34:9f:9d:22:71:8c:e7:94:
12:95:cb:d2:ab:fa:01:3b:4a:fa:52:b8:c3:70:e1:
ea:da:18:c3:ed:9c:4e:ac:d8:97:e1:c7:75:8e:4f:
8b:7a:c6:3a:63:00:00:8c:cb:13:38:14:ac:b1:14:
9f:92:ae:76:72:5a:2c:34:8f:73:a1:4d:cc:5d:b5:
a1:ff:06:0f:ea:8d:34:6a:7c:e9:c4:7f:c0:d7:43:
8a:e3:61:7b:42:5d:3c:4f:fd:6b:44:a1:3f:07:19:
94:56:ca:fa:2f:ca:07:9a:92:4c:85:c9:14:8b:c6:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:7B:21:9F:A2:EE:2A:1D:51:92:E4:83:E1:62:9F:8E:8D:FB:33:81
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:50:10:4a:4d:15:03:e1:67:63:ce:e2:92:96:5d:8b:47:10:
5b:70:6c:d7:08:7c:d1:f2:28:ff:53:8c:64:73:10:51:08:ed:
cd:cb:73:3a:c3:45:1f:cb:75:3b:31:a8:d3:35:73:b2:3e:4f:
b6:82:02:78:60:13:f7:fe:98:12:52:d3:ca:5c:a7:25:16:86:
24:ac:57:65:15:87:1d:45:12:c1:78:e3:d1:78:ea:d9:a9:82:
f2:3a:7e:5e:7c:36:61:42:48:22:3e:c3:53:5d:74:ac:ed:8a:
a7:ad:ea:b2:2e:27:c8:8b:41:29:08:e4:56:8a:67:84:d7:6a:
57:92:32:47:04:fd:48:24:9b:a3:c7:f3:eb:cd:39:55:0a:a6:
32:33:ac:e3:cb:ab:bb:df:3f:84:d4:a4:9e:c5:f7:35:e2:02:
8c:26:b4:64:ed:5e:34:02:56:b5:eb:d7:a8:9a:60:8f:aa:ef:
cb:51:3b:e9:f5:d8:ec:12:f2:7c:af:8d:47:84:75:e9:82:48:
bc:45:8a:d1:92:cc:1d:ad:cb:73:de:a8:34:47:8a:b9:9f:dd:
47:39:b3:83:18:3e:55:a1:17:bf:68:a3:b7:1f:13:32:46:5c:
ab:e6:51:de:0b:a0:af:96:5a:57:9c:d0:c2:97:df:08:50:79:
b6:c8:82:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:52 2025 by rpki-client