Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
File: m4Me6Uw3ubEVnH13MpNhgatUHYA.mft (raw, json)
Hash identifier: KpQYrEbKPkcvE9h409oJf5XaJ0NTaCgqNEuN6kDm76k=
Subject key identifier: 4A:41:CD:E1:39:81:1A:2F:E3:71:CB:28:08:C2:EC:F6:AA:CF:B2:A0
Authority key identifier: 9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
Certificate issuer: /CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Certificate serial: 0199FD340E6AF0F48E511F0F4570C0EB4219
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: YOxJOhEaAlqOx1A04OY51lh73jE.roa (hash: 7Bjfyv8Xxx/gQ+ys9BXTrWHZUga2Das1hrYUJg7PDRg=)
2: m4Me6Uw3ubEVnH13MpNhgatUHYA.crl (hash: 3jYg3EVskQjXwKIa+/bjfZ5O1kIVJd3N7X6IPbl6qG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:0e:6a:f0:f4:8e:51:1f:0f:45:70:c0:eb:42:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b831ee94c37b9b1159c7d7732936181ab541d80
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=4a41cde139811a2fe371cb2808c2ecf6aacfb2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:74:4c:21:c1:a3:56:7e:23:f3:34:50:af:
c1:e7:78:93:3b:1c:28:c5:64:b9:40:af:cc:25:4c:
56:fa:8a:4d:a7:96:34:31:d0:96:a6:53:ac:0e:05:
25:4b:d7:51:99:d5:44:a4:68:2b:7a:6e:5c:56:4f:
81:87:b5:82:4a:52:97:09:74:42:5a:42:dd:f4:39:
a8:de:f1:b8:af:65:86:ff:d4:47:47:e3:74:63:41:
81:5d:69:b7:27:83:1b:2d:86:7d:ea:bc:79:c9:62:
83:48:27:4c:5e:3a:3d:d2:de:53:b7:f0:6c:a7:10:
81:70:55:3b:c3:a0:06:29:dc:90:84:e4:35:d6:5d:
93:74:c0:b5:88:51:52:8d:8a:36:7a:e8:31:96:c7:
c4:f1:b7:ff:9c:cf:0f:59:3c:e1:28:ee:f2:4c:07:
65:eb:8a:c0:e0:8a:b6:71:20:2e:2a:7a:f3:75:ac:
72:e5:a4:e1:77:4d:df:77:30:00:a4:2a:b2:ff:d5:
35:ae:47:82:bd:19:75:27:e5:57:52:73:14:55:af:
ba:da:f5:0d:b5:33:f0:38:c2:d8:23:8a:a7:67:65:
8e:da:ca:dd:e9:f3:b3:b0:db:76:5f:86:01:3d:a4:
dd:0e:49:6c:f3:b9:81:f5:a7:f2:c5:56:0d:7c:64:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:41:CD:E1:39:81:1A:2F:E3:71:CB:28:08:C2:EC:F6:AA:CF:B2:A0
X509v3 Authority Key Identifier:
keyid:9B:83:1E:E9:4C:37:B9:B1:15:9C:7D:77:32:93:61:81:AB:54:1D:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4Me6Uw3ubEVnH13MpNhgatUHYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/b172e9-1c5a-415c-8028-1280f2e783d4/1/m4Me6Uw3ubEVnH13MpNhgatUHYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:92:92:13:48:80:8b:b6:89:4f:ee:92:b6:14:ea:f6:95:98:
48:41:08:a4:44:17:35:bb:eb:7e:be:80:b5:1b:d2:74:8a:73:
05:56:f4:22:f4:ac:4a:d6:03:7b:1b:84:1f:15:34:06:cc:2a:
22:c5:07:70:a7:aa:9e:07:a8:31:89:99:ef:02:78:de:b2:3d:
aa:23:23:aa:e2:5b:39:f8:39:1d:c0:68:0b:10:c5:4f:db:0c:
4f:bd:a8:eb:9c:17:00:7b:8d:b3:bc:4e:c7:15:34:93:7e:3a:
4d:ec:8f:1c:da:e5:71:4e:9a:cc:e5:8e:6e:44:f5:78:5b:ee:
7a:9a:99:67:bf:db:03:28:c0:d0:fa:93:cc:30:fd:29:e2:8d:
43:c6:d4:0f:27:6d:2a:0f:bc:9c:d6:16:24:58:29:46:d9:f1:
2a:a2:e0:8e:8b:8e:35:09:c9:d8:af:66:27:76:d6:76:c5:1f:
ac:72:09:23:58:0b:e7:65:1f:1e:dc:31:2f:09:7b:d8:ab:62:
af:d3:7b:ed:f6:60:b1:5a:2d:b5:d7:57:3b:77:fe:2a:13:95:
bf:0d:6d:c8:91:41:70:4b:a5:92:f5:dc:50:75:e5:b0:62:f5:
b7:07:7a:b3:48:fb:2b:d4:ca:37:39:f1:cb:c6:b5:63:74:a9:
1a:60:b8:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:48:07 2025 by rpki-client