Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: JWbIzUXFM9LEG+lMYvnLmtPaEBz2w/bKhWNWF3JerLs=
Subject key identifier: 5E:24:5C:A4:9D:B1:71:13:77:1A:A5:FA:8F:77:16:8B:DE:73:53:4C
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 0199FC21AAF8C4B02AB74E6057C3464861BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 1562
Signing time: Sun 19 Oct 2025 11:01:28 +0000
Manifest this update: Sun 19 Oct 2025 11:01:28 +0000
Manifest next update: Mon 20 Oct 2025 11:01:28 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: VUJYDqr7uOHp+GStm5dibW6iLf84Q8YQaawUgFXC9Cw=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:aa:f8:c4:b0:2a:b7:4e:60:57:c3:46:48:61:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Oct 19 11:01:28 2025 GMT
Not After : Oct 20 11:01:28 2025 GMT
Subject: CN=5e245ca49db17113771aa5fa8f77168bde73534c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:3a:47:d5:c1:e9:d9:e1:3c:f1:5d:63:94:79:
32:a1:8f:c1:1a:89:18:da:86:fd:72:8d:0e:8b:ec:
3c:2f:5f:42:ff:65:f3:c2:19:b0:71:93:d9:9e:2d:
aa:fc:aa:c3:e9:0c:0b:94:bf:f8:bd:43:30:b8:e3:
70:09:15:63:dc:99:4d:c8:ad:c6:0c:cc:e7:22:70:
5e:c8:57:36:f0:80:bf:a8:95:f1:31:0d:1d:67:79:
37:fe:c3:a5:21:e1:6f:83:f1:fb:c4:44:60:d6:4c:
23:ad:64:a3:57:24:29:93:10:e6:ac:01:91:06:71:
3f:f6:04:59:9d:f1:30:17:8e:9e:b3:f5:b3:b0:07:
c1:23:00:ff:95:04:8b:ba:92:72:0c:ba:17:20:58:
67:97:2a:eb:02:b7:31:84:14:13:5b:b2:31:34:f8:
3f:94:0b:b5:1a:5c:d8:74:9b:88:cd:03:4e:3f:13:
8d:38:da:40:3f:01:7b:e2:50:96:79:ce:c2:40:18:
81:4e:b0:9f:1e:9c:21:a2:27:16:65:ff:71:aa:61:
b6:48:05:10:73:03:32:0f:1a:5a:95:57:07:c6:0e:
eb:60:dd:4b:aa:06:65:c8:3f:78:22:6f:66:ae:5e:
7d:49:b4:0d:5e:06:2f:10:4f:b8:e0:e7:97:0b:37:
93:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:24:5C:A4:9D:B1:71:13:77:1A:A5:FA:8F:77:16:8B:DE:73:53:4C
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5e:77:d9:f8:33:6b:e6:5e:bc:bb:3f:f0:2d:31:07:52:5f:
54:28:d1:a7:af:70:02:37:d1:2b:d5:0d:33:dc:fa:ea:4c:ed:
05:20:d2:09:16:ca:20:70:85:a1:ea:df:c8:eb:7c:99:74:87:
ee:23:e0:f9:be:34:26:9a:79:be:79:b6:c8:03:82:a2:b9:2d:
cb:0f:0f:8a:99:4d:11:51:3c:05:15:f9:57:a7:22:2f:62:ca:
0b:33:52:e5:d9:30:b7:dc:29:87:0d:07:47:0d:a8:7f:0d:6f:
b7:9b:e1:4d:3f:81:84:8b:96:d0:8e:9f:78:41:79:7c:73:0c:
46:d2:7b:fb:3a:1c:f1:21:1a:d0:fc:3c:42:c6:8e:dc:9f:c6:
22:87:38:06:56:2e:f8:0a:14:2d:45:9e:bf:67:25:46:03:c0:
b0:ea:16:02:f1:6a:82:46:22:bf:49:6c:dd:cc:93:45:f7:6f:
fc:06:6a:4e:ea:cf:a5:80:f1:e7:da:76:5c:14:0d:49:61:56:
cb:86:3b:87:4a:5d:55:ef:2e:4d:db:af:41:af:16:8b:2f:53:
5b:6c:67:16:a4:a6:9f:ba:8b:1e:de:a8:3c:47:9b:ae:cc:c9:
d7:12:9d:b2:17:a5:bb:d6:d4:c2:d4:55:11:9e:fb:89:63:da:
14:32:8c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:42:24 2025 by rpki-client