Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: LTyEs7NC722JEPpmqjTcMPhSW3s69puJQY6oGle1vWg=
Subject key identifier: FC:B3:5B:2F:52:4F:DF:FF:DA:00:D5:02:8B:1C:37:71:99:30:D2:7B
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 0199FB7C7A8241F101D0762D64F10D93A907
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 16EB
Signing time: Sun 19 Oct 2025 08:01:02 +0000
Manifest this update: Sun 19 Oct 2025 08:01:02 +0000
Manifest next update: Mon 20 Oct 2025 08:01:02 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: jqpp3GtumhxRleumLDXcZNgepmRWtou7csQW8o1cgQ4=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:7a:82:41:f1:01:d0:76:2d:64:f1:0d:93:a9:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Oct 19 08:01:02 2025 GMT
Not After : Oct 20 08:01:02 2025 GMT
Subject: CN=fcb35b2f524fdfffda00d5028b1c37719930d27b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cc:39:4f:7e:41:10:fc:24:6e:30:ee:24:b7:
a8:89:de:61:e6:cc:92:a0:e5:8a:1b:bd:30:78:c1:
ef:27:0d:d3:6a:c2:c2:b8:28:aa:b8:7d:fd:ee:a6:
e6:9a:22:5a:16:a4:92:5f:12:1a:31:2c:e2:28:d2:
8b:55:aa:d1:2e:f3:db:6c:3a:bc:a0:d2:f6:a3:f5:
a5:c7:0c:2c:f9:6f:a8:e5:da:b8:8a:92:71:14:c3:
91:ff:9a:06:d1:d6:6d:f8:89:1a:b0:e1:e3:62:eb:
9e:0d:b0:43:9c:37:a7:e5:d1:3a:78:64:c2:88:3c:
29:c7:5e:9e:8c:2d:82:b3:1d:43:18:f0:6f:61:e8:
41:fd:d5:ee:41:e3:e7:66:1c:e8:1b:30:0a:82:5a:
11:bf:56:28:44:c0:38:55:a9:c0:de:07:a5:bc:72:
c1:4e:03:d6:c0:dc:12:40:94:cf:9b:ad:9a:1d:91:
5c:a6:6f:5a:ab:ae:9e:f1:71:e0:a4:f8:9e:b9:16:
72:04:0d:ba:f3:63:13:9d:c0:00:3f:42:ca:05:82:
e8:66:16:36:5c:20:82:47:c6:a4:1a:08:35:8c:de:
54:ca:f9:37:55:89:45:1a:71:6a:51:7e:9e:ab:64:
04:66:bf:68:08:42:71:60:ed:6d:cf:0c:68:81:97:
6b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B3:5B:2F:52:4F:DF:FF:DA:00:D5:02:8B:1C:37:71:99:30:D2:7B
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d7:2c:e3:69:e5:9c:56:60:3d:6f:1c:07:bd:e0:68:e3:2e:
93:16:bd:d7:56:24:eb:92:ee:07:80:db:fe:ab:da:e7:f6:3c:
7d:24:4a:e1:f2:f6:a8:ba:44:fc:0b:17:2f:84:0a:eb:3d:32:
28:4e:89:cb:62:37:38:d9:51:7c:a2:1e:3a:32:69:a9:33:ff:
68:cb:bd:45:67:6e:d7:24:d9:2c:23:38:1b:0e:4b:1c:72:43:
4c:23:c2:67:99:63:a5:70:10:bd:98:e2:a8:d5:de:1a:58:fb:
10:ca:4d:d9:a6:32:3a:7b:0c:65:a5:81:8a:e2:f7:d6:86:d8:
7f:72:59:a9:d2:0a:be:0d:d6:ac:82:b1:25:e3:12:5b:12:4f:
ad:74:cb:32:f7:cf:b3:d4:31:1c:6a:cb:33:3b:39:a9:94:fa:
01:4f:a0:75:24:0c:28:e1:66:a4:99:f1:0d:22:4d:2d:8b:e9:
02:80:ee:4d:cf:42:a1:46:62:2b:0c:7f:ef:4e:5f:c4:10:d9:
7b:a7:75:39:52:4d:fa:59:6a:3e:f0:94:b6:41:ac:68:14:fd:
07:4a:ce:d9:78:35:11:93:f5:18:e3:e1:a4:58:20:56:d0:db:
07:70:3a:8a:e4:ef:76:82:b4:d6:21:f6:13:ce:be:f6:ac:95:
ae:1f:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:10 2025 by rpki-client