Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: z2/CxQo4/zwNrTvK+plR6bG770vxuK3eOELKHj07Y44=
Subject key identifier: B5:F1:DC:50:2C:47:83:22:ED:88:25:D7:73:E3:30:BD:D0:FB:D7:83
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 0199FF22D7E2E4FE3A3CD4F0CA809F3719EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 050C
Signing time: Mon 20 Oct 2025 01:01:37 +0000
Manifest this update: Mon 20 Oct 2025 01:01:37 +0000
Manifest next update: Tue 21 Oct 2025 01:01:37 +0000
Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: D3qkvgGZtOL6h4eHJWfVX1xuFgRNdHD7iMNrdLSuy/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:d7:e2:e4:fe:3a:3c:d4:f0:ca:80:9f:37:19:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Oct 20 01:01:37 2025 GMT
Not After : Oct 21 01:01:37 2025 GMT
Subject: CN=b5f1dc502c478322ed8825d773e330bdd0fbd783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d4:2b:f6:e4:96:40:68:af:d7:1e:87:b4:1a:
69:c5:46:30:41:cb:81:f5:c1:df:ce:64:48:54:8c:
26:36:af:07:c1:96:c9:aa:c9:f0:94:d9:6a:cf:fd:
3e:4c:bc:aa:0a:2f:90:af:bb:6e:12:59:fe:38:03:
5f:57:1c:0a:2b:1b:f2:9f:f3:0e:25:93:ce:a7:96:
8a:50:ce:78:5c:f3:f2:c9:3d:bd:59:54:22:62:35:
c4:49:d0:10:9b:75:c3:0b:bb:25:eb:20:a9:dd:6f:
0a:18:aa:54:5d:2a:8d:f1:62:e7:47:23:e0:9e:d5:
8d:ca:57:a7:81:85:77:f4:cb:cb:8f:e4:d6:40:99:
0d:71:a8:49:ee:ad:aa:84:65:1d:1d:bf:f1:2d:41:
f4:58:14:86:49:8c:9c:5d:24:5a:ef:db:f6:36:a4:
03:d3:3c:6b:5a:8c:6a:dc:c5:ac:22:d2:db:a7:46:
ae:8d:27:a2:6a:f8:f0:50:45:49:2e:cf:26:b8:49:
4b:45:a7:90:4f:45:cc:9b:45:1b:a3:64:c7:ce:e6:
83:4f:66:e8:0b:29:df:d6:3b:48:bb:ef:61:ef:e3:
f0:fa:da:2a:d8:fe:5b:e2:f9:96:18:50:43:c1:3b:
39:04:8a:c7:b1:44:2a:08:e6:88:6f:50:a5:11:62:
82:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F1:DC:50:2C:47:83:22:ED:88:25:D7:73:E3:30:BD:D0:FB:D7:83
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:77:76:6c:a7:ab:c7:67:f6:5a:44:73:6f:2a:44:25:f3:
d0:6d:a9:1e:f4:d2:ac:c1:b4:d9:c5:28:58:64:13:cc:9e:43:
cf:dd:84:c6:cc:31:fd:e5:0a:b1:29:b0:30:24:89:ff:d1:cb:
4f:17:10:de:9e:13:0a:30:2e:c6:a5:bf:f3:38:99:e6:d5:15:
3a:e6:e7:c3:ec:42:ff:9f:f3:2f:ab:98:01:60:6e:2f:3a:33:
cb:fa:c1:d8:ca:a2:0c:e1:60:0b:66:53:36:28:f0:fe:31:9c:
9d:f1:47:53:cd:5e:48:e2:63:bf:b2:cd:3f:da:9d:59:d3:a3:
07:d7:d2:36:1a:f1:5e:f5:2e:6e:17:9a:74:10:5f:07:db:d9:
ec:f8:90:af:66:aa:d2:a4:84:84:8b:e3:86:3a:a3:9d:5c:e8:
ae:e4:54:11:b8:c3:c8:0b:94:7b:b0:b7:78:58:89:16:b0:07:
78:f3:8a:2e:26:59:b4:57:f9:d3:35:aa:68:98:75:b3:a9:a0:
dc:3f:1c:45:41:5a:1f:fc:55:1c:59:e6:9c:a2:9f:dc:24:e1:
c9:cd:71:42:91:ef:23:6a:a3:1c:16:17:6d:32:8a:5d:1b:4c:
09:5f:63:60:1e:d3:7f:f1:ba:ad:d3:4f:c7:92:7b:00:25:87:
5e:92:51:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:03:09 2025 by rpki-client