Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
File: h4R32LYtCfmui_29gSpT-X7UxXY.mft (raw, json)
Hash identifier: hyV8M5gAPbe70IfaJcyoM5IJVRPjZt+J0BkiTxlbzts=
Subject key identifier: 57:41:01:81:CF:63:06:99:DA:50:B8:E1:5C:39:34:55:35:04:C7:63
Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Certificate serial: 0199FC5826974FBADDA92EB4920459A9142F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
Manifest number: 050A
Signing time: Sun 19 Oct 2025 12:00:59 +0000
Manifest this update: Sun 19 Oct 2025 12:00:59 +0000
Manifest next update: Mon 20 Oct 2025 12:00:59 +0000
Files and hashes: 1: 1-chTvEPLKpclBFunFsZudwhteCw.roa (hash: Mk7QbJ14tNyeCXu9wD1n7MpPtkSCXANni+lDYxJDiAk=)
2: h4R32LYtCfmui_29gSpT-X7UxXY.crl (hash: lUeBTtCudHckhHuojeF5UaVmjWGzsTEbX7hOS6ui1+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:26:97:4f:ba:dd:a9:2e:b4:92:04:59:a9:14:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Validity
Not Before: Oct 19 12:00:59 2025 GMT
Not After : Oct 20 12:00:59 2025 GMT
Subject: CN=57410181cf630699da50b8e15c3934553504c763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:bc:60:20:22:85:bb:e5:f3:b7:e1:e1:2e:
26:42:70:96:0e:ff:9f:a8:bf:2e:d0:9c:e0:64:e8:
f8:00:cf:69:b7:a7:85:82:08:49:2d:62:85:17:21:
08:4e:6e:21:32:4d:82:0c:dd:27:0d:93:32:55:a6:
1f:24:f4:4f:75:01:af:27:f6:e2:c6:f8:43:b3:fe:
a2:78:92:f2:af:d8:87:23:89:3a:33:45:35:2d:94:
db:03:f3:4d:fd:08:74:b2:be:51:08:78:29:fc:93:
38:c7:50:98:80:a3:69:e9:de:92:0e:3b:77:f4:6d:
11:63:43:c0:43:13:ab:23:00:55:c9:71:a1:63:b8:
94:61:90:12:ed:ff:5a:bb:87:2b:1b:bb:d2:d5:c5:
45:e4:c8:13:63:01:fb:02:29:1d:df:fe:4a:0f:51:
38:62:c8:d4:e9:94:d7:fd:c1:85:99:d6:23:e3:8c:
e8:03:d6:cc:1e:35:78:de:6a:b5:bc:9b:a7:2d:7c:
09:a2:52:fb:71:8a:2f:cd:61:d8:aa:79:93:a1:f2:
f7:1c:42:08:26:cc:1f:5b:02:6d:5a:8c:69:89:42:
6c:4c:4f:54:0b:73:92:f0:3b:c3:33:39:e7:ed:95:
d6:96:15:07:58:3e:22:5e:08:e7:7a:77:17:55:f3:
36:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:41:01:81:CF:63:06:99:DA:50:B8:E1:5C:39:34:55:35:04:C7:63
X509v3 Authority Key Identifier:
keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:61:f2:31:fa:06:97:8c:0b:90:5b:3b:86:c6:57:1b:e3:17:
11:5c:2b:09:0b:37:8a:4a:97:db:14:28:94:af:d0:50:20:0e:
1f:20:a7:92:15:24:15:d6:f3:6e:a0:e8:20:b1:27:3a:a6:08:
42:16:da:38:87:22:69:35:a1:48:f0:91:d5:00:82:1e:d9:0b:
c1:31:63:d1:d4:04:e7:d4:fe:95:7f:f8:6f:1b:62:16:b0:f9:
28:b9:b3:7e:ab:e0:0f:2e:da:2f:a7:39:60:f7:fb:f1:12:b8:
16:b7:0b:7d:80:0b:56:54:38:fe:37:0b:fd:01:45:b1:c7:a3:
6b:c1:5b:7f:e6:28:0d:e9:84:3a:3d:8d:48:fc:95:27:d5:16:
fb:e8:a1:06:c6:a7:d6:62:90:8f:c4:2f:95:a1:9f:8c:d2:8d:
4f:46:a2:3f:dc:f3:fd:89:1f:ac:9d:d2:57:54:5f:ab:30:3d:
01:f8:2f:e5:a2:b0:91:40:a6:ea:75:89:b4:7d:d8:34:09:7b:
65:d6:ae:8c:3b:71:61:37:a2:bd:2e:b8:fd:44:fd:0f:b8:a2:
a8:71:c1:3a:c0:c7:47:6e:51:db:6f:3e:10:e8:8b:c0:bb:8a:
0c:85:71:c6:af:a5:3c:2c:e5:66:d8:98:f3:38:e4:60:76:a9:
27:1c:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:14 2025 by rpki-client