Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
File: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft (raw, json)
Hash identifier: RkJayuYnveMiw3PwcnLMp45Wc1Q5aT55ido2yufU6BI=
Subject key identifier: 21:81:45:73:7B:27:38:08:25:B7:88:B7:50:63:7A:B6:CB:25:05:E9
Authority key identifier: E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
Certificate issuer: /CN=e31722d79bff4384a597cb544d9e7974490d8734
Certificate serial: 0199FF2247F80AB014FC2C0A651EF5262331
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
Manifest number: 0FB2
Signing time: Mon 20 Oct 2025 01:01:00 +0000
Manifest this update: Mon 20 Oct 2025 01:01:00 +0000
Manifest next update: Tue 21 Oct 2025 01:01:00 +0000
Files and hashes: 1: 4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl (hash: RV5x5sqkbtFWDNGQloWREeliOvX7jgloUy0AOSRQ6P0=)
2: 7wwToY-I4oQ7zD9rX8H-_4Eb5b4.roa (hash: Hl91ZV/in/bxS0Jez/RCMKQB6Lc2qVYsfbP/T+sqKUA=)
3: VnRQ8C8QXZSlLiPv3ntpPix0MBc.roa (hash: GsTYSMVbMlYjzB/yj1A15/Pa7xUVFVUn8yyhUswywB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:47:f8:0a:b0:14:fc:2c:0a:65:1e:f5:26:23:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31722d79bff4384a597cb544d9e7974490d8734
Validity
Not Before: Oct 20 01:01:00 2025 GMT
Not After : Oct 21 01:01:00 2025 GMT
Subject: CN=218145737b27380825b788b750637ab6cb2505e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:17:ce:c3:b0:6c:ae:2c:03:f9:35:cd:e1:
c1:49:0e:f5:ad:a2:9f:e1:b7:40:64:5a:ef:c7:64:
d6:00:ee:6e:0c:40:56:c8:47:07:8a:cf:7e:99:f0:
ad:fe:9d:f0:45:cd:5a:c3:66:e6:ad:1e:8b:0c:e5:
ee:98:b1:54:8f:f4:c1:09:54:67:9f:f7:3c:9d:46:
11:ce:16:6f:b7:29:e1:a6:e0:f8:79:00:e3:b3:25:
51:9c:23:74:b6:e8:06:ed:93:fe:08:3a:37:86:c7:
db:a8:44:1e:2a:32:c8:63:e1:6c:22:4d:40:8e:4f:
46:8d:ac:34:df:f2:5e:e6:02:ad:5a:9a:db:01:8b:
b4:98:66:d4:4d:1d:18:1d:74:5a:8f:2a:aa:c8:c0:
43:84:a9:22:8d:14:33:ad:4c:c5:a6:c0:e2:f2:6c:
a2:f8:e8:8e:d2:e3:d2:91:c4:7c:3f:45:a2:35:c1:
d0:24:6c:bc:25:45:f5:b0:d4:56:fe:ea:c6:36:19:
61:a0:93:4e:e5:4d:49:d5:36:95:1c:35:6f:3d:80:
da:52:eb:ee:ee:a2:fb:83:09:17:de:3e:e7:a5:c2:
9a:51:01:6b:8f:34:b0:f9:39:94:e2:d8:0c:fe:11:
b3:ff:ea:8f:09:33:fe:42:94:18:a2:18:fb:95:49:
bf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:81:45:73:7B:27:38:08:25:B7:88:B7:50:63:7A:B6:CB:25:05:E9
X509v3 Authority Key Identifier:
keyid:E3:17:22:D7:9B:FF:43:84:A5:97:CB:54:4D:9E:79:74:49:0D:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xci15v_Q4Sll8tUTZ55dEkNhzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/b5559e-950b-48f4-a2ab-b26f1a70af0d/1/4xci15v_Q4Sll8tUTZ55dEkNhzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:00:b9:91:46:f9:80:44:49:6b:6f:0f:2f:4f:06:06:17:58:
9e:03:e1:45:70:51:f5:4d:8b:47:d3:8e:50:1e:a3:f0:a3:fc:
64:3d:ca:47:93:81:c5:c4:41:ec:32:7d:75:c3:b5:ea:f5:18:
1f:0d:f5:43:23:b8:09:98:b2:72:7c:e1:26:d6:8b:dd:63:72:
86:66:17:32:82:a6:9f:a1:83:c9:ca:e4:5b:76:93:4b:4a:00:
e0:01:ea:1c:8c:ad:19:6e:16:b2:fe:2e:86:95:70:87:61:52:
c4:ce:48:e4:a4:30:7f:b1:4c:3b:24:82:4a:9d:8c:bb:1b:e9:
fa:92:ac:e1:e2:81:c1:06:0b:ab:2e:29:d0:04:5e:6b:68:31:
8b:91:e4:b4:b9:cf:66:e6:48:5f:21:50:cc:96:af:20:e8:41:
8e:74:98:78:47:48:ba:7e:5b:00:0c:42:2e:44:71:50:89:a3:
cb:da:c1:ec:c7:00:83:79:88:72:b9:d8:49:8f:3c:e2:c1:f9:
7d:c7:77:d9:5b:a6:31:ab:26:7a:3a:23:44:56:7c:ec:af:d2:
b2:0a:78:45:68:0b:4d:51:78:60:23:b7:82:2f:46:8c:43:07:
d3:18:66:40:3d:3c:2a:c6:63:ee:19:bc:3c:d6:a7:05:b8:2f:
32:5a:0a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:23:37 2025 by rpki-client