Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
File: CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft (raw, json)
Hash identifier: EW+DDdYgOWwGkZMC1fZAzBcf6dpbt8Co1DY+XSaYD0w=
Subject key identifier: 3D:07:F2:60:25:D7:3D:3A:03:6A:A3:47:53:0A:E1:A6:92:72:5E:AF
Authority key identifier: 08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
Certificate issuer: /CN=08fe040242651353d556b8c4240082190f271d13
Certificate serial: 0199C4FC2B4E9C2682AD98F7C819DE6CDBB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
Manifest number: 16CA
Signing time: Wed 08 Oct 2025 18:01:24 +0000
Manifest this update: Wed 08 Oct 2025 18:01:24 +0000
Manifest next update: Thu 09 Oct 2025 18:01:24 +0000
Files and hashes: 1: CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl (hash: XCEImlnDXQ5BuVUUJJLO1xJm2Fq8YLMyrW6YTdqeh+c=)
2: Z53TKhtsYia8AaAM7SEuxUzomSo.roa (hash: Y9Eq+3ShcYYBqxEHUekT9D2l2UAArlCFvrOoMzpOskE=)
3: cvkG_y1cL0YAHfjQA7tH3oSS1BM.roa (hash: kvaRsBfAFxeZA6gu+TEc8LHfkCny56mAcc6wJSjFdsU=)
4: gQYzmf6ITShbiQOv-E4IPv9srh4.roa (hash: fi2BKmp1xnFSLXfCDfMkmvC2sWL44Qwu+h1WLCwFISs=)
5: it7IHvJCQfR1gZTQymCzS9Ta2cI.roa (hash: /axHPc2cp+I2aoPIZLPk+zOh5Faet3AVlxLqRnIEWb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fc:2b:4e:9c:26:82:ad:98:f7:c8:19:de:6c:db:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fe040242651353d556b8c4240082190f271d13
Validity
Not Before: Oct 8 18:01:24 2025 GMT
Not After : Oct 9 18:01:24 2025 GMT
Subject: CN=3d07f26025d73d3a036aa347530ae1a692725eaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:24:b4:f7:0d:68:49:39:16:d0:88:3a:63:
20:c0:3a:74:e1:68:71:a0:39:43:b0:02:ae:b3:3c:
2d:c3:19:ae:9d:97:cd:b8:72:e7:a8:70:80:2e:a0:
04:59:55:f9:93:bc:a8:84:58:92:09:fa:0a:58:78:
d4:7f:98:35:55:7b:71:22:e9:3d:98:4e:d5:b1:0f:
e3:7e:ac:81:0d:6a:1f:e5:44:fa:38:7b:3d:06:ff:
cd:64:3a:fe:16:23:4d:a6:d7:eb:f2:42:10:ed:a5:
e7:7c:59:36:50:0c:fb:c7:2c:64:01:8c:78:01:6f:
40:06:1a:a0:bf:71:78:32:b5:fe:35:ea:3b:4b:63:
f4:6a:1f:05:a9:37:18:04:2e:87:e0:97:1e:ac:f6:
53:08:95:55:24:f4:d0:5f:9e:41:df:4e:a1:38:5f:
62:d6:1b:2a:6c:b5:1d:ca:a2:9a:de:3a:07:25:7a:
14:34:60:1f:7c:c9:05:5c:13:25:cf:ae:d9:6e:cf:
51:b5:06:b7:78:6c:4d:fe:74:d9:1e:80:40:9b:98:
a1:48:fa:57:37:72:3b:cb:0b:d1:d7:a4:4d:6f:01:
bd:b0:3f:c4:4b:a2:37:87:b3:65:70:f3:44:9d:a7:
d1:69:9f:73:b3:89:e0:41:2a:3f:90:a1:44:65:85:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:07:F2:60:25:D7:3D:3A:03:6A:A3:47:53:0A:E1:A6:92:72:5E:AF
X509v3 Authority Key Identifier:
keyid:08:FE:04:02:42:65:13:53:D5:56:B8:C4:24:00:82:19:0F:27:1D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CP4EAkJlE1PVVrjEJACCGQ8nHRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4ebc33-ee54-437c-8a1b-dec4807cd7e6/1/CP4EAkJlE1PVVrjEJACCGQ8nHRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ab:74:4e:71:2a:60:d2:33:c2:63:2b:7d:1e:99:8d:19:32:
e1:d0:28:58:72:ea:6b:3e:7c:4b:5e:42:e0:0b:94:12:fd:7a:
e7:55:42:80:b2:16:65:87:31:3e:b3:0b:fa:0e:a5:40:2e:1c:
ef:14:98:1c:bb:e9:99:8c:e0:35:a1:65:39:21:ba:6a:d5:22:
34:c9:81:f5:55:80:67:f5:b0:1c:64:9b:b2:eb:29:37:ef:95:
74:65:b6:cd:be:3c:49:f2:10:ba:91:95:01:bd:d1:d9:d0:a6:
ad:07:6b:93:54:3c:34:5d:e0:fa:fb:19:e6:50:d6:17:d6:b0:
84:96:09:c6:8d:f9:89:39:e0:19:36:9b:d9:4e:5a:5d:30:79:
61:18:80:59:fe:de:2c:7e:d4:55:a8:26:b9:d8:3f:50:65:40:
b5:72:ab:45:c9:d3:e9:88:bf:46:9b:eb:79:85:85:38:65:42:
99:1e:7b:66:54:e5:6d:67:0f:6c:40:1e:eb:48:d5:06:4c:e2:
77:83:a6:d5:03:e5:3d:96:f1:9f:4c:8a:96:51:a8:cf:ac:cd:
52:19:4d:91:f7:7a:63:7e:56:ca:6c:d9:95:c2:42:a9:d8:c1:
76:88:f6:c2:f8:b1:dd:fb:26:d9:b7:f3:4d:bf:e4:ca:7e:d5:
52:32:68:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:09 2025 by rpki-client