Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
File: 4kCgJeDmGkTZPkqAHjiIsm570kE.mft (raw, json)
Hash identifier: Hp6dX84cb+eYvBmseRAv0kJu6bs9/N8vGyjN5Rwee0Q=
Subject key identifier: A8:87:B7:A8:7D:85:C9:2E:FF:7A:D5:9F:DF:47:A5:BE:E0:63:26:58
Authority key identifier: E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
Certificate issuer: /CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Certificate serial: 019A27AF7FB9E508F7B49DC4C3F886FD2686
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
Manifest number: 16FB
Signing time: Mon 27 Oct 2025 22:00:03 +0000
Manifest this update: Mon 27 Oct 2025 22:00:03 +0000
Manifest next update: Tue 28 Oct 2025 22:00:03 +0000
Files and hashes: 1: 4kCgJeDmGkTZPkqAHjiIsm570kE.crl (hash: Y+3yvMdBlLHmUeoSuaJ9SueL+xd2HqvgwJMQPKrm1eM=)
2: K7SH4zYCXr-cp1q6N2Mp-Gdj1PU.roa (hash: fOTEXpl4gYkXzMjvkhlooQdp3U8U0Z9lMps20TcryK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:27:af:7f:b9:e5:08:f7:b4:9d:c4:c3:f8:86:fd:26:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e240a025e0e61a44d93e4a801e3888b26e7bd241
Validity
Not Before: Oct 27 22:00:03 2025 GMT
Not After : Oct 28 22:00:03 2025 GMT
Subject: CN=a887b7a87d85c92eff7ad59fdf47a5bee0632658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:dd:1f:b7:47:98:86:cb:a4:fc:ae:f9:7e:3f:
ef:90:84:8c:b5:f3:26:52:42:5e:12:2f:5c:50:7d:
84:0c:f3:f2:4a:e6:8c:52:7e:29:01:83:b9:e1:bb:
6a:86:c7:0e:d4:57:fa:d0:19:1e:9d:65:0e:22:e5:
b2:3b:b3:9b:62:1e:e7:05:56:d7:ef:05:54:b2:5f:
1d:55:82:7a:0b:16:95:db:93:aa:7a:49:c8:93:5c:
db:c9:93:c3:e3:18:3a:88:02:44:b8:ce:e3:31:46:
a7:e6:4c:3c:8f:db:a9:8c:1c:80:00:72:5c:9a:1b:
bd:66:40:bb:1b:a6:21:60:70:48:1a:ec:35:e7:fc:
3e:5b:6f:4e:cc:a6:b3:52:73:c4:53:fb:8b:4e:3b:
98:23:a8:52:1f:8f:19:3c:f3:74:1f:c2:a3:77:b6:
d7:d7:8f:d7:86:1a:71:55:11:7c:13:ff:0d:05:f0:
2d:5c:fa:00:17:bc:78:bd:22:76:5f:82:3e:47:99:
63:22:3e:e4:53:ef:15:f0:a0:72:41:9f:88:42:3d:
d6:d3:17:4d:f4:95:d1:9b:3c:1b:6d:84:e8:85:4c:
cd:f7:81:58:43:63:85:32:eb:cc:3f:68:1e:ae:9f:
02:bd:18:07:34:01:56:c5:b6:90:50:e3:1f:a5:e4:
dc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:87:B7:A8:7D:85:C9:2E:FF:7A:D5:9F:DF:47:A5:BE:E0:63:26:58
X509v3 Authority Key Identifier:
keyid:E2:40:A0:25:E0:E6:1A:44:D9:3E:4A:80:1E:38:88:B2:6E:7B:D2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kCgJeDmGkTZPkqAHjiIsm570kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6ec943-70e2-4335-84fe-c79d4eeb5ad6/1/4kCgJeDmGkTZPkqAHjiIsm570kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3b:b1:d8:38:a5:15:64:28:b7:62:a4:e5:db:f3:f5:0b:d9:
f2:c9:a0:19:ec:d8:a3:f4:98:a2:af:68:47:46:89:bf:39:55:
bb:10:f6:38:14:18:65:cf:2c:05:0a:f4:7f:5e:c2:53:a1:95:
ba:94:11:8a:9a:ea:f5:b0:91:bf:3c:f7:cd:02:3b:63:18:70:
2f:8b:7e:df:df:47:d4:a9:f8:21:09:6c:eb:ab:e6:a9:3a:a7:
c2:ba:af:0f:ac:80:d2:58:79:37:e2:3e:74:2b:28:bb:a0:b0:
88:78:de:39:f8:54:4c:8b:ae:35:5c:2c:c1:3e:19:53:f6:f6:
07:ef:2b:3e:57:15:19:e6:ab:83:f7:8f:73:ba:83:47:47:81:
d7:cc:7b:c2:06:49:36:5a:7f:a3:83:d9:cc:b1:62:b2:d2:ed:
0b:3f:d5:c0:e9:df:8c:79:79:56:f7:c9:75:10:34:a7:93:f6:
2f:18:da:ee:65:00:3d:00:b4:1d:fc:df:d2:fc:f3:b0:75:a9:
23:8d:b2:c0:4f:b1:bb:b9:61:0f:9a:b8:29:38:00:ff:1a:c0:
c5:15:c2:54:fd:bf:55:7f:3d:0e:8b:fc:8d:1f:90:51:02:ed:
13:38:c2:59:c7:3f:98:8e:e5:a4:df:a4:7f:d1:1d:ad:68:f8:
ac:40:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:21:34 2025 by rpki-client