Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
File: 4VuQ_9-gqyhUheeERrhxmYsk3MA.mft (raw, json)
Hash identifier: uGoA7xCBlfvdiR9grExcpOfK59j8s5J96vLo3+/MknE=
Subject key identifier: F5:71:6D:97:B1:C1:9A:C7:1C:60:2D:4F:36:72:5C:F9:56:8C:BF:98
Authority key identifier: E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
Certificate issuer: /CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Certificate serial: 019A078199F2B4CD54171ADA9B94C6BBDA78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
Manifest number: 02BD
Signing time: Tue 21 Oct 2025 16:02:05 +0000
Manifest this update: Tue 21 Oct 2025 16:02:05 +0000
Manifest next update: Wed 22 Oct 2025 16:02:05 +0000
Files and hashes: 1: 2wr3VnHPGzlL2arFNUC9_MLTdaY.roa (hash: riabhN7uUC9dX01WplUZkRt4qxUdWnv+rCQJ9LvkhhE=)
2: 4VuQ_9-gqyhUheeERrhxmYsk3MA.crl (hash: /t94aEJSuRFYFcnzDsRLyDpcsrisRPGwSFBO11nY1kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:07:81:99:f2:b4:cd:54:17:1a:da:9b:94:c6:bb:da:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15b90ffdfa0ab285485e78446b871998b24dcc0
Validity
Not Before: Oct 21 16:02:05 2025 GMT
Not After : Oct 22 16:02:05 2025 GMT
Subject: CN=f5716d97b1c19ac71c602d4f36725cf9568cbf98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:12:26:ff:fd:4a:4b:7e:a4:fa:8c:84:26:fb:
03:b7:09:42:1c:a2:f7:c2:6d:99:93:84:9d:58:a2:
8f:b0:6f:13:c3:3e:e3:80:b7:43:8f:18:da:c0:dc:
eb:a7:d8:21:02:db:85:c7:71:c6:11:cc:75:07:54:
70:f0:7f:a7:18:12:b3:d7:c6:e7:1e:30:82:60:f4:
b6:1c:4c:7b:97:da:b6:24:da:fd:a5:1e:5e:11:1c:
74:bd:05:fa:b4:68:09:d3:60:7d:62:89:a3:2e:25:
57:22:0b:77:38:8f:ae:93:c5:6b:7a:57:b5:11:4a:
46:10:bf:bf:1f:77:3e:dc:90:fa:2d:07:60:f7:e7:
25:75:22:f0:7b:bd:27:91:a5:59:48:32:3a:61:98:
02:f5:63:af:43:06:22:93:b9:1e:7b:6a:14:86:e6:
f9:33:0b:a8:89:97:30:5e:a6:6a:b5:10:17:f8:62:
68:b2:1c:12:01:2a:de:74:df:fa:86:8c:dd:f0:51:
16:c9:1d:0c:f1:c2:7f:2b:8f:c6:43:28:52:ea:6e:
bd:e1:6b:58:c6:fd:83:87:60:23:31:be:ef:c7:1c:
be:69:2c:00:3b:f3:a2:4a:f4:bd:ea:81:c2:21:74:
32:d3:43:42:e1:57:da:9b:c2:fa:d8:d4:eb:87:b6:
51:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:71:6D:97:B1:C1:9A:C7:1C:60:2D:4F:36:72:5C:F9:56:8C:BF:98
X509v3 Authority Key Identifier:
keyid:E1:5B:90:FF:DF:A0:AB:28:54:85:E7:84:46:B8:71:99:8B:24:DC:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VuQ_9-gqyhUheeERrhxmYsk3MA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5f3e21-6b41-4964-bfda-cbbfda92419d/1/4VuQ_9-gqyhUheeERrhxmYsk3MA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:50:a4:51:2a:97:5d:15:83:8d:f0:3c:dd:63:b8:32:02:1a:
4b:3b:72:e7:c4:67:7b:f0:54:56:ac:f8:0f:02:d2:e7:1d:16:
08:17:ac:99:c5:9b:b9:65:3f:0b:c8:96:b6:fa:38:46:2f:c8:
10:b8:3b:60:f7:39:1b:58:36:15:1f:f3:38:ab:a2:24:33:b7:
a1:eb:12:e8:74:83:f9:c6:48:fa:39:50:db:9d:e7:1e:dd:73:
81:fc:b3:fc:09:bf:6f:62:9b:1d:6e:8c:20:d5:33:96:ea:78:
8c:02:aa:91:2b:a6:00:09:13:db:1f:98:fe:07:64:df:00:bb:
61:3b:2d:90:5d:60:e9:f6:6f:13:0c:20:22:11:c5:fd:ae:ec:
b6:00:3e:e5:ed:d3:e8:0e:56:ac:72:26:23:07:6c:90:e6:2b:
3f:6b:c6:a2:f1:f3:10:45:1d:2a:b7:80:ce:31:a5:1d:3a:8e:
63:1d:83:ec:1f:7d:41:72:97:c6:52:0e:92:0b:16:f6:cd:89:
cc:67:a1:2d:ee:74:4b:d2:b3:56:65:e8:b6:00:ef:43:1f:ef:
ae:67:3e:4b:57:f5:5a:db:7e:3a:9c:df:48:76:fc:14:8b:16:
49:1c:59:a2:6c:6d:90:ab:81:5a:d6:80:18:93:6b:96:f4:76:
64:bd:a7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:28:41 2025 by rpki-client