Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
File: 4_kwa8YVwyCuQaTnJmPrupjvNXw.mft (raw, json)
Hash identifier: ILIcJuj7Ll4m60YtVkqGlEmJd9u5V+ZFNuXfDHCCYW8=
Subject key identifier: 59:BB:20:10:9D:8F:0D:3B:20:9D:73:34:12:0C:FA:E2:69:57:D0:D6
Authority key identifier: E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
Certificate issuer: /CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Certificate serial: 019A1B3DA1CFABC10A31A3686446A69A8B05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
Manifest number: 07B8
Signing time: Sat 25 Oct 2025 12:00:15 +0000
Manifest this update: Sat 25 Oct 2025 12:00:15 +0000
Manifest next update: Sun 26 Oct 2025 12:00:15 +0000
Files and hashes: 1: 4_kwa8YVwyCuQaTnJmPrupjvNXw.crl (hash: fi7MIHmwLjQHQBNrlStHcG/jcR+wC9QakEFHWOV65AQ=)
2: mi-PdoixQ3I_3wWH1iuFXc_7uM0.roa (hash: 3baxx8ZqUep3q30dtKKaBrzl+eIHjNNA1Tcak9rfOIs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1b:3d:a1:cf:ab:c1:0a:31:a3:68:64:46:a6:9a:8b:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f9306bc615c320ae41a4e72663ebba98ef357c
Validity
Not Before: Oct 25 12:00:15 2025 GMT
Not After : Oct 26 12:00:15 2025 GMT
Subject: CN=59bb20109d8f0d3b209d7334120cfae26957d0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:81:73:0e:f8:33:57:91:7c:f0:d5:88:3e:f8:
fd:f9:fa:48:10:e3:55:75:73:04:91:70:37:ff:b1:
4f:93:44:e1:53:72:d5:b5:36:fc:de:36:62:bc:06:
4f:96:a9:42:f4:cf:7b:48:07:e2:8c:62:0f:e6:0c:
9b:16:56:e4:b1:f1:fa:03:23:9a:3e:25:8c:97:ce:
4f:16:19:21:b5:45:9b:a9:44:bf:d4:ed:ef:c3:f4:
89:94:c5:45:c4:69:59:d0:a3:e2:47:87:b6:90:64:
61:50:29:49:4a:a8:7b:e2:84:41:32:b5:b0:e5:c5:
0a:f4:7f:03:c0:8a:c2:4f:17:ec:ad:fe:53:11:ea:
03:66:c4:44:3a:5a:40:2e:4f:b7:ae:07:52:a0:48:
d9:30:a2:c9:26:f0:a8:5a:49:01:d2:52:59:81:85:
2b:2c:34:9a:43:4f:cc:ab:5b:18:cc:bd:8a:fb:85:
ac:a3:be:8f:3f:41:92:1c:48:67:9e:9f:3f:1c:11:
da:ed:98:93:a1:01:ef:e2:ae:0c:4c:96:0c:c6:74:
ee:71:6e:6a:87:15:75:bc:01:a2:51:a5:e1:1d:28:
30:5f:c8:6f:8f:0c:65:c9:66:57:37:f5:0d:47:1c:
bb:b9:49:e9:2d:07:56:eb:7e:f0:da:5c:a5:d1:bc:
40:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:BB:20:10:9D:8F:0D:3B:20:9D:73:34:12:0C:FA:E2:69:57:D0:D6
X509v3 Authority Key Identifier:
keyid:E3:F9:30:6B:C6:15:C3:20:AE:41:A4:E7:26:63:EB:BA:98:EF:35:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_kwa8YVwyCuQaTnJmPrupjvNXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6c48f1-2037-40a0-b2e1-3cd33ff32743/1/4_kwa8YVwyCuQaTnJmPrupjvNXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7d:29:4e:82:15:c6:64:36:e4:af:93:48:d3:fd:0d:ec:c8:
c6:65:6d:d1:f0:0e:33:e6:81:aa:b1:61:1f:5c:58:7a:6e:c7:
46:8d:14:9c:02:26:f7:d4:d6:a4:c0:89:df:76:2e:28:49:d5:
f6:b5:77:e5:fa:02:12:f3:2c:44:f8:3a:9f:45:a6:66:dd:f1:
a7:91:83:64:c5:44:6f:46:dc:ed:f6:ae:1f:d7:2b:1b:fe:6a:
82:0d:12:ca:fe:8e:4b:00:c4:4d:1c:d3:c3:93:2a:32:be:49:
82:74:d8:23:cc:9a:a6:76:6f:d2:d9:68:8e:6d:59:c9:b4:62:
24:c7:0c:46:d3:7b:1d:ff:c8:37:13:98:12:de:76:6b:38:3c:
c0:f2:9a:4d:12:f0:aa:7b:8b:5c:55:84:dc:56:16:4e:c2:3f:
b5:53:77:87:4a:2b:87:e3:56:87:0b:55:eb:cd:75:72:36:4d:
3d:e2:aa:5b:3b:88:e9:3a:19:ab:66:11:1e:01:d7:f3:6d:f7:
c0:74:24:a7:a1:61:92:d0:ee:84:13:33:46:a9:33:8f:ca:7b:
fd:73:a3:d2:90:0f:aa:5a:01:a6:d2:be:bd:4a:1b:6f:88:f1:
d7:23:29:89:2f:94:44:db:c6:8a:fc:b9:c3:0a:6a:1a:12:20:
e7:39:ff:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 15:24:39 2025 by rpki-client