
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
File: 4br5DtE9F1RSz15aFjKnlL8fTJo.mft (raw, json)
Hash identifier: EsSQb+EqnZtENevj5JiabbztvzW/3lxqzE2gsMuy5pg=
Subject key identifier: 93:74:A9:A0:5A:9F:90:36:A6:19:06:F4:60:86:5C:1B:05:01:D3:6A
Authority key identifier: E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
Certificate issuer: /CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Certificate serial: 019A300F6A30C9CE09A67594951C32EE96ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
Manifest number: 16FE
Signing time: Wed 29 Oct 2025 13:01:47 +0000
Manifest this update: Wed 29 Oct 2025 13:01:47 +0000
Manifest next update: Thu 30 Oct 2025 13:01:47 +0000
Files and hashes: 1: 4br5DtE9F1RSz15aFjKnlL8fTJo.crl (hash: 8VA/LQxhjb6rMcRj5scILYRRnYq4Mhd/mtNz8HzlJfQ=)
2: Tli-MNBliT4GZ0SuL6-kYDFipSs.roa (hash: tAZBpKtmJpVB7wLzYFodx1oVBHeaFLGJGQEpb9KD5qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:30:0f:6a:30:c9:ce:09:a6:75:94:95:1c:32:ee:96:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1baf90ed13d175452cf5e5a1632a794bf1f4c9a
Validity
Not Before: Oct 29 13:01:47 2025 GMT
Not After : Oct 30 13:01:47 2025 GMT
Subject: CN=9374a9a05a9f9036a61906f460865c1b0501d36a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:59:de:05:75:9b:4c:6c:42:d2:d7:6f:0a:
a3:e8:f9:25:7e:a3:01:16:80:3f:49:7d:17:7e:72:
e8:5b:05:95:2e:87:3e:15:a3:ae:9e:0f:cc:10:b0:
fa:c5:8d:17:54:77:21:a9:21:00:46:82:4a:bb:c9:
4c:1f:a6:7b:2f:df:65:16:53:b3:24:dd:e8:71:31:
a9:60:c7:0f:44:d5:91:41:7a:08:f5:f4:f8:a4:45:
58:06:84:0c:09:a6:cc:d5:b7:43:f9:0e:98:02:88:
b3:22:b0:76:a7:2d:43:f9:62:ff:4c:ab:ca:b7:58:
eb:91:b3:de:1a:44:93:29:63:d5:89:49:5d:1b:b9:
6a:d5:16:83:b0:d3:77:de:50:09:4c:76:9a:d1:56:
62:60:d6:a0:76:86:dc:4f:16:33:ac:1f:12:c3:64:
55:01:60:42:30:6b:83:b1:8a:f0:50:4a:6c:25:7e:
85:54:d0:c6:3a:86:8d:64:a1:ea:99:32:32:cb:fc:
99:1e:d7:e2:45:68:92:86:64:e6:20:7a:85:20:1d:
b4:3d:98:c9:a0:dc:40:3a:b5:a8:d2:53:c3:b1:e5:
83:33:b0:c8:29:c1:e5:53:7c:63:fe:9d:d8:9a:8d:
c4:ba:42:4a:6d:ba:93:e7:41:23:f7:ad:dc:39:84:
d9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:A9:A0:5A:9F:90:36:A6:19:06:F4:60:86:5C:1B:05:01:D3:6A
X509v3 Authority Key Identifier:
keyid:E1:BA:F9:0E:D1:3D:17:54:52:CF:5E:5A:16:32:A7:94:BF:1F:4C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4br5DtE9F1RSz15aFjKnlL8fTJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e6efcf-e5d9-49f0-b11f-d52fdc9e8287/1/4br5DtE9F1RSz15aFjKnlL8fTJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bc:92:d2:3c:0c:fb:aa:22:99:85:4d:70:fc:de:98:27:f9:
dd:b1:64:1d:b9:41:91:74:fb:58:79:22:c3:3d:a5:d4:19:9e:
6e:00:2f:bc:a1:b0:70:62:2a:c0:7d:9a:95:a8:7b:f5:6a:61:
8a:f9:aa:35:f6:89:c8:ab:ad:36:c7:a6:2f:65:68:23:18:fb:
59:48:31:32:1b:a7:3d:b8:0f:55:be:c1:30:25:bb:04:10:de:
5e:6c:ca:14:65:b4:22:9c:d8:30:a6:c4:e2:a5:4e:47:51:54:
d9:2b:c2:14:b1:f4:50:a7:df:10:ca:f6:55:e8:60:68:da:4a:
26:d9:72:70:d7:37:92:ad:77:0b:22:e4:18:d7:aa:32:16:f3:
bc:f1:41:8f:80:71:d1:c3:61:7d:37:da:59:1e:f9:b0:ce:8d:
2b:73:89:e4:59:de:8a:62:4c:98:3a:16:b2:3c:e8:f5:32:30:
2b:4a:82:64:18:8a:f1:ee:38:a9:90:37:5e:66:b3:a9:08:b6:
b9:4d:6f:08:41:4a:f7:b1:f9:da:5d:9b:92:1a:02:15:5a:a3:
cf:78:fe:1c:a4:a8:a2:68:38:fe:59:e2:7d:fd:e4:90:42:58:
d6:86:8f:70:0d:3c:39:e8:54:51:c6:e9:ef:9e:8f:d1:0e:ed:
c0:4d:67:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 29 16:02:21 2025 by rpki-client