Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
File: 4MijkN3l4VGaS9PadUqT6YhJLWc.mft (raw, json)
Hash identifier: DQ5mUUitT4maK5AXWs6PS+rVpO126L4CZoi9njKpDJ4=
Subject key identifier: E2:78:7E:C1:CB:A1:FC:78:A4:C5:4B:5E:B2:10:46:E2:6F:CC:98:52
Authority key identifier: E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
Certificate issuer: /CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Certificate serial: 019A2855F1659E12BD6B26E10C0D7AA918E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
Manifest number: 1705
Signing time: Tue 28 Oct 2025 01:01:52 +0000
Manifest this update: Tue 28 Oct 2025 01:01:52 +0000
Manifest next update: Wed 29 Oct 2025 01:01:52 +0000
Files and hashes: 1: 4MijkN3l4VGaS9PadUqT6YhJLWc.crl (hash: 5AFi1zgU04W9x9skGSJhX8lnzueOS/qP4nisqP9YbWA=)
2: YqwVujDHhfLEawoR2PJTNXDGOkQ.roa (hash: HReVdGArp33wnWKEmG0bJpK865E8KNNuSsxXzjPZYbc=)
3: vkyQ9sRT6gVwv-_r5Hxs_vmkNXI.roa (hash: GjybPH2LVIWOFxXMsKltGKhDG48Wj0AmaSelmA4NfrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 00:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:28:55:f1:65:9e:12:bd:6b:26:e1:0c:0d:7a:a9:18:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c8a390dde5e1519a4bd3da754a93e988492d67
Validity
Not Before: Oct 28 01:01:52 2025 GMT
Not After : Oct 29 01:01:52 2025 GMT
Subject: CN=e2787ec1cba1fc78a4c54b5eb21046e26fcc9852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fd:d0:d6:b3:61:51:4e:fe:76:7a:ce:5a:0c:
64:54:be:9f:1c:28:c8:6e:d7:9a:1a:aa:ed:40:05:
47:d9:bb:62:e0:88:a9:af:54:8b:b0:c0:6c:d4:38:
5c:ca:f1:2a:4a:1b:f3:cc:fb:b6:d9:9e:25:3b:42:
da:4e:6a:4a:ed:41:e3:cd:81:6e:6b:29:0b:2f:53:
99:f1:7a:5e:d2:40:d9:a9:c9:c4:34:f0:e4:56:34:
d1:cd:90:fe:f9:66:a2:5a:4d:40:6f:10:db:c9:28:
15:71:b7:01:61:c9:d3:f2:c7:25:e8:f4:6c:e4:33:
45:5c:f8:01:90:db:7e:2b:90:d9:e1:5c:fe:4b:81:
44:f8:21:b2:2e:bc:c5:84:e3:bb:09:e0:71:e2:ef:
e7:6d:7b:82:6d:45:dd:cb:11:4b:27:29:32:4d:35:
83:5f:09:8d:96:83:27:92:51:03:4f:6f:8f:4a:33:
6c:c0:8b:5e:d2:33:80:09:22:3f:69:c0:2f:86:7d:
4a:66:b7:08:34:39:de:7f:cd:91:c7:00:e1:9b:9f:
df:63:8d:57:18:4a:8a:73:ce:fd:ca:65:6c:e1:4a:
57:b6:2a:a4:6b:5b:10:fe:c1:68:cc:38:5b:ef:cc:
6e:e0:10:6f:e4:d6:79:94:04:18:73:a7:f4:0a:ba:
58:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:78:7E:C1:CB:A1:FC:78:A4:C5:4B:5E:B2:10:46:E2:6F:CC:98:52
X509v3 Authority Key Identifier:
keyid:E0:C8:A3:90:DD:E5:E1:51:9A:4B:D3:DA:75:4A:93:E9:88:49:2D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MijkN3l4VGaS9PadUqT6YhJLWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/869b30-fcd6-48df-8d25-bef3ba21c715/1/4MijkN3l4VGaS9PadUqT6YhJLWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:1e:56:00:00:5e:0a:4f:5d:1c:ac:f5:10:66:c5:42:ac:7f:
3a:25:43:18:17:c4:fd:72:de:56:4f:3d:c1:16:13:90:ce:fd:
96:26:10:1c:27:95:97:4c:3d:04:02:0b:fe:80:15:6f:6e:cb:
06:46:87:eb:48:8b:19:18:45:97:bd:b2:c8:fe:ec:61:dd:74:
8f:64:ae:44:40:95:03:f5:5e:b9:3b:f9:d9:bd:7e:9c:ec:7e:
09:0c:fa:e8:f2:aa:0a:e1:e4:a6:f1:4b:76:1c:b4:30:7d:91:
3a:0a:65:c9:33:49:89:9f:6f:b2:4f:9f:79:a9:ec:6d:29:f1:
61:a0:eb:c9:8f:43:76:94:31:d6:16:0f:30:5c:90:b4:d3:06:
22:87:53:7c:fc:58:53:e4:b2:61:63:d1:ed:92:af:6b:5f:f7:
bd:a1:43:a5:a9:1e:15:2a:c9:e6:4d:24:d2:53:c4:a6:7b:74:
84:28:12:e8:21:51:b8:dc:ec:d8:75:82:86:e3:cd:a1:24:7d:
74:68:01:20:c2:c5:05:ef:52:72:e2:b5:d5:62:d6:b8:4c:55:
71:0e:e1:6c:2b:8d:6b:22:93:b5:e7:50:4b:b4:9e:fe:2f:b9:
f0:f7:8e:e7:ce:f2:e1:a5:c7:87:0a:cf:5f:db:b8:ce:8b:99:
7b:8f:8a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 06:19:38 2025 by rpki-client