Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
File: 4rHi5MUIxsepi2WYUodFyBP60x0.mft (raw, json)
Hash identifier: cd0oH0X/V/qNhDqGGysm7JrPM7hEsk1kv7GVfUQgmb8=
Subject key identifier: DF:72:94:D3:08:8F:67:6B:74:E3:58:8F:C2:C8:56:27:78:B9:3C:92
Authority key identifier: E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
Certificate issuer: /CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Certificate serial: 019A24E62C8C25AB8E719BC670E436FE834C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
Manifest number: 16FC
Signing time: Mon 27 Oct 2025 09:00:55 +0000
Manifest this update: Mon 27 Oct 2025 09:00:55 +0000
Manifest next update: Tue 28 Oct 2025 09:00:55 +0000
Files and hashes: 1: 4rHi5MUIxsepi2WYUodFyBP60x0.crl (hash: 5AeNm7Dt0tgOX7P0zic6DBxPiGfLG/mW/jmX3VHrQMc=)
2: 883carP1hhWb3_MmiKGn80hphf0.roa (hash: cPZWjDagkqb5tEO5wfwI807e/U08AzhpwxGlaqpcxgI=)
3: AnftS6a3tNRTfwARV2obSQtU-1Q.roa (hash: 1O5FkUYkHZKrQKTSneyG+jslWvu7oIHqq1i+yTKMvxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:e6:2c:8c:25:ab:8e:71:9b:c6:70:e4:36:fe:83:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b1e2e4c508c6c7a98b6598528745c813fad31d
Validity
Not Before: Oct 27 09:00:55 2025 GMT
Not After : Oct 28 09:00:55 2025 GMT
Subject: CN=df7294d3088f676b74e3588fc2c8562778b93c92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1b:42:1d:1b:2e:60:5f:22:db:14:ce:95:85:
9c:66:85:c2:d4:bf:b4:3f:4f:20:ac:57:a0:b4:ec:
a4:7c:8d:2f:4c:ad:3f:90:51:9f:80:9b:61:bf:85:
e7:c6:76:97:48:3e:10:29:df:df:01:cc:f4:99:fe:
98:e8:79:11:2e:ad:ef:cd:41:8e:fd:16:e8:fe:d0:
50:97:71:7b:60:8f:21:83:64:58:f9:9d:d9:c1:41:
78:c4:5e:c5:10:e3:bf:37:0c:09:dd:77:9c:ce:56:
a3:ef:73:0e:f6:7a:c7:06:3e:0d:52:47:01:b1:64:
b5:9e:7f:8d:50:13:00:7a:44:19:1e:d5:89:c7:2e:
96:42:9c:23:11:cc:72:af:a1:79:1c:0b:e5:8a:33:
49:f5:2f:3f:33:76:c3:d4:5a:ca:fb:6d:72:3e:57:
bb:56:58:71:23:b6:c8:e2:47:69:ed:53:04:ef:b4:
19:9d:07:72:36:32:bb:ed:ce:a1:9f:04:c5:5c:57:
89:5a:70:b9:bd:8c:d6:56:a3:b2:5e:30:37:44:19:
f3:a5:98:26:ca:15:9e:ae:32:aa:c9:49:13:38:4b:
3f:01:eb:27:8a:d8:20:e4:96:0a:e2:ca:f7:9a:83:
5d:52:bc:20:fc:c6:fb:bf:66:7b:8a:84:db:27:36:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:72:94:D3:08:8F:67:6B:74:E3:58:8F:C2:C8:56:27:78:B9:3C:92
X509v3 Authority Key Identifier:
keyid:E2:B1:E2:E4:C5:08:C6:C7:A9:8B:65:98:52:87:45:C8:13:FA:D3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rHi5MUIxsepi2WYUodFyBP60x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d31e5f-0f52-4623-867a-543d6182e294/1/4rHi5MUIxsepi2WYUodFyBP60x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ef:b3:63:7d:c1:27:b4:e3:fb:7c:86:9d:20:66:08:41:9f:
6d:12:53:6d:e6:88:8e:1f:34:14:ab:79:0d:69:90:24:96:85:
16:0d:58:93:e4:85:6f:01:57:ca:73:11:6c:63:2b:42:00:0d:
ed:5c:9c:a5:a5:12:17:76:de:97:09:95:f5:8d:81:07:8b:72:
e0:f0:8a:db:95:07:f9:99:7f:4c:f3:80:a9:a4:2d:9c:28:27:
3e:8c:46:ca:0a:09:c4:e2:fa:40:c0:04:32:e2:f6:9e:70:34:
16:57:0b:de:ff:9d:54:32:48:a2:7f:c7:38:0c:73:62:28:57:
ee:51:da:40:2f:01:f6:26:6b:71:f5:8d:88:39:a5:f2:26:55:
70:4c:c4:d5:87:f8:c8:cb:99:e5:8e:3b:6d:ff:8d:d2:0b:b6:
e6:b9:a0:38:95:f1:be:b3:0d:35:34:b2:6e:b4:77:8d:ae:10:
a7:a3:57:05:8d:dc:c4:b4:41:15:82:c3:63:28:cf:04:43:46:
51:c4:0e:88:25:fa:58:df:24:c4:c5:62:6d:b9:10:7a:6e:a2:
02:8f:df:a3:e3:98:08:07:75:8f:22:44:5a:87:a5:62:10:fc:
4c:57:44:1f:f6:19:98:70:4d:5c:e4:78:7b:75:5c:50:4c:ed:
71:12:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:07:40 2025 by rpki-client