Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
File: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft (raw, json)
Hash identifier: AgDVdYN9eR0b1IMDkczrMLwF6EQAGmoUVhMA42/Nlqo=
Subject key identifier: AF:ED:85:36:7E:39:7D:B8:10:BB:6E:D2:C6:F9:F8:1C:17:E4:5F:1C
Authority key identifier: E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
Certificate issuer: /CN=e1a323546484220cb402063380f4016369262acf
Certificate serial: 019A23659EB39D769C147BF488B014C08C4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
Manifest number: 0A3A
Signing time: Mon 27 Oct 2025 02:00:53 +0000
Manifest this update: Mon 27 Oct 2025 02:00:53 +0000
Manifest next update: Tue 28 Oct 2025 02:00:53 +0000
Files and hashes: 1: 4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl (hash: T6WBCswMX2hPacaFhGpEot2gjJMK4q6jYnNshcCFYSM=)
2: oLxnPDOjx34zqrjQ27ju_ZuWYV4.roa (hash: aFW6lgXJpeg0bmQI7iZHPliZcmK0ToNkD5OYtI2CIQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:65:9e:b3:9d:76:9c:14:7b:f4:88:b0:14:c0:8c:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a323546484220cb402063380f4016369262acf
Validity
Not Before: Oct 27 02:00:53 2025 GMT
Not After : Oct 28 02:00:53 2025 GMT
Subject: CN=afed85367e397db810bb6ed2c6f9f81c17e45f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:6e:9e:1d:89:a2:b9:41:a0:1a:c0:70:7d:
1c:ac:84:74:7b:3e:6e:ee:bc:1c:58:87:c2:c6:04:
f0:93:d0:5a:3d:9d:63:11:91:95:fb:9f:9b:6e:6d:
b2:be:8d:2d:4b:06:87:1b:47:5b:a6:f9:70:dc:fa:
0d:2e:a2:86:47:c9:b1:8d:5c:60:15:1b:04:41:07:
b1:dd:58:bb:27:b5:25:ea:31:75:e3:2d:f8:7d:90:
ff:4d:ab:38:56:ae:f6:b9:2c:60:4c:11:2b:cd:e4:
aa:45:0e:f6:05:7a:54:d7:79:0a:95:32:28:be:5f:
1b:f5:60:b2:a1:84:b1:48:13:4e:79:29:f7:df:c7:
1c:a2:00:b1:a6:82:76:5a:c1:63:68:11:eb:90:42:
4c:fa:14:f6:55:5a:d5:72:f0:70:94:ba:b6:5c:77:
76:db:51:1a:63:31:03:df:8f:30:1e:6a:b5:a6:e3:
c1:c4:ff:b8:3f:06:fe:aa:8f:97:01:7b:e4:92:9f:
8e:b4:26:a2:af:3e:1c:0c:c7:4f:53:5e:d7:21:fe:
d6:a7:20:98:1f:ee:0e:5b:01:99:34:79:e6:dd:39:
15:fd:7a:93:94:f6:4d:1f:85:4b:a2:11:57:9d:e9:
55:e6:9a:4a:87:23:41:82:22:b2:dd:a5:9c:06:a6:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:ED:85:36:7E:39:7D:B8:10:BB:6E:D2:C6:F9:F8:1C:17:E4:5F:1C
X509v3 Authority Key Identifier:
keyid:E1:A3:23:54:64:84:22:0C:B4:02:06:33:80:F4:01:63:69:26:2A:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aMjVGSEIgy0AgYzgPQBY2kmKs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/d21da4-f65b-4531-976a-8ec0604e6929/1/4aMjVGSEIgy0AgYzgPQBY2kmKs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:94:cb:b6:40:72:e1:f0:09:c5:b1:91:f5:e3:af:84:d7:
5f:8a:4f:7d:cf:96:7e:89:15:3d:33:5c:ef:e3:c4:45:fd:f4:
f3:9e:13:39:41:ea:e9:72:29:d7:cc:ef:a5:6d:82:d0:b8:03:
3f:f7:ca:f5:95:0b:91:6d:b2:90:37:35:a1:2b:97:1f:0b:15:
15:96:cf:03:4d:1a:70:d0:83:33:a9:a6:9b:3d:29:1c:7f:fb:
93:bf:58:c2:7f:df:68:a1:39:1a:dd:e5:6d:bd:4e:b6:da:1a:
ab:83:76:12:de:a2:20:dc:dc:d0:80:94:41:5a:74:7a:4b:77:
73:b0:00:1f:6d:61:2c:f2:a7:39:5c:53:82:a2:73:9e:61:00:
f5:de:bb:ca:7d:ca:64:24:a8:23:2e:19:57:6d:e2:26:d5:55:
ee:8d:69:df:88:cf:a7:a2:aa:61:0c:89:29:bc:70:3c:6b:92:
c5:85:ab:cf:2c:c3:4c:97:eb:e3:43:21:39:23:4b:2c:ec:bf:
33:a5:ed:f0:3c:1a:ba:aa:a3:41:70:e7:ba:35:61:3c:65:26:
e2:37:e9:76:9e:45:f5:7f:57:5c:cf:f5:3b:e4:c1:ea:fd:1d:
58:01:c9:0a:34:73:0b:0e:e7:a6:2c:10:28:9c:da:82:9b:ec:
2d:79:e2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:21:07 2025 by rpki-client