Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: 8QKPw8XrZXkJdWburhPJYlGIAISOwcsfjvncQgz8w1Q=
Subject key identifier: E7:0C:52:18:02:13:CF:3C:91:FC:92:8F:AD:D0:75:76:29:29:82:24
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 019A2A43B8F4570241DFBC8B4DE09D3303EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 0423
Signing time: Tue 28 Oct 2025 10:01:12 +0000
Manifest this update: Tue 28 Oct 2025 10:01:12 +0000
Manifest next update: Wed 29 Oct 2025 10:01:12 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: 7x+pDtTnil/b8rajq9jG5pu7THYK61rdWnUF+XNwopU=)
2: YBfLAkuYURNDoMTvjD2hLc0uuNc.roa (hash: gM7Y+qrK9OGNkcbA31bQAYiigRBUM5Di4cIR3nOhPM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:b8:f4:57:02:41:df:bc:8b:4d:e0:9d:33:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Oct 28 10:01:12 2025 GMT
Not After : Oct 29 10:01:12 2025 GMT
Subject: CN=e70c52180213cf3c91fc928fadd0757629298224
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7e:b4:b7:9c:b7:7a:ba:e3:74:96:f7:c3:da:
b8:a3:0e:93:cb:fb:fc:58:c5:ca:5f:28:cd:21:c7:
c5:6e:65:fd:93:71:25:48:46:cb:04:f2:42:12:ed:
0d:19:49:69:f0:e4:ab:41:f3:39:f8:01:0a:7e:68:
a9:0d:f2:78:9e:70:c7:39:77:2c:ba:21:a4:88:f4:
a5:06:9d:18:82:67:b4:d8:15:92:c8:1b:dc:21:38:
b3:42:e3:bb:02:36:40:0b:18:46:45:8c:7a:1f:d2:
9f:51:ef:89:1a:c3:47:54:9b:dc:41:c6:36:4e:33:
4a:ea:5c:ef:a1:36:05:fa:ee:22:16:71:c8:0e:3a:
15:48:8c:00:11:bb:af:9c:55:44:98:dc:cb:06:24:
4b:31:ab:c0:71:b6:3a:52:30:97:5c:b3:bf:01:47:
2c:39:aa:ec:91:b8:e4:57:82:b8:eb:b8:a8:66:d2:
29:3d:4e:50:cb:c2:61:82:75:4b:1a:65:a8:9f:b3:
f8:fe:6b:a1:e0:97:0f:e4:f9:d3:04:d6:3b:7c:37:
66:39:f1:2f:e8:a6:f8:37:1f:5a:2d:79:0e:88:2e:
6d:ce:5d:dd:d3:fb:d7:8d:f0:14:3f:84:a4:f8:e0:
26:5a:88:c4:e7:2c:58:c7:9d:4b:32:1b:e8:06:d7:
1a:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0C:52:18:02:13:CF:3C:91:FC:92:8F:AD:D0:75:76:29:29:82:24
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:55:90:c3:d9:33:7d:4d:3a:c8:9c:62:c7:41:16:a5:d4:dc:
21:91:8a:35:2c:e0:8e:b5:a1:41:ea:3a:05:b1:65:cc:26:97:
ce:69:dd:4b:bc:e3:58:e9:ae:c5:d4:da:bc:cd:8b:f0:d7:06:
90:35:e8:f9:75:ea:55:d6:ec:86:4e:c7:e9:02:f0:e0:fc:d6:
09:a1:23:ee:3f:39:55:e1:5e:1c:cc:f7:cc:7d:0a:11:6f:ad:
5b:3d:b5:0e:e1:e2:b1:ac:f3:52:e9:18:09:e9:ac:7d:8b:bd:
5f:58:5b:16:dc:13:7d:fa:ee:f2:4e:40:86:ed:73:18:c3:c9:
65:06:7f:73:06:1f:79:5b:10:ad:31:8c:a5:22:db:21:2c:81:
0c:df:0b:3e:e1:37:67:3a:e0:2c:38:50:42:c6:23:3a:3d:1d:
7a:1e:7b:0f:3f:61:20:69:e0:32:d7:08:5f:3a:67:6e:5e:e0:
44:ec:5a:1c:97:ea:72:f4:41:8a:0f:1f:2a:f9:2c:26:60:55:
36:05:82:60:4b:fe:f5:ca:90:26:dc:ee:f4:58:6b:09:75:a3:
f3:40:d0:7d:f4:01:e2:6e:ee:b0:2f:3e:6b:9b:70:46:53:45:
3e:90:0c:d7:11:18:2e:05:84:15:c2:59:5a:48:fd:b5:28:4d:
cc:63:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 13:47:19 2025 by rpki-client