Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier: ozjXn52z28BBPEhUsKUM/zjgJgWIClE9UtXwZenkcLA=
Subject key identifier: 19:27:8C:F9:87:87:2C:13:EB:2F:C1:EB:A2:0A:9C:75:C1:1F:20:57
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial: 019A228AC4674B1CD6FE4097C3BE52A70FE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number: 0375
Signing time: Sun 26 Oct 2025 22:01:50 +0000
Manifest this update: Sun 26 Oct 2025 22:01:50 +0000
Manifest next update: Mon 27 Oct 2025 22:01:50 +0000
Files and hashes: 1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: VYV4ZF0cjtX81INk1i1w0VabjapRRhSnJIQkyC+dLx4=)
2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:c4:67:4b:1c:d6:fe:40:97:c3:be:52:a7:0f:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Validity
Not Before: Oct 26 22:01:50 2025 GMT
Not After : Oct 27 22:01:50 2025 GMT
Subject: CN=19278cf987872c13eb2fc1eba20a9c75c11f2057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:03:6c:ee:f4:eb:08:24:40:2b:40:13:ef:d7:
a7:1d:5b:78:57:ca:d8:8d:ce:ea:5f:fb:74:a6:dc:
77:fe:ff:4f:37:e7:d0:5e:a6:7a:2b:f2:41:db:5d:
cb:f4:87:8d:bb:d9:1b:b9:55:aa:cc:f4:94:89:b7:
2b:75:f4:dc:32:1f:62:4f:e3:17:7c:a5:c8:90:a1:
3f:88:64:46:ec:87:7c:57:f3:8c:b5:bd:4a:91:ee:
aa:53:73:b3:51:51:29:aa:1e:4c:44:da:5d:92:a2:
7b:54:29:39:eb:06:8c:f8:12:bb:d1:4a:4f:85:df:
25:31:3e:72:ff:5b:b9:18:d6:9d:84:6c:9c:b3:db:
37:a6:fa:d1:81:d1:d4:ca:f8:01:bd:94:5f:6b:b8:
69:07:10:fa:af:26:c2:90:d0:80:f6:6d:65:83:94:
16:d8:3f:86:6f:77:a9:6f:7a:db:55:81:f7:c9:57:
91:df:3b:b8:54:d1:36:de:de:c5:f2:b5:31:cc:42:
a5:4e:36:2b:23:59:ba:78:90:f8:3a:7c:16:96:80:
92:79:a0:e7:48:a0:b6:a6:35:ec:3e:e1:51:b8:2b:
ea:a8:74:c5:b8:7f:92:61:db:2d:43:43:1e:49:2f:
11:e5:9b:7d:53:fd:52:6f:0e:2b:ac:5a:6a:e5:62:
bc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:27:8C:F9:87:87:2C:13:EB:2F:C1:EB:A2:0A:9C:75:C1:1F:20:57
X509v3 Authority Key Identifier:
keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:40:5a:31:25:46:03:75:f6:79:2d:4b:94:03:46:99:b9:d5:
96:88:d4:50:6a:a2:38:c7:9b:ea:93:a7:ae:55:ce:e0:1d:ac:
9f:7e:55:96:20:7a:66:d8:3d:60:f4:ae:c8:15:1c:4a:5c:b4:
bf:cd:3a:f8:4e:92:89:aa:b2:b4:39:fc:85:e3:19:a0:84:39:
86:b8:30:72:d4:92:08:45:49:56:f7:7a:b7:19:4d:36:55:df:
2e:b4:43:d4:bb:21:29:23:a8:ba:a3:cc:a0:86:ed:b0:f2:0c:
7b:87:44:8c:db:a8:f6:59:7f:90:07:eb:bf:ec:12:0b:d0:44:
63:25:82:79:d3:3e:dc:d7:f7:ac:bb:12:d6:08:eb:cf:67:3e:
53:b5:47:1b:a8:f4:20:8c:33:09:96:b5:f2:bf:66:10:55:4c:
a3:de:4e:05:bd:56:a2:de:1f:9e:00:f3:d4:f0:b4:cb:91:6e:
b1:74:e4:76:fe:22:d7:76:f6:12:c7:ad:e0:33:82:af:bf:e4:
c6:75:d6:2b:b8:43:26:dd:d0:bc:c2:26:36:7a:0b:7f:24:f3:
76:40:83:4f:de:85:75:55:5e:42:c3:aa:2a:c8:89:b9:ec:42:
5b:60:62:44:20:08:0f:87:d9:f2:05:be:f2:32:32:74:14:e2:
a9:56:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:42:17 2025 by rpki-client