Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: 0aEyImpc4IFksdB08CYgAyC35SYVWh4EB/lvgRYJ0u0=
Subject key identifier: 18:F5:FC:08:A7:FC:91:8C:6E:F4:9B:8F:B7:42:52:52:97:F1:33:86
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 019A1D99CDC284F63FE8A80053FC8AA2E36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 16F7
Signing time: Sat 25 Oct 2025 23:00:10 +0000
Manifest this update: Sat 25 Oct 2025 23:00:10 +0000
Manifest next update: Sun 26 Oct 2025 23:00:10 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: jerSsqZatxPpPs9emQ2Hv8KZeHLh1qx6bhZilLVBw7k=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1d:99:cd:c2:84:f6:3f:e8:a8:00:53:fc:8a:a2:e3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Oct 25 23:00:10 2025 GMT
Not After : Oct 26 23:00:10 2025 GMT
Subject: CN=18f5fc08a7fc918c6ef49b8fb742525297f13386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ee:3c:9b:a5:42:77:93:c1:1d:52:95:49:11:
42:77:f7:a7:98:0c:27:58:cb:d4:2e:4e:f9:59:63:
72:73:00:3f:3e:a5:69:b9:7a:d1:93:ee:87:31:2a:
34:87:dc:c7:ee:cf:5b:88:40:79:10:a4:a0:98:1d:
d1:39:fb:31:32:99:b8:55:6c:8a:09:b2:43:a8:cb:
15:9c:bc:b2:c9:ad:7a:0f:fb:29:20:a0:e9:af:63:
bb:6b:70:3e:0f:d1:ad:47:12:eb:fe:4a:c5:88:72:
80:c4:c2:95:b5:59:76:e3:b6:33:9c:d8:38:fd:8d:
04:59:a6:a7:2f:95:27:89:fe:07:53:6e:8f:d6:26:
0e:74:ba:a2:56:7a:43:f5:3d:8f:1b:38:d8:7a:86:
f6:65:b5:da:c8:d8:08:53:b6:5a:45:a6:be:76:4d:
46:62:8c:e6:a2:c9:61:6a:27:de:63:1a:d1:4d:5e:
f2:15:99:35:5f:eb:63:73:c9:49:98:df:64:f1:4f:
06:a5:33:bd:b5:e5:95:52:42:0a:bb:f5:da:31:be:
7e:2e:17:43:33:4c:5d:bb:29:d9:a7:16:6a:8b:bc:
02:c4:be:47:e5:92:37:bb:c8:17:06:a7:85:b7:cd:
cc:ba:d4:4c:f0:b1:0c:1a:f5:3d:6a:3f:44:e1:bf:
35:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:F5:FC:08:A7:FC:91:8C:6E:F4:9B:8F:B7:42:52:52:97:F1:33:86
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ce:6a:60:0a:67:54:6d:5c:b2:ec:81:d2:cd:cf:18:85:93:
c2:54:6e:03:88:5e:c5:80:31:9b:47:8d:cf:e7:c3:b7:d7:7b:
b0:8d:d6:51:ce:21:30:0c:5a:15:88:3c:b0:5c:ee:df:98:56:
a7:7b:2f:ad:6f:1c:f8:7e:2c:8c:09:f8:8a:93:2a:c4:2b:45:
2f:02:40:03:9d:53:7e:05:0d:41:4b:81:c1:f2:5a:07:00:7d:
92:31:d1:a9:de:ca:ae:83:49:c9:29:0e:ac:f6:c8:91:32:ca:
9a:9e:54:4e:34:15:e0:58:46:87:80:b0:9f:8a:8e:a1:7c:98:
47:2f:27:a5:27:1d:5d:c9:3f:da:38:ee:0b:8e:21:fc:ae:bc:
94:d3:47:61:25:5f:83:50:67:a8:11:8d:6e:f5:74:79:60:c9:
a6:bb:f9:d8:48:d1:83:c1:5d:3f:1e:c9:b4:c5:91:f7:fb:3d:
a4:34:06:a7:22:f7:4d:67:cd:ba:80:2d:c5:40:01:d4:18:b7:
7e:58:c4:d9:6c:83:c7:f1:91:bd:7c:66:5a:99:b8:2a:b7:4b:
49:3b:69:1d:9b:64:ac:45:73:2a:0b:b5:7f:b3:88:ed:d2:f9:
20:27:96:d3:8b:fe:d6:94:b9:63:8f:72:9f:10:7c:ae:8c:c1:
a9:56:32:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:56:10 2025 by rpki-client