Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
File: 4MKGY5gUKldLpHsZfXF5G14jr3w.mft (raw, json)
Hash identifier: clQHJM83uSAZZY/YblOmLghNjoknWLL8cdh/pHPmX+I=
Subject key identifier: A5:19:FE:15:C8:2E:3A:7D:72:F5:F7:5F:26:87:6A:10:DA:24:39:8C
Authority key identifier: E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
Certificate issuer: /CN=e0c2866398142a574ba47b197d71791b5e23af7c
Certificate serial: 019A1EAC697E37A70B3E1E20550EBEA92B56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
Manifest number: 16F2
Signing time: Sun 26 Oct 2025 04:00:06 +0000
Manifest this update: Sun 26 Oct 2025 04:00:06 +0000
Manifest next update: Mon 27 Oct 2025 04:00:06 +0000
Files and hashes: 1: 4MKGY5gUKldLpHsZfXF5G14jr3w.crl (hash: VQtUjzxYfu3qBuytQShernqHFzJwpZDau+rrEY1YdcY=)
2: S8FepsEj5yTfhoJEKIV6MM1Ae2g.roa (hash: akrj8wyt2+2beT5os1QACCsWDw3JzGKZbUx/i8JS4K0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ac:69:7e:37:a7:0b:3e:1e:20:55:0e:be:a9:2b:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0c2866398142a574ba47b197d71791b5e23af7c
Validity
Not Before: Oct 26 04:00:06 2025 GMT
Not After : Oct 27 04:00:06 2025 GMT
Subject: CN=a519fe15c82e3a7d72f5f75f26876a10da24398c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:4d:20:77:18:cf:c1:fd:6a:dd:64:f4:e4:
fd:a6:6e:0f:18:c4:c8:2a:86:60:aa:ca:4c:14:25:
4b:8e:86:93:3f:18:92:9e:4a:77:65:39:a8:34:ee:
18:1d:5b:6e:03:ce:30:52:27:cf:28:c4:23:0c:0c:
e3:9a:d0:35:5f:6a:f2:2e:35:e8:26:f0:cc:82:96:
39:6c:c0:2d:c2:df:a2:fb:51:26:26:42:ba:30:4c:
15:18:f9:18:62:77:cf:21:19:54:cd:14:1f:da:42:
ae:68:a0:86:ee:3f:ec:bc:60:52:c7:90:0b:d2:e0:
55:ea:41:00:a1:bb:1a:40:01:dd:a3:97:35:c4:cb:
4d:05:b7:05:d0:c2:5d:ea:83:83:80:5a:c3:fe:c9:
f6:b4:a5:52:c6:15:44:c3:4e:12:33:ec:7d:c4:98:
d1:0a:0b:54:71:69:fc:57:36:d5:66:87:d7:cc:f3:
28:7f:d7:fc:7e:90:ca:75:d8:25:39:c1:6d:24:cc:
66:85:dc:f6:88:51:4e:85:5e:93:7d:d6:b6:2b:d1:
1a:97:eb:f8:b4:47:cb:a6:d6:29:a3:74:39:b2:60:
f6:d5:84:61:9e:cd:9b:16:a3:83:05:c1:a2:5e:06:
55:ec:fb:42:47:aa:00:7d:92:56:51:15:44:e8:2f:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:19:FE:15:C8:2E:3A:7D:72:F5:F7:5F:26:87:6A:10:DA:24:39:8C
X509v3 Authority Key Identifier:
keyid:E0:C2:86:63:98:14:2A:57:4B:A4:7B:19:7D:71:79:1B:5E:23:AF:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4MKGY5gUKldLpHsZfXF5G14jr3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/3cd961-2dcd-4518-bfb8-a16cf7ac7dd8/1/4MKGY5gUKldLpHsZfXF5G14jr3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9d:96:12:97:c5:be:32:18:ea:bf:98:de:49:27:ee:38:20:
85:d4:4d:bd:d6:4f:3c:4d:cf:96:03:4b:20:23:6e:a9:13:83:
58:a4:16:1b:7d:34:4b:89:87:90:8d:65:0d:b1:69:c9:2f:b2:
7b:b4:69:26:7b:b6:80:a1:2a:b5:0c:5d:d4:08:19:d0:34:45:
ff:83:35:c9:f2:f3:57:31:9a:2c:c3:f2:18:a1:85:0d:56:eb:
d0:aa:59:44:3e:fe:75:96:c5:76:5d:21:8c:d6:fb:aa:7f:54:
99:f9:1a:d1:0a:08:28:6f:bf:a8:8a:ba:7e:13:6e:68:7c:04:
2a:fc:49:b8:b0:e8:24:35:37:a0:82:cb:ae:64:a7:64:7c:0d:
37:81:c0:d3:c3:f6:c2:da:a3:3d:7f:0b:9b:0a:47:e6:eb:8c:
ec:ff:0c:37:e7:35:11:a5:84:4f:cc:49:fe:fa:9f:c0:20:8a:
83:e3:0d:4d:ec:74:13:8d:cd:68:f9:c4:6c:f6:1f:68:26:85:
e6:41:ae:cd:d7:13:25:44:62:46:c1:9f:a8:02:64:63:17:6b:
69:4c:55:72:d6:e6:4d:7e:68:f0:4b:b8:0e:46:6f:02:e7:ad:
bf:43:85:96:83:69:a7:7b:0f:23:c6:6e:4d:0d:27:83:95:52:
18:f2:a7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 12:07:37 2025 by rpki-client