Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: t1aQIGQpCLnwayExOFgDxLV5mbO+ABrAY2LKh3IJewQ=
Subject key identifier: 13:67:8F:0E:12:21:E9:14:25:F3:5A:78:F6:A6:33:04:47:7A:4F:29
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 019A21094E45ED8B02843E12178F4388AF9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 15:00:49 +0000
Manifest this update: Sun 26 Oct 2025 15:00:49 +0000
Manifest next update: Mon 27 Oct 2025 15:00:49 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: B6ueb4ghys6HQoMIS+YL7HhnyqKUnRgArNpm1cxf+pc=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 15:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:09:4e:45:ed:8b:02:84:3e:12:17:8f:43:88:af:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Oct 26 15:00:49 2025 GMT
Not After : Oct 27 15:00:49 2025 GMT
Subject: CN=13678f0e1221e91425f35a78f6a63304477a4f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:2b:57:52:a6:cc:d2:8f:77:49:ff:e9:37:
b7:9a:48:4e:9e:94:cf:fd:6c:61:4f:b8:1d:2d:a7:
5a:10:80:a4:bc:18:03:ad:87:4d:e5:8c:55:b5:d8:
f3:6b:2a:c0:61:0d:78:03:93:6e:b7:90:98:4c:e2:
16:60:29:f9:22:b9:03:85:e1:6b:d2:3d:81:28:b1:
84:ef:06:a8:26:95:87:4e:f2:39:a8:af:32:b0:cf:
e0:ce:7b:5e:f7:7a:98:06:91:18:be:68:b0:5d:2b:
1f:6d:3c:11:a0:97:3e:9b:00:5f:c3:a0:8a:23:de:
f6:46:99:df:da:75:db:f3:cc:6d:00:53:d0:a9:e8:
f8:03:24:e0:1f:2d:27:06:f7:ed:9c:cd:8f:98:a9:
c7:60:f3:1a:bc:ac:84:cf:35:12:97:81:45:a9:0b:
5e:96:3b:2e:1d:f9:bd:94:8d:85:75:3a:b0:bf:fc:
c8:dc:58:25:57:93:b8:5a:71:37:c1:0f:bc:be:8f:
63:7c:52:f1:30:88:05:63:5e:64:27:75:48:38:90:
9a:b0:d9:ac:6d:21:8f:74:3f:0f:ec:e5:83:b6:b7:
31:ef:4d:54:2b:2b:bc:b1:e6:c7:a7:5c:c0:cd:c7:
90:66:9a:bd:8e:0b:d9:98:d5:41:40:48:5b:ea:38:
26:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:67:8F:0E:12:21:E9:14:25:F3:5A:78:F6:A6:33:04:47:7A:4F:29
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:0a:0e:89:34:e1:db:f3:10:4c:74:f1:f8:29:37:1d:76:8b:
1f:e0:5e:31:e0:d1:cb:d6:3a:5d:dc:a5:4b:0c:60:57:b5:b1:
fc:7b:3b:27:8e:ae:80:9f:da:1d:7d:69:8c:07:15:de:d4:b1:
e6:28:37:01:a8:29:bf:84:ea:4d:27:44:bc:80:e6:40:cb:bd:
1f:63:3f:47:3a:5e:b6:19:dc:d9:5c:97:4c:ab:2e:3e:94:58:
84:3b:f9:ce:9a:9a:72:22:1d:68:b5:20:f3:be:ae:c5:9f:f8:
32:31:f2:0a:00:e1:0c:54:dc:dc:ed:41:cd:ee:b4:2c:1c:b1:
9a:b7:1d:95:80:57:c1:d8:e7:1c:90:67:8e:06:86:b2:25:21:
ba:9d:6e:39:06:2b:fb:74:66:a2:7c:9d:e9:3a:11:f2:5e:4b:
bb:f7:46:c7:de:13:47:77:45:24:53:57:49:ff:31:cf:0c:32:
54:40:61:1e:f8:36:83:4a:90:da:75:69:4c:d4:9d:b5:78:b3:
e9:0c:b5:38:30:85:c7:ce:a0:6f:61:6e:fc:9a:dd:8d:e8:aa:
c2:d9:87:62:7f:09:5f:d8:0c:5e:5b:38:cb:79:31:b6:ec:c8:
8b:5e:d1:c3:42:69:a2:41:7a:8e:72:88:b7:4b:1e:c1:b0:93:
38:f0:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 01:48:14 2025 by rpki-client