Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
File: 4iqTzrgrZ1qEsNeOea5KeXypgjE.mft (raw, json)
Hash identifier: MyazsSTNBeUZGemv/sDnW2V//6A3jc8RldEFRRnOAdw=
Subject key identifier: 3B:64:56:49:04:21:12:CB:EF:1F:1B:FB:1F:B9:08:F2:3F:F1:97:EA
Authority key identifier: E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
Certificate issuer: /CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Certificate serial: 019A2477A7674E8391AA83710AB6448E89E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
Manifest number: 128E
Signing time: Mon 27 Oct 2025 07:00:12 +0000
Manifest this update: Mon 27 Oct 2025 07:00:12 +0000
Manifest next update: Tue 28 Oct 2025 07:00:12 +0000
Files and hashes: 1: 4iqTzrgrZ1qEsNeOea5KeXypgjE.crl (hash: D+iTPjEt0VhZ9bf+ko612mBfGUpb2Tdy/wBCPqEoy1o=)
2: yB2qv2hArqh8Rg0DZ4yGfxQJ57I.roa (hash: b+3wO516colETH6Q8Hnf3dC3oM2heED/4qOLBklRlP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:77:a7:67:4e:83:91:aa:83:71:0a:b6:44:8e:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22a93ceb82b675a84b0d78e79ae4a797ca98231
Validity
Not Before: Oct 27 07:00:12 2025 GMT
Not After : Oct 28 07:00:12 2025 GMT
Subject: CN=3b645649042112cbef1f1bfb1fb908f23ff197ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:b0:a0:ea:3a:2b:fc:cf:45:9e:27:95:87:
e0:d8:4f:b8:0c:f7:48:63:42:3b:16:1e:f8:0b:17:
02:42:4a:3c:99:b0:39:2c:b7:80:65:bd:ca:0f:9b:
83:ba:63:0b:0f:64:1e:47:a9:ba:21:92:d3:1b:a3:
25:da:4d:70:53:75:9b:0c:50:d9:c0:93:98:db:29:
7a:e7:bc:0f:15:ad:5d:40:11:33:a5:dc:6f:d8:37:
56:26:46:3f:df:38:6c:68:a5:1a:02:b2:84:f6:d3:
8d:22:bb:99:a5:3f:3b:d6:d3:7a:55:63:2d:b5:7b:
4c:66:1a:e5:8e:20:0d:26:8c:b1:f5:f2:9f:91:01:
26:1a:2f:7a:75:ae:7e:6c:1c:61:00:6a:9e:25:eb:
6e:f1:2e:ac:41:ae:36:8a:41:2e:36:0a:2b:70:4b:
8a:dd:79:14:95:9b:46:20:d2:1d:b0:8c:5c:67:34:
5f:8b:08:bc:36:60:de:be:58:c0:6b:0b:55:69:14:
55:23:ad:20:38:e4:c8:df:52:4f:3d:c1:6b:63:47:
84:f6:e0:bb:77:d5:85:f2:32:a5:42:59:63:be:bb:
57:63:d1:43:7f:b4:98:7b:41:d2:aa:11:03:39:1a:
23:9e:6c:e3:7b:3a:a8:69:42:3b:5a:37:0d:f1:31:
06:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:64:56:49:04:21:12:CB:EF:1F:1B:FB:1F:B9:08:F2:3F:F1:97:EA
X509v3 Authority Key Identifier:
keyid:E2:2A:93:CE:B8:2B:67:5A:84:B0:D7:8E:79:AE:4A:79:7C:A9:82:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iqTzrgrZ1qEsNeOea5KeXypgjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2e82cb-4a6e-408f-af20-843154a80b72/1/4iqTzrgrZ1qEsNeOea5KeXypgjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ac:94:fd:3f:47:96:59:59:46:68:ee:73:1a:6d:9f:b4:f4:
67:92:c7:b3:37:f9:52:25:8d:ed:77:79:db:bd:e5:8d:09:75:
4e:fb:6a:fb:f6:6c:74:16:01:e6:08:62:5e:89:77:5b:3d:47:
9f:f0:51:63:b3:83:78:9f:aa:f9:6c:93:ae:47:de:7d:23:c0:
12:18:b2:01:1a:b6:e8:c9:17:d0:2f:20:f0:33:e3:24:b1:ca:
fa:48:ef:94:b9:c2:14:e7:b5:32:1e:a9:70:7e:50:57:a3:bd:
64:bb:9b:04:42:24:6c:68:e8:ad:a9:d7:8a:10:5b:8b:72:b4:
74:6b:bb:33:08:e7:ba:9c:09:d0:b3:72:91:ff:29:c0:8f:5b:
c7:28:8e:d6:5b:42:34:be:14:fe:21:7b:69:32:fb:6e:88:19:
c4:a5:78:8e:f7:fa:57:c3:bf:af:d7:15:49:65:e7:ea:1e:d4:
7f:6f:48:76:76:b3:5d:74:cc:6d:72:2f:62:c6:fa:5e:ed:e9:
2f:06:a8:4b:4a:c5:bc:85:73:a5:2f:d9:c3:7a:fc:ed:de:8c:
e1:9a:60:26:8d:24:0f:f9:9c:01:fc:d6:62:a6:cd:0f:51:f7:
05:b9:69:12:9e:ef:77:96:ef:2c:e5:a5:c8:c1:c7:c3:f1:25:
17:cf:7c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:31:14 2025 by rpki-client