Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: FOiAf/jQXeJsJT2bzHEFiyMT8yjvd1I4YixjtVgK5Hw=
Subject key identifier: A7:F9:75:96:BE:57:ED:95:3F:A5:4C:05:EE:8B:9E:CE:BD:06:D2:53
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019A1F88C3B58E786C8C93EFB46A98894C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 0689
Signing time: Sun 26 Oct 2025 08:00:47 +0000
Manifest this update: Sun 26 Oct 2025 08:00:47 +0000
Manifest next update: Mon 27 Oct 2025 08:00:47 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: SiCZ8Ig0U6m3h2Cq51CV8J8Pvk26ngB323aupB/aH4g=)
2: LbRLSCZgNjKQ4NVrLzk4GRKtgYY.roa (hash: /kAcDTHsuQOYOXcr8j8Fv03Ys7En4o0Y+S9NpXp7/Jw=)
3: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 05:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:88:c3:b5:8e:78:6c:8c:93:ef:b4:6a:98:89:4c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Oct 26 08:00:47 2025 GMT
Not After : Oct 27 08:00:47 2025 GMT
Subject: CN=a7f97596be57ed953fa54c05ee8b9ecebd06d253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ab:ed:0c:13:d8:ef:5a:b8:ef:a4:1b:a9:b0:
f7:f8:f3:cb:c6:a5:37:1e:c4:05:ed:1e:86:1e:74:
1f:d5:79:b9:b4:7c:2e:12:67:8e:a7:77:79:70:b8:
15:d6:ca:6d:c9:a5:7f:09:c7:d1:2c:5b:1c:d9:d4:
92:fb:2e:2d:5b:50:d3:8a:dd:92:02:6e:09:3a:7d:
8c:34:cc:97:92:6d:5c:34:0f:27:73:43:66:36:a5:
e7:48:fa:0a:12:83:d7:9b:ab:84:2e:5d:2d:4b:ac:
76:e8:d8:a0:6e:c3:3c:2d:ce:11:c9:21:3e:07:0b:
52:c4:b1:61:fb:4f:9c:d6:dd:a7:bf:2f:d8:1b:d7:
1c:c7:15:ed:69:1b:66:b9:fa:e5:27:dc:dc:71:44:
a5:be:66:e0:b6:f8:be:48:bd:72:6c:d0:bf:19:77:
2d:aa:e1:69:c6:6f:4b:e2:19:9a:8c:e0:48:ee:98:
ad:46:88:f7:57:0a:68:71:ce:e0:be:bc:12:40:8b:
da:99:80:b3:02:7e:06:d9:4b:ef:09:ca:2b:cd:e6:
7f:50:12:46:a9:c8:35:41:57:5d:ef:d8:e9:1a:5e:
59:83:3b:3d:31:21:b1:d3:44:f3:4c:29:4b:0f:05:
46:06:43:e1:f6:c8:c9:3c:43:47:05:fa:0d:4d:e8:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F9:75:96:BE:57:ED:95:3F:A5:4C:05:EE:8B:9E:CE:BD:06:D2:53
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:40:65:8d:7b:b9:3e:89:57:98:7f:b2:4b:93:eb:b7:81:
50:81:3c:d7:05:d2:85:75:bd:36:17:13:12:69:d7:b0:05:8d:
4c:1d:b5:6d:63:9b:43:da:a4:33:8c:67:57:8c:0e:08:aa:38:
28:f7:24:32:16:ad:df:87:9a:a3:8d:cb:74:0c:b0:8d:a5:dc:
22:c4:93:be:d6:4b:97:8b:4b:ed:ae:01:d6:fb:2b:13:7d:ce:
1b:2a:60:3a:78:5d:ec:36:8e:c1:45:c3:2b:a4:70:bd:9b:b7:
c6:f7:31:42:32:52:00:5c:01:88:4b:fc:73:25:44:91:e6:3b:
79:4c:74:23:ea:e5:c4:9d:ed:b7:e6:08:87:f3:af:9b:dc:51:
27:23:8c:d6:73:57:10:48:07:04:df:9b:44:4c:99:14:ff:44:
36:07:75:1b:59:bd:f2:78:f4:d5:4f:b3:f4:b2:b6:03:bb:a0:
5f:17:79:28:e3:c4:1f:ec:18:26:73:fd:9a:25:46:fa:25:88:
e6:30:81:05:dd:6d:4c:bd:06:8a:9e:93:67:89:8e:b1:20:89:
5f:57:35:d3:ca:f1:90:b1:1d:ae:f4:fe:0b:56:c6:a2:1b:ec:
04:72:8f:f8:5e:a2:74:27:0d:ce:a1:ba:a3:2b:b5:55:0e:2a:
f0:80:16:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 14:30:52 2025 by rpki-client