Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
File: g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft (raw, json)
Hash identifier: dwqEcShOSwOe768XRV69M0av/QZjzmyrPUgaeYZsUeA=
Subject key identifier: 90:E8:A6:64:D7:C3:F5:B0:29:87:C8:FB:5B:D9:F6:B6:AF:6C:29:09
Authority key identifier: 83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
Certificate issuer: /CN=838c4f810d7a20a783a4fab1c034467b825051b9
Certificate serial: 019A0A4A5EB132E3EA41ECEC392CB0DB4F4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
Manifest number: 16E8
Signing time: Wed 22 Oct 2025 05:00:37 +0000
Manifest this update: Wed 22 Oct 2025 05:00:37 +0000
Manifest next update: Thu 23 Oct 2025 05:00:37 +0000
Files and hashes: 1: JRNBLXBQWgTuBg1-jZxrM7iYCuQ.roa (hash: A/80zWYF3RYk10mzwst52/4Qz1yzT35DfBM28lDeN+s=)
2: g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl (hash: paU3kO6bRV4jI7NYRA/nnPlm3rm/oHrGcarRkPwzS9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 05:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:4a:5e:b1:32:e3:ea:41:ec:ec:39:2c:b0:db:4f:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838c4f810d7a20a783a4fab1c034467b825051b9
Validity
Not Before: Oct 22 05:00:37 2025 GMT
Not After : Oct 23 05:00:37 2025 GMT
Subject: CN=90e8a664d7c3f5b02987c8fb5bd9f6b6af6c2909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ee:95:c9:7f:cb:ec:42:8f:29:d4:78:4e:29:
19:e3:fc:68:53:de:86:46:10:0b:03:74:cf:f3:13:
79:49:92:95:79:2c:a0:55:e6:2e:fd:e5:a5:81:eb:
b7:ae:a0:57:83:b1:ea:cb:c6:2b:48:85:23:1f:87:
28:1f:0e:1b:24:73:64:1f:bd:7d:76:51:16:a1:c5:
b5:33:f6:30:92:1e:f2:d3:68:cc:bb:82:13:ce:45:
1e:68:21:4f:4e:33:4b:c7:20:03:aa:05:a6:3f:02:
22:f8:ba:48:88:f5:10:b2:bc:36:9a:60:0e:42:b5:
66:85:14:0e:78:56:46:be:bc:f0:68:4f:57:dc:e7:
96:e9:9c:e5:b0:bd:ac:71:b5:ae:b2:57:39:cc:3e:
ae:54:5a:3b:c2:97:bc:49:34:09:e4:bc:e8:ff:32:
27:8b:3a:d7:61:bb:a8:07:76:a1:6f:eb:62:99:0e:
8e:3a:18:df:56:0b:b7:1b:c7:4c:33:6a:32:81:21:
f4:3c:72:f1:e7:84:12:26:b6:64:42:75:e0:9d:db:
bd:7c:58:f1:45:e6:4d:8c:6f:14:b5:67:10:fc:3a:
89:09:28:ed:15:fc:cc:b7:20:49:20:73:fc:ed:f7:
d8:92:12:50:20:af:04:84:6c:44:2a:a7:99:59:fa:
c9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E8:A6:64:D7:C3:F5:B0:29:87:C8:FB:5B:D9:F6:B6:AF:6C:29:09
X509v3 Authority Key Identifier:
keyid:83:8C:4F:81:0D:7A:20:A7:83:A4:FA:B1:C0:34:46:7B:82:50:51:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4xPgQ16IKeDpPqxwDRGe4JQUbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/250423-fa91-4a22-b83a-83e47580b3ec/1/g4xPgQ16IKeDpPqxwDRGe4JQUbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:93:50:de:d5:8f:04:36:7c:5f:26:ba:1d:ad:a7:53:25:95:
a4:28:c7:6e:10:7c:7c:95:01:68:38:c8:b7:0e:e9:c2:d1:96:
61:51:6f:cf:cc:d0:e0:cf:8d:1a:f8:b2:d5:b2:45:02:94:7f:
09:11:aa:58:2e:d9:e0:23:6d:4b:4a:65:d7:1a:59:c1:4b:c9:
7e:ef:6d:6c:91:95:df:ee:7c:03:98:4e:a4:6e:84:dd:00:01:
06:71:b9:63:3a:bc:71:79:a7:67:9d:97:bb:74:53:fe:a2:54:
5a:0b:a3:66:9a:ef:23:c0:d1:c1:03:ae:df:2b:d1:c9:a8:ce:
56:3f:55:0a:18:c4:b2:96:21:70:64:d1:2a:ac:21:4a:d1:88:
55:b8:2d:e4:92:c5:b1:8b:b8:c2:53:f3:2f:72:e1:d6:cf:35:
0d:12:73:ee:16:35:9f:08:2f:06:92:78:47:c0:bc:5c:a1:c2:
0d:4a:dc:54:fe:4a:b8:3d:34:40:48:46:4d:e9:2d:b4:49:42:
3e:5f:c3:84:c8:96:93:b8:18:af:fe:ec:bd:a3:22:00:82:49:
9d:0b:ea:1e:5b:f8:bf:4d:13:28:55:97:22:1f:4b:0f:0a:6c:
a9:cd:8d:49:cc:ab:70:f5:fc:cd:23:46:97:02:1f:ea:76:11:
9b:fe:71:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:40:14 2025 by rpki-client