Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
File: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft (raw, json)
Hash identifier: spdXQHmk2JNOSAUOftICY4KdhMpfPXiFZNDmOiRxGIs=
Subject key identifier: 09:7B:F9:B3:4E:EA:AF:6A:DF:C0:FE:C8:12:AD:AF:1E:7B:67:F1:AC
Authority key identifier: E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
Certificate issuer: /CN=e31c010e95015c2123641d33120a7e9c9008002d
Certificate serial: 019A2289D444E6A9EC691A997CC65EC8B4AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
Manifest number: 21
Signing time: Sun 26 Oct 2025 22:00:49 +0000
Manifest this update: Sun 26 Oct 2025 22:00:49 +0000
Manifest next update: Mon 27 Oct 2025 22:00:49 +0000
Files and hashes: 1: 4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl (hash: 4gBf46RiHs+hSbJJa366vILmolFljc6180UBFevNpeE=)
2: NxyC245LfoIGu7NVTJi-_dDCgvs.roa (hash: Suj+SVX/zjejO/imh+c1lgrmaGy+Ijth/7DtIkk94wQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:89:d4:44:e6:a9:ec:69:1a:99:7c:c6:5e:c8:b4:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c010e95015c2123641d33120a7e9c9008002d
Validity
Not Before: Oct 26 22:00:49 2025 GMT
Not After : Oct 27 22:00:49 2025 GMT
Subject: CN=097bf9b34eeaaf6adfc0fec812adaf1e7b67f1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:09:ff:e7:7c:63:5a:4f:e9:49:e2:99:20:
f7:13:be:82:a7:b2:12:e5:f7:55:0d:64:67:fe:59:
58:5e:ea:17:d2:f2:58:8b:32:3a:fd:37:ae:a2:07:
f0:97:1e:29:3e:a6:eb:74:3f:2e:e1:e2:3b:88:19:
87:c9:36:88:51:9d:29:1d:f7:ca:7f:d5:32:53:b9:
a5:1a:63:8c:ad:04:16:d6:61:99:68:5b:b1:d9:35:
7e:18:c7:d6:0d:0f:8d:da:be:c5:4d:9f:27:46:6e:
46:43:69:77:5a:ec:77:78:ae:08:79:10:42:75:f6:
4d:8a:e2:37:bd:3a:0b:94:f7:7f:a9:d0:66:f2:6a:
07:da:46:f5:bd:98:76:bf:5f:48:c9:eb:c9:d2:99:
aa:ab:1d:2e:b3:13:01:b2:60:9f:58:ae:ca:43:34:
13:6e:b7:b2:df:29:67:00:eb:fb:5e:12:da:fa:d3:
59:93:ab:a7:84:5c:c5:e3:a6:a6:a4:af:33:9e:89:
fb:54:bc:a3:26:b4:c0:ca:c3:66:65:a3:bd:73:2e:
ac:1d:ba:b0:63:24:19:9f:a4:a1:2d:df:e5:c7:ae:
70:55:63:c2:a4:67:50:83:cd:9d:09:16:86:c5:d6:
7a:9a:93:ed:0e:93:9b:96:ca:93:a2:ff:24:e6:6e:
b5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7B:F9:B3:4E:EA:AF:6A:DF:C0:FE:C8:12:AD:AF:1E:7B:67:F1:AC
X509v3 Authority Key Identifier:
keyid:E3:1C:01:0E:95:01:5C:21:23:64:1D:33:12:0A:7E:9C:90:08:00:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xwBDpUBXCEjZB0zEgp-nJAIAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/483806-045d-4856-b529-b47e74ed4e7e/1/4xwBDpUBXCEjZB0zEgp-nJAIAC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c0:71:f8:ea:69:32:60:96:9c:6b:85:08:f0:61:e1:c9:7b:
06:d2:dd:31:63:fd:73:55:20:3c:fa:2b:f1:0b:de:8e:36:ec:
64:98:4e:ca:79:58:9b:60:2b:9f:03:5a:ea:fb:7b:9a:ad:55:
bf:f1:29:b2:2b:d6:aa:26:c4:fd:62:0d:ab:6a:27:99:d4:0a:
25:76:0b:28:fe:2a:6c:28:5f:31:a7:fe:80:1d:52:8f:fd:74:
da:51:33:c5:b6:71:09:ce:a5:f7:7b:4a:1e:f7:2b:76:bb:7f:
ed:33:c6:70:70:3b:f4:4a:29:94:41:4a:0f:f9:59:bb:d0:0e:
73:ad:50:51:c2:45:e9:e6:43:ff:43:7e:27:c8:7d:57:47:8a:
c7:31:59:d9:ff:05:4c:b6:bb:6c:4e:10:b1:c4:06:67:9d:56:
1f:8f:0a:0c:83:e4:de:9c:d0:55:1e:0b:ef:0e:10:b8:b8:89:
80:7b:ef:90:37:90:21:ce:e0:21:71:56:c2:3c:ef:f2:d5:ec:
dd:76:43:9c:f6:fc:74:81:4a:6d:f0:af:89:64:52:b1:22:04:
a9:9d:0f:cd:db:85:82:a5:3c:d1:fa:34:a6:d9:23:df:43:81:
dd:85:c0:c1:86:aa:5e:53:1d:17:4c:fc:36:1c:51:ff:d5:53:
23:5f:2d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:04:54 2025 by rpki-client