Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: RDIbaQtYUlplVENv6spG98CEXWEflAFVRMi5kZhaQgo=
Subject key identifier: 40:D7:98:71:74:70:B5:03:17:C6:20:E8:62:6C:EB:FF:D6:D7:32:25
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 0199C3EA428997907C77CB7140143BC326DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 16C5
Signing time: Wed 08 Oct 2025 13:02:13 +0000
Manifest this update: Wed 08 Oct 2025 13:02:13 +0000
Manifest next update: Thu 09 Oct 2025 13:02:13 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: PNvGI8pLTld5HPS1b5hlQdHy8ZeHozSLNcVaQ/sB11c=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c3:ea:42:89:97:90:7c:77:cb:71:40:14:3b:c3:26:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Oct 8 13:02:13 2025 GMT
Not After : Oct 9 13:02:13 2025 GMT
Subject: CN=40d798717470b50317c620e8626cebffd6d73225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:25:df:f8:a2:f6:3e:a5:7a:21:08:90:9e:8c:
52:db:31:c8:66:cc:20:ae:0c:6b:4e:80:86:ec:f4:
ca:a1:4e:b2:29:46:a4:2d:06:07:67:6e:eb:f9:ac:
30:91:3f:d4:46:3f:99:15:6b:f5:dd:61:96:28:0a:
54:5c:bf:b3:a2:70:5e:75:c7:64:2c:bc:72:a0:c0:
66:fe:aa:ef:e9:fc:ed:aa:f2:5b:e1:ae:36:1d:7a:
2a:e9:56:9b:9d:60:fd:35:ae:10:02:00:63:54:35:
e9:53:06:46:88:95:18:f8:8a:95:07:34:49:85:31:
f8:ae:4a:80:3b:ba:8c:f1:ae:85:36:05:c4:ac:66:
14:36:42:47:d5:7d:d1:86:81:23:af:c3:6c:26:01:
9d:f3:1b:77:45:cb:64:e5:45:6e:65:c7:0d:29:67:
c8:cf:76:4a:89:78:e1:24:b7:99:a6:2b:70:48:8f:
89:e3:cb:70:34:f6:f4:7a:db:e8:e1:b0:c8:eb:93:
4a:bf:b4:3e:eb:09:18:b7:5c:16:f6:c5:c4:a7:5c:
46:0c:ee:c0:2d:9f:82:64:eb:df:fb:5e:3e:51:9c:
82:4d:21:f5:be:32:4f:c9:d3:73:35:fb:61:b0:24:
f7:46:35:19:42:68:33:81:d9:85:1d:19:f8:cb:d4:
15:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D7:98:71:74:70:B5:03:17:C6:20:E8:62:6C:EB:FF:D6:D7:32:25
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:44:ce:99:bd:91:c3:fa:b3:e3:f7:42:c3:b2:87:00:ad:b0:
ae:7c:e5:9f:f8:3e:fd:f8:e6:76:44:8f:cf:85:35:91:de:93:
9e:0b:58:8b:c0:4b:3f:f9:ee:2b:a6:43:86:92:c3:a0:c8:57:
75:89:94:33:9a:60:3f:09:d6:b8:40:bd:ea:9d:37:ed:99:bc:
69:9d:be:91:dd:27:24:40:f8:49:99:22:0a:96:67:11:25:3b:
85:85:a4:3e:e2:ec:4d:ff:98:b9:62:6d:b0:39:7e:4b:6d:b1:
da:70:ee:d0:a3:0e:64:54:02:44:25:e9:33:22:95:d2:1c:37:
5d:01:0c:b3:d5:ae:00:9b:14:d8:45:2b:ba:50:51:0a:75:6e:
b9:dc:cc:7b:bb:eb:ff:9a:eb:4c:0e:50:2c:e1:73:35:8b:16:
e2:5c:3c:62:be:7b:ce:b5:4b:09:ef:b6:76:87:74:d3:45:34:
ca:80:4e:28:dc:73:1c:30:82:f6:2b:d2:b0:b7:f0:65:1a:ee:
ad:ea:68:81:bc:05:ef:e0:8d:ca:91:af:72:c5:4a:06:bc:03:
8a:5d:49:d1:c6:00:e5:b3:04:a2:ea:77:2c:47:4e:6d:44:5e:
3c:16:0e:dd:16:87:56:40:1d:cc:82:23:0e:d0:9c:a2:3c:05:
21:b1:cf:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 17:25:23 2025 by rpki-client