Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
File: 4sWGEhDcOL2660d9bacZZkqEprw.mft (raw, json)
Hash identifier: rQNwUTPgJ/VbmghmBKAaX1vRjHJXLjI7KgAlmWAP1As=
Subject key identifier: 4B:2B:D0:C8:E3:4F:08:F1:AF:EE:84:24:A5:E6:A7:5F:A8:44:ED:3B
Authority key identifier: E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
Certificate issuer: /CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Certificate serial: 019A269D272741832873C24162284A58CF5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
Manifest number: 16F9
Signing time: Mon 27 Oct 2025 17:00:24 +0000
Manifest this update: Mon 27 Oct 2025 17:00:24 +0000
Manifest next update: Tue 28 Oct 2025 17:00:24 +0000
Files and hashes: 1: 4sWGEhDcOL2660d9bacZZkqEprw.crl (hash: jAWpnAPk3x0hn2kHUN4ylDe5xbiVdCJjbhPLjvql9+4=)
2: MhYnzmLfZDvOOpTx4DJlD8uvHAw.roa (hash: memj1j1yK6z3c51s+6fk9nq4QfCP9UkOHBbx45J56ck=)
3: V1IYhraqy6GtWLev9Eiy1F0cSC0.roa (hash: OXaQyDbPBz9AsW1XM72kAOArg1kTGFWfPBLrTjWDPns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:9d:27:27:41:83:28:73:c2:41:62:28:4a:58:cf:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c5861210dc38bdbaeb477d6da719664a84a6bc
Validity
Not Before: Oct 27 17:00:24 2025 GMT
Not After : Oct 28 17:00:24 2025 GMT
Subject: CN=4b2bd0c8e34f08f1afee8424a5e6a75fa844ed3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e8:ce:8a:e0:61:5b:63:b9:38:34:26:8f:4a:
49:65:b4:63:f5:2e:a3:92:e6:27:7f:02:13:6b:f4:
47:c9:04:ad:13:cc:fa:70:4b:81:91:c7:93:b6:77:
0a:d4:8c:a6:b4:08:ba:80:c6:32:3e:4e:d6:73:54:
b1:70:c9:c8:bc:be:fa:5d:59:4e:f3:ac:d7:f7:25:
e3:ab:4d:cc:da:99:f7:52:d9:d7:c0:c0:1f:de:ad:
6c:67:7d:c9:37:45:f5:a9:73:bb:73:ba:1f:a9:a6:
7f:35:d5:dc:1e:9a:41:bb:08:4d:57:9b:ed:07:f3:
18:4d:69:6e:f4:2e:f7:e5:b1:dd:17:c0:c2:3c:95:
b9:e7:96:b7:c6:cc:57:f8:f0:f7:29:cd:c5:26:bf:
e9:bb:36:bb:47:70:2e:4a:11:5d:d7:47:d3:e8:59:
a3:dc:8a:dd:13:5f:28:90:6e:20:7f:af:38:60:f4:
65:a9:0b:0e:28:cf:aa:61:7f:ff:b8:d9:5d:ca:a3:
5e:83:5c:9c:14:7f:0c:f1:2d:86:e3:f3:39:fb:bf:
9f:19:a8:d2:ab:eb:c4:1e:f6:79:ed:c4:21:34:37:
4c:c0:76:b5:a3:28:32:22:6d:68:29:ff:80:29:86:
3f:12:19:a9:c9:21:18:82:74:ad:d8:85:78:ff:6e:
87:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2B:D0:C8:E3:4F:08:F1:AF:EE:84:24:A5:E6:A7:5F:A8:44:ED:3B
X509v3 Authority Key Identifier:
keyid:E2:C5:86:12:10:DC:38:BD:BA:EB:47:7D:6D:A7:19:66:4A:84:A6:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sWGEhDcOL2660d9bacZZkqEprw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2db08-c845-41ab-a08a-3375617d4efd/1/4sWGEhDcOL2660d9bacZZkqEprw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:05:55:e7:d9:00:93:b1:04:62:64:d0:c3:f1:63:ab:ea:86:
d0:d8:fb:86:4d:06:9a:67:b5:cd:25:df:26:cf:be:46:c1:ea:
b5:4b:9c:35:6e:db:cd:2f:a4:dc:93:b1:3f:a7:23:49:fe:db:
ee:c7:b4:f9:d3:b7:6f:31:85:69:53:8f:84:22:96:c9:70:04:
5b:f4:71:4b:0f:15:fc:fb:8a:64:b2:4f:b8:9f:5f:bc:4a:9f:
c1:d9:77:cb:b7:e4:ee:a0:fa:e6:2a:92:19:f3:37:64:01:16:
58:15:7d:a2:4b:78:a4:89:20:1b:92:22:d8:a6:e6:33:92:c4:
95:77:84:12:22:98:8c:e7:9a:72:5e:7b:73:79:7b:84:f1:f3:
b1:91:50:a1:87:e7:e8:1d:ed:b4:73:fa:25:fa:02:b6:68:04:
a2:ea:f6:12:d0:bb:77:45:5a:10:a9:15:d9:76:15:05:c5:6d:
5c:5d:d6:b1:6f:41:28:6f:bb:88:3a:62:46:93:be:f4:65:b7:
e3:38:2b:2f:e4:32:1f:7e:fc:ee:2b:bd:5d:de:11:62:6b:bc:
32:84:8a:80:c3:15:3c:77:5e:13:ba:53:eb:a3:ed:3e:49:70:
36:8e:63:71:0c:5b:68:52:5d:cb:77:79:38:56:b1:37:32:9f:
a8:6c:34:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 22:40:55 2025 by rpki-client