Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier: POc6iSbdFHZgFMxSeN1QfJyLK+G2NIotVj6o3kJibrk=
Subject key identifier: E1:67:F6:44:A3:E0:2B:98:63:39:68:28:80:19:31:4B:79:79:B6:F4
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 019A1AD0A8226A4262A1AC84526250828BDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number: 0957
Signing time: Sat 25 Oct 2025 10:01:13 +0000
Manifest this update: Sat 25 Oct 2025 10:01:13 +0000
Manifest next update: Sun 26 Oct 2025 10:01:13 +0000
Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: 1uEz5q3BlQr2ePOaZOhlxBVPN0fx08R1kKoIRkjtnSU=)
2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:a8:22:6a:42:62:a1:ac:84:52:62:50:82:8b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: Oct 25 10:01:13 2025 GMT
Not After : Oct 26 10:01:13 2025 GMT
Subject: CN=e167f644a3e02b98633968288019314b7979b6f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b6:ba:eb:76:1a:d2:9f:37:f8:28:13:b9:51:
19:7e:fb:35:82:d2:32:d1:f8:4b:41:77:36:77:a0:
1e:86:7d:04:c3:eb:10:2d:95:df:96:85:b8:3c:47:
64:75:09:92:06:5c:34:8c:84:55:d3:c2:c8:cd:28:
c4:76:87:7b:b4:1b:b0:a0:c8:f3:dc:ba:7c:57:99:
34:7e:3d:d3:b8:df:b0:9a:2b:4e:ab:aa:90:84:a4:
20:d0:82:cb:5d:3e:46:ed:2c:0a:2f:03:f4:74:4d:
cd:62:d8:f0:67:50:13:d3:28:67:cd:8c:b5:b5:57:
5f:2d:12:0f:fa:32:de:de:ec:1d:49:43:5c:77:2c:
e6:19:94:e7:5b:76:66:c0:25:ae:a7:60:2b:00:e9:
3f:f3:bc:7c:a6:6e:6b:5f:a6:b2:3a:d0:3c:84:0c:
7f:15:96:46:f8:44:de:00:00:4b:77:ee:0a:63:c6:
8c:e3:b1:c4:ea:e7:2f:aa:d3:3b:bd:0c:dc:62:3b:
bc:9f:45:9e:f4:93:c6:b3:1e:6c:d2:63:b1:76:06:
8c:13:08:da:ab:b6:a7:8b:c1:d2:8c:43:eb:61:e7:
8a:7f:4d:80:ea:9c:bf:bc:f5:6f:4a:65:bd:8a:8d:
62:73:bd:bb:57:15:b2:8c:f3:c3:13:20:b4:14:c4:
33:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:F6:44:A3:E0:2B:98:63:39:68:28:80:19:31:4B:79:79:B6:F4
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:c5:b7:a5:bb:7c:f6:68:cd:19:cd:ca:24:c3:ad:22:3e:66:
1b:b3:7c:6e:40:eb:8c:94:58:39:ab:48:f2:21:5d:5a:fb:68:
dd:33:7b:37:8d:6d:99:ad:a2:50:78:2b:f7:2d:c9:98:4e:31:
f7:1a:c5:41:0d:e7:52:91:ba:23:f1:64:49:f5:c0:3e:a9:32:
67:6f:ad:c2:bf:05:01:ae:6a:8c:97:cf:35:06:bd:71:2d:1c:
6a:cb:9a:b5:7c:5d:3e:46:78:16:b3:66:d5:5d:35:81:aa:46:
2f:e9:76:51:5e:af:09:7e:0a:42:a4:4c:5f:2e:17:5e:04:5c:
c7:45:ce:44:f3:f1:26:73:45:a1:69:ab:01:ba:f0:3d:50:51:
19:f0:c6:da:4f:22:b0:07:39:7b:2e:a3:6c:60:b9:97:41:66:
2a:91:42:e8:77:13:6d:25:82:35:cf:65:f4:5e:54:21:34:70:
98:e9:6b:b2:fc:39:da:36:e4:e6:0d:37:3e:3b:6c:f3:4f:1d:
04:8a:14:ae:cd:40:e3:68:12:fa:0d:d5:a2:06:a1:b0:bd:1e:
f2:c3:74:01:b2:6e:8a:e0:52:95:4a:af:64:dd:8f:34:94:91:
53:d8:cf:47:f2:59:0d:f3:4e:fc:48:6b:70:98:7d:71:57:31:
a4:4c:6b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 20:00:18 2025 by rpki-client