Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
File: 4cxF6EsHjUWK342GdEXEb4yND64.mft (raw, json)
Hash identifier: XsHQXhQEgWjUzGXg3GLmTU5OY8j4lvtqnUdFwLa97bY=
Subject key identifier: D7:84:45:9A:55:77:CD:B5:CB:21:61:CD:9F:E3:E2:4B:16:96:5B:8B
Authority key identifier: E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
Certificate issuer: /CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Certificate serial: 01995BD823BB0152BF795DB0FC87C92914D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
Manifest number: 150F
Signing time: Thu 18 Sep 2025 08:01:55 +0000
Manifest this update: Thu 18 Sep 2025 08:01:55 +0000
Manifest next update: Fri 19 Sep 2025 08:01:55 +0000
Files and hashes: 1: 4cxF6EsHjUWK342GdEXEb4yND64.crl (hash: 3ZwoBL1pk9T9xj8nmRNGe+hU9R/RRXPHQqFYQok/hoM=)
2: 5-SCWiXEymbKNvt1s5ha59PuWTI.roa (hash: afbec3zYVioBpbWwP/hx1ExlUGeRDVjKKku3aVOXbVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5b:d8:23:bb:01:52:bf:79:5d:b0:fc:87:c9:29:14:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1cc45e84b078d458adf8d867445c46f8c8d0fae
Validity
Not Before: Sep 18 08:01:55 2025 GMT
Not After : Sep 19 08:01:55 2025 GMT
Subject: CN=d784459a5577cdb5cb2161cd9fe3e24b16965b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:3e:6b:93:4b:eb:58:d6:a4:1d:72:e9:5b:82:
0d:95:22:40:46:e9:ad:51:4b:20:f1:77:16:4a:7b:
05:41:f4:29:81:0f:cd:63:8f:f7:3f:11:26:18:64:
f4:67:12:97:2c:f7:89:15:60:84:7a:c5:1d:c8:5e:
04:5c:77:14:a8:c2:9d:5f:c9:05:a2:d5:0d:49:fc:
e8:82:6f:e5:f2:54:da:90:04:42:f9:71:15:2a:5b:
b9:30:0b:3f:9f:25:35:8c:48:04:0b:b2:dd:8a:68:
cd:a5:57:e4:ab:49:23:36:43:0d:2e:b0:bf:97:fe:
f0:4b:41:31:b5:58:58:0d:6d:46:21:9c:fa:d5:5d:
97:36:f0:43:50:cf:d0:e2:94:3d:bb:b8:b4:c0:12:
c1:36:4f:cf:7a:ce:99:22:ee:bc:1a:05:d0:06:f6:
92:9f:67:48:16:a9:0f:9f:f3:6a:2c:aa:13:69:29:
bf:12:97:cb:a6:08:6c:4c:e6:a3:e6:1d:46:d8:74:
53:76:b6:ca:62:9e:fc:6d:a7:a7:94:2b:d2:e1:9b:
54:93:b9:70:c9:aa:39:a7:c4:f5:03:c2:a9:93:a3:
88:07:eb:d7:fe:25:2f:83:32:c7:d8:41:7a:6d:2f:
28:5b:5a:c1:7e:8c:d2:d5:27:4a:a4:1e:b1:83:94:
bc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:84:45:9A:55:77:CD:B5:CB:21:61:CD:9F:E3:E2:4B:16:96:5B:8B
X509v3 Authority Key Identifier:
keyid:E1:CC:45:E8:4B:07:8D:45:8A:DF:8D:86:74:45:C4:6F:8C:8D:0F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cxF6EsHjUWK342GdEXEb4yND64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08aba8-b756-4492-a7ed-6320c460a3f8/1/4cxF6EsHjUWK342GdEXEb4yND64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:05:6b:4e:d4:f6:4a:aa:0d:35:8c:ec:97:ff:91:f6:c0:ce:
9f:80:68:17:de:e6:df:cb:ce:e1:9d:51:8b:12:87:69:87:fc:
cc:c5:9d:a6:4c:bf:c4:78:22:9c:54:29:12:95:b5:68:02:df:
64:af:f9:21:3d:b7:2b:b9:4b:a5:94:47:26:2a:63:b1:a6:e3:
27:c8:8d:4a:2f:72:d5:0e:e1:09:b5:18:ea:f6:f3:d6:b2:35:
07:30:61:50:ce:5e:ef:ab:21:58:37:be:ed:69:57:61:23:47:
84:1c:9e:b2:33:7d:d3:90:cd:79:d2:21:44:75:d2:49:5c:c5:
de:16:09:1b:22:f8:bd:f8:05:9f:27:cb:62:cb:41:be:d7:50:
15:88:13:9d:68:0a:73:ee:73:d7:95:61:24:d7:2b:48:3d:ab:
69:4f:7a:f6:3c:40:4e:14:83:38:36:72:fd:9c:be:f9:bf:3f:
2a:1f:ad:2f:b5:9c:ca:63:19:30:b6:ac:fe:8e:7b:e1:68:dd:
de:9a:92:e9:05:c4:34:8a:d0:c4:31:36:29:86:9c:6d:19:f6:
64:2f:9b:9b:80:9c:fe:ac:4c:70:fb:ce:3b:7c:d4:21:83:7f:
8d:3a:2e:7b:2f:e0:5a:34:4e:1a:54:4e:22:35:e1:cc:2e:bd:
08:a0:10:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 18 09:49:19 2025 by rpki-client