Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
File: 4YDru8oPiQ3jU4kUIag91bZT2UA.mft (raw, json)
Hash identifier: y/qBK2epb1wD/naVEigvfsSzSWaWcWVye1sXEn1qJzA=
Subject key identifier: 77:CB:FB:1D:21:C5:6B:D2:7C:82:66:16:1F:BE:6E:87:DA:C4:69:F0
Authority key identifier: E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
Certificate issuer: /CN=e180ebbbca0f890de353891421a83dd5b653d940
Certificate serial: 019A0AEEF133667EC02A30CC1652FC4AB9C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
Manifest number: 16F3
Signing time: Wed 22 Oct 2025 08:00:22 +0000
Manifest this update: Wed 22 Oct 2025 08:00:22 +0000
Manifest next update: Thu 23 Oct 2025 08:00:22 +0000
Files and hashes: 1: 3FLOlTCLI1G1gTETun5ejoasBuA.roa (hash: ZqTUajmkPh8jnrRO1gF7H9NNj5iQ+rkTS+4qDwUhPQw=)
2: 4YDru8oPiQ3jU4kUIag91bZT2UA.crl (hash: 5/shUa/crNsOK5zkhK59h2zO1w6tEhwzpGveUq1HqiM=)
3: CMHg46_N_Yzu5cDNrodsWcXH1qs.roa (hash: 9+kqVKjcfEEoN1RX5aOJP2hJFs9a0+X0ktGFEifqfTA=)
4: ccRftpql5fjXlNV0NylDd4KOG5c.roa (hash: kdsSlrhnC//Y+wGXnH9Z3RLM6M+rlU4Fjt+Q8g1QTKU=)
5: iGsK_B5kc7f5LtdtrLxtSL9ku54.roa (hash: raQtWkSW1CK//C2quX0UqsJsM/839tIzJbksWP0Gq+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ee:f1:33:66:7e:c0:2a:30:cc:16:52:fc:4a:b9:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e180ebbbca0f890de353891421a83dd5b653d940
Validity
Not Before: Oct 22 08:00:22 2025 GMT
Not After : Oct 23 08:00:22 2025 GMT
Subject: CN=77cbfb1d21c56bd27c8266161fbe6e87dac469f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:3d:ef:73:56:e9:c4:a2:6d:b9:f1:e8:b2:
5c:4e:1e:59:8e:bd:22:69:d8:83:3b:73:e3:b6:c9:
39:44:f9:fa:f7:a3:95:a0:5d:19:4f:40:86:85:8f:
bf:bd:3c:cf:7e:b9:76:f8:d9:e1:56:cc:af:b0:21:
91:dd:5e:b9:f5:43:9f:44:2e:d0:e7:39:bc:fb:fd:
5c:bb:a1:fd:22:67:88:17:f1:af:7d:10:99:ea:a1:
9a:c5:bc:31:61:9e:35:6d:a8:ea:62:b4:b4:d7:d6:
57:64:9d:3b:e5:ae:18:98:23:c2:61:48:dc:6b:2b:
b4:8d:46:31:e2:d5:aa:ab:ff:dc:83:c9:3c:bd:af:
b1:f8:e4:40:da:4c:45:4c:2f:bc:f9:56:4e:d4:ff:
75:ce:d9:d7:e2:dc:50:62:06:81:4d:e0:97:a7:79:
af:19:8d:2a:9e:20:db:d7:28:15:56:99:06:f8:73:
75:7c:f8:ae:cb:40:9f:bb:88:01:f1:79:9a:3d:29:
53:05:b9:90:3a:62:8b:59:7d:c1:f4:28:95:c8:48:
83:ad:e2:b5:e3:52:a2:63:ff:c5:6b:72:bf:ff:6f:
b4:b3:b0:0a:c1:f6:6a:a0:8b:88:1b:b5:0f:cd:1e:
17:7c:f8:d0:9e:34:03:5d:dd:0b:9b:ae:ab:3e:22:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CB:FB:1D:21:C5:6B:D2:7C:82:66:16:1F:BE:6E:87:DA:C4:69:F0
X509v3 Authority Key Identifier:
keyid:E1:80:EB:BB:CA:0F:89:0D:E3:53:89:14:21:A8:3D:D5:B6:53:D9:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4YDru8oPiQ3jU4kUIag91bZT2UA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/a18cf1-a080-4945-8b21-05556959c455/1/4YDru8oPiQ3jU4kUIag91bZT2UA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:20:52:89:f7:49:c5:2f:99:52:f4:be:5d:d9:54:4d:82:36:
2b:92:0e:5c:de:9c:16:0b:18:da:1b:b2:3e:8b:42:10:0f:3f:
01:85:4e:b5:3f:8a:53:0b:28:0d:7a:35:7d:24:0b:b0:41:72:
0d:ce:40:f9:c1:aa:29:4a:75:28:7c:d1:24:78:b0:98:a6:2f:
50:ce:22:fe:dd:ea:10:c3:96:74:ec:1d:dd:9a:75:e2:0f:10:
49:e5:5e:30:ee:65:c6:b7:c5:f2:d6:f2:ce:c9:36:a3:bc:d1:
8f:1c:60:26:26:a1:43:44:26:91:7c:8e:db:03:ac:c3:10:48:
eb:55:2d:9f:2c:fa:84:eb:34:4d:74:2e:80:32:85:95:1b:6e:
19:82:52:23:46:e9:98:bc:d8:d6:d8:90:be:2b:dc:d8:92:27:
80:11:23:5b:76:2e:3e:b8:ac:95:92:7a:e4:87:c5:61:fc:e0:
40:b0:06:33:35:62:a7:7d:81:37:1c:4c:48:7a:d1:7f:0b:0c:
30:6c:e6:c9:a1:5e:fc:1b:37:40:9c:78:e4:98:ab:8c:7d:41:
9e:22:44:24:c3:69:59:f5:38:e1:ae:f3:9d:3f:29:88:af:51:
c9:bd:ff:84:11:97:21:a8:b4:34:05:c8:cf:45:e0:9f:3f:80:
dd:a7:14:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 12:11:41 2025 by rpki-client