Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: 0lv6LxczHZoGGUH7iMTURG1zxKsuw9tuVQ8nUwUJs3Y=
Subject key identifier: 03:F1:84:46:A5:BC:B0:C3:46:21:60:B2:4E:56:2C:10:90:24:60:07
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 019A06A4953D7648479BC7BA6FBC1C221F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 044E
Signing time: Tue 21 Oct 2025 12:00:40 +0000
Manifest this update: Tue 21 Oct 2025 12:00:40 +0000
Manifest next update: Wed 22 Oct 2025 12:00:40 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: 8IrtdBQBPYyraz+rD7zGXXjNIHrnD3yku2yT7CZCvPY=)
2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 12:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:06:a4:95:3d:76:48:47:9b:c7:ba:6f:bc:1c:22:1f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Oct 21 12:00:40 2025 GMT
Not After : Oct 22 12:00:40 2025 GMT
Subject: CN=03f18446a5bcb0c3462160b24e562c1090246007
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8a:f4:88:e6:d2:28:01:a0:21:c0:0f:45:53:
05:e8:71:f3:a6:aa:b9:a0:f6:4b:df:e0:9d:8d:b8:
e2:e9:68:d1:bc:26:40:74:f9:db:56:03:70:16:9d:
1e:59:0a:08:7b:a0:14:08:56:12:16:80:9a:fe:b7:
3b:73:3e:e7:e4:2b:0d:57:2b:cf:07:ed:4e:e5:f3:
6f:1a:ff:29:e2:ce:99:7b:bc:35:9c:02:b1:b7:d3:
72:20:b5:61:71:d2:01:c0:18:6f:db:31:4e:7f:dc:
8a:d8:02:3d:d3:23:f6:9f:81:76:2e:a5:82:69:a9:
dc:58:33:6e:b9:65:64:be:1c:64:ca:f3:ed:af:fc:
1b:2d:07:ee:dc:73:1a:dd:92:92:67:28:39:97:eb:
bd:e1:42:5a:e3:81:f3:9c:75:35:13:c8:98:a2:e1:
3f:50:cf:e9:e1:cc:d3:b3:4e:da:53:e5:ee:97:83:
ca:f4:7e:17:a8:fb:f1:a9:68:dd:b3:32:60:37:7e:
db:fe:c4:81:57:09:0b:fe:ee:8e:9d:03:b6:56:27:
bb:2f:eb:0e:ca:be:94:d0:fc:c7:7a:10:88:9f:b1:
01:a0:06:6f:f2:04:f0:f1:e5:19:c0:5d:98:14:b1:
90:97:91:bc:73:ce:cc:f1:f6:ee:45:66:50:2e:c1:
44:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F1:84:46:A5:BC:B0:C3:46:21:60:B2:4E:56:2C:10:90:24:60:07
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:af:1a:17:16:6b:c2:40:71:f7:d7:5d:db:bc:9e:10:de:
40:a9:d6:26:23:b8:37:ee:89:74:c6:28:fe:f0:6d:f7:a5:fc:
2b:48:44:97:f0:13:56:b1:dd:0d:0d:42:98:b3:27:36:d3:da:
40:a5:74:6c:98:56:56:f5:ef:ce:c4:b5:4c:9b:ff:d1:d4:79:
55:1b:99:e7:ee:5d:bf:c2:ce:ac:0a:44:f7:2c:b4:aa:b0:a1:
6b:06:03:11:c7:b3:be:f1:4f:25:d9:09:7e:fe:52:2d:71:d5:
83:35:24:4c:05:fd:6b:df:0a:de:f0:1a:eb:0e:68:90:9a:6b:
e8:50:74:be:8a:dd:43:65:77:b9:8b:d5:4d:86:56:fb:a0:ba:
f6:18:5c:cd:97:55:1f:a7:b5:a3:21:cb:34:7e:fe:7f:a0:20:
ef:bf:cf:4f:76:13:75:4e:54:0c:a4:ef:9e:df:b5:0a:c4:6d:
95:0e:eb:ad:f4:75:74:70:bd:d5:97:d2:7e:a6:86:b7:c5:90:
28:2f:f4:10:f9:65:81:7f:e8:9c:46:dc:b3:18:e0:20:83:f3:
39:6d:62:0b:42:3a:dc:e4:c2:1f:0b:08:78:87:09:1d:61:09:
fb:14:7d:77:2c:80:b4:22:73:b1:64:f7:71:ee:e6:10:53:49:
6d:e9:3e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 22:56:48 2025 by rpki-client