Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
File: 4uSsYiT-GURCDcOpjdY6uuSvfgA.mft (raw, json)
Hash identifier: AbA9Ha9yeL32Dc2E0Gq/uopMrEnkubVbmjQrvliHyBE=
Subject key identifier: E4:23:C1:38:7F:74:7B:62:51:21:D4:4A:F3:8A:D5:5A:6F:99:E0:B4
Authority key identifier: E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
Certificate issuer: /CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Certificate serial: 019A54BFADA963374ABBCC3EFC2025F93BEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
Manifest number: 133D
Signing time: Wed 05 Nov 2025 16:00:39 +0000
Manifest this update: Wed 05 Nov 2025 16:00:39 +0000
Manifest next update: Thu 06 Nov 2025 16:00:39 +0000
Files and hashes: 1: 4uSsYiT-GURCDcOpjdY6uuSvfgA.crl (hash: smQyEah7zKK0A/PA6thcoNXcxk1fSropw3KorBnbH0k=)
2: UELJaiMVSRwrvUCFtrZ9GXV7epU.roa (hash: q9QCYQSQGQmo5qqoOtk1Ibo5KX8kGvjJhcZ2aob3nKM=)
3: v6hueYNyF9uNlLtlUb0AzeNT4cA.roa (hash: 9y1HAaiP+48RFVQa5JDWbbUjnwyoOqmjCXAn55Eo2zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:bf:ad:a9:63:37:4a:bb:cc:3e:fc:20:25:f9:3b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4ac6224fe1944420dc3a98dd63abae4af7e00
Validity
Not Before: Nov 5 16:00:39 2025 GMT
Not After : Nov 6 16:00:39 2025 GMT
Subject: CN=e423c1387f747b625121d44af38ad55a6f99e0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:21:94:a6:78:4d:16:78:10:f7:b5:f8:8b:cc:
1a:19:6a:17:f4:85:65:d5:70:22:3b:92:c6:52:3c:
35:6d:4b:1f:9f:40:84:5e:ec:f5:99:2c:fd:85:be:
1f:33:53:c7:41:e3:1d:2a:23:f7:c7:9e:14:ab:37:
ee:72:e2:67:e5:0c:ae:aa:77:d3:db:b5:85:2d:ef:
19:b0:6f:96:b1:2d:47:c3:cc:96:34:41:0e:4d:dd:
ca:8b:07:a1:0e:27:70:70:59:fc:fd:5f:ed:bd:04:
8d:ae:ee:f5:b8:6e:2b:9d:96:b7:98:2c:02:e7:9e:
6a:33:40:28:85:2e:21:da:3f:24:42:17:3a:30:af:
81:68:1f:ee:d6:3c:94:97:a3:f3:98:06:ae:b8:67:
4b:39:09:b5:ff:e7:68:b8:ad:ed:ff:57:82:9a:39:
b3:e5:e3:db:7a:d1:1a:c7:18:ef:dc:a2:6e:48:8f:
92:2e:c8:31:06:a1:94:83:01:2d:94:77:e7:d1:e5:
9b:cf:3f:11:44:ff:8b:51:5a:23:38:b1:a2:ec:84:
df:cc:a1:eb:4e:92:04:c0:e3:ae:05:42:04:39:02:
ce:b8:93:91:38:4a:1f:91:98:8d:66:d5:4b:9e:e1:
46:d7:ba:b3:19:ea:59:6d:a9:f0:29:e1:7f:51:8f:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:23:C1:38:7F:74:7B:62:51:21:D4:4A:F3:8A:D5:5A:6F:99:E0:B4
X509v3 Authority Key Identifier:
keyid:E2:E4:AC:62:24:FE:19:44:42:0D:C3:A9:8D:D6:3A:BA:E4:AF:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uSsYiT-GURCDcOpjdY6uuSvfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/f6be03-4f44-4354-b9eb-ba4d06df0be5/1/4uSsYiT-GURCDcOpjdY6uuSvfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:3b:63:b3:4a:3c:bc:00:b6:8a:e8:b5:db:22:2b:be:d3:00:
3c:f7:01:65:17:0f:e8:89:27:7d:39:3e:b5:f3:f6:e7:77:28:
3e:47:ac:20:07:87:72:5f:0e:5a:19:43:df:1b:fe:e1:6d:5b:
de:6b:6b:9b:13:1d:d4:46:1b:91:bf:20:ed:8a:24:b5:9b:60:
cf:a0:6b:2e:73:b8:ea:12:77:a6:ad:00:5d:a4:c9:af:3d:cc:
16:fd:93:16:96:d4:93:39:26:c6:5b:08:a2:36:a7:68:65:43:
3b:36:27:b5:0f:4a:5b:26:7d:83:89:2b:56:cf:bf:3f:89:1f:
21:1f:4a:cc:14:8f:79:46:3c:48:e6:b1:7f:ba:05:89:49:79:
9a:b9:1e:d0:47:8b:ae:d9:ac:79:b0:7c:e2:c8:a5:f8:c6:90:
4e:6c:f8:28:b8:2c:6f:b1:bb:67:ee:37:10:e0:91:fd:d4:eb:
20:1a:0e:ff:b6:36:e5:97:f7:69:59:cc:14:82:cb:dd:ba:aa:
0b:d7:e8:26:41:c7:ff:05:41:8f:c8:5d:7c:2e:07:c8:40:45:
ee:f4:ae:a8:62:46:a4:5c:9a:58:3f:22:3e:fa:6b:96:87:52:
19:c4:ce:2a:c8:52:6b:c4:81:04:af:4c:e5:ae:88:f5:a9:39:
16:51:40:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 19:17:50 2025 by rpki-client