Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
File: 4OkqeIpBBX0ndk8W87HSo-9jRdY.mft (raw, json)
Hash identifier: rLbgs+WQ91/nuYhwsuvgfnGqrrHsRkOoldmqTPjBM9s=
Subject key identifier: 7A:B4:0F:D3:60:38:5C:39:E5:17:6A:95:4A:91:27:4F:C1:E0:8F:6B
Authority key identifier: E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
Certificate issuer: /CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Certificate serial: 019A4F6221DF14E9A555D245F1AB94E63D5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 15:00:22 +0000
Manifest this update: Tue 04 Nov 2025 15:00:22 +0000
Manifest next update: Wed 05 Nov 2025 15:00:22 +0000
Files and hashes: 1: 4OkqeIpBBX0ndk8W87HSo-9jRdY.crl (hash: 0w/Ezs55ZpPyPCgnD9Kkdn4r2kmyhXeTM1hMyb5IT/s=)
2: BL-NDYgvhNS3ykN2bZ3XYSmCEZI.roa (hash: fBvbXWPI6WfZJHj+SHtFQme53z0G5Q3tNcbJRdIO7rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:21:df:14:e9:a5:55:d2:45:f1:ab:94:e6:3d:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e92a788a41057d27764f16f3b1d2a3ef6345d6
Validity
Not Before: Nov 4 15:00:22 2025 GMT
Not After : Nov 5 15:00:22 2025 GMT
Subject: CN=7ab40fd360385c39e5176a954a91274fc1e08f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9e:1d:18:2e:8c:44:0a:33:d4:1e:04:7e:a8:
f4:51:13:5e:99:b0:b8:9a:33:29:9d:1d:6f:aa:63:
6d:15:28:3c:e5:51:f6:93:0d:b9:6e:f2:54:8f:9b:
08:51:2b:f1:4f:96:b0:55:95:e5:c7:bf:ef:84:78:
8d:da:3a:67:50:79:e6:81:41:90:30:25:ef:71:04:
99:f3:e2:0a:a2:3e:50:40:1c:b9:60:8b:ce:90:a4:
a9:17:0d:f7:b3:a8:7f:b4:6b:09:06:f6:c8:23:ee:
91:27:4c:14:93:81:55:47:05:86:99:62:b3:06:df:
3b:89:20:a0:57:fa:4c:79:84:30:92:45:cf:59:eb:
f3:cc:75:36:ec:f3:a5:1f:42:96:d2:88:5a:e0:7d:
c7:92:ed:f3:98:18:17:c7:2a:fe:b8:41:db:97:fa:
4e:c3:81:ce:62:82:29:b2:03:b0:be:95:ce:20:66:
f2:16:c4:b3:11:a6:30:9e:54:e3:56:24:44:49:85:
5d:8a:a2:71:2f:fb:45:63:00:2b:10:91:9b:ac:41:
77:d9:c4:1b:03:01:4d:cc:8a:6f:25:a0:12:dd:75:
b6:e6:11:17:57:f6:67:18:6b:30:ca:89:4a:ca:e5:
91:64:ba:3f:f3:2e:8b:90:69:74:82:55:e9:13:e6:
20:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:B4:0F:D3:60:38:5C:39:E5:17:6A:95:4A:91:27:4F:C1:E0:8F:6B
X509v3 Authority Key Identifier:
keyid:E0:E9:2A:78:8A:41:05:7D:27:76:4F:16:F3:B1:D2:A3:EF:63:45:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OkqeIpBBX0ndk8W87HSo-9jRdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/d46487-43ff-45ee-8228-ba59fb2c4610/1/4OkqeIpBBX0ndk8W87HSo-9jRdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:38:3c:3e:6e:82:75:27:c7:0b:ec:dc:b4:dd:0b:89:66:33:
d4:90:5d:90:80:17:91:a3:97:75:34:28:15:43:4c:78:1c:50:
a2:9b:f0:66:7a:0e:38:df:76:a5:44:a3:67:3a:c8:27:22:60:
04:6b:16:42:3d:dd:10:9a:29:77:82:0a:46:5c:5e:c7:6e:18:
5e:e6:3d:d5:4f:a2:8b:a2:84:3f:c6:3d:b1:4e:35:d7:c7:25:
e4:2c:ad:67:b1:c3:0c:89:e1:df:37:e8:d1:21:8b:fb:2c:81:
10:1d:09:b0:25:0a:d8:1d:11:45:18:9c:45:73:3e:4b:c0:49:
ba:61:f2:44:d1:c0:5c:62:66:24:8b:40:c9:a1:23:90:3c:44:
2b:50:51:a5:08:12:ce:7e:47:54:50:27:e9:e0:0f:15:5d:10:
84:a6:04:f3:c7:a3:31:e6:03:e1:ed:4d:68:d1:6b:6a:3c:fd:
9c:e9:c7:a9:22:93:4a:6a:85:5b:26:80:b6:af:a5:68:d3:d3:
12:7f:d1:bd:3e:d6:94:f5:6f:cf:4c:de:4d:22:5e:18:64:52:
5e:77:08:5e:08:b3:85:8d:bd:cf:5e:7c:3f:b1:70:a3:72:90:
4f:52:e4:62:85:73:22:f7:39:3f:12:1c:1c:a3:e6:bd:2b:11:
03:db:97:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:53:20 2025 by rpki-client