Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: mYCOt/jbtnGVyZNuptaZryl8vKp47reDsSimL6gbexo=
Subject key identifier: 25:67:15:56:CA:83:7C:28:E8:4E:E5:52:AC:C6:B9:41:94:B6:18:2F
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019A4D06917586B45713F09150E355319CF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 141D
Signing time: Tue 04 Nov 2025 04:01:07 +0000
Manifest this update: Tue 04 Nov 2025 04:01:07 +0000
Manifest next update: Wed 05 Nov 2025 04:01:07 +0000
Files and hashes: 1: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: OWVXr9eUcVxvmO9HLDkMRyVp1vWuH3KA5iD9rRTQD9w=)
2: KUdT6ERAiaY5ZjAg0l7_pkDNLCw.roa (hash: JWvFQTdlTw7oZyEK0anyzQ0bLLNEO6CoBLxhpsT9tmY=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:06:91:75:86:b4:57:13:f0:91:50:e3:55:31:9c:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Nov 4 04:01:07 2025 GMT
Not After : Nov 5 04:01:07 2025 GMT
Subject: CN=25671556ca837c28e84ee552acc6b94194b6182f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:b0:d2:37:e6:d4:3b:c0:f2:b2:be:3c:1e:
d0:1c:25:a5:69:92:d7:38:fb:98:e1:82:7d:25:85:
62:54:87:60:eb:99:1b:31:af:ef:8c:60:40:73:9a:
7e:cb:0c:08:ae:c0:dd:2f:95:aa:67:f8:27:6d:fb:
c3:82:83:cf:71:b6:bc:68:1c:fb:51:a9:95:6d:46:
4a:55:c0:ca:1d:d0:5e:c8:a4:63:08:61:14:26:42:
64:11:31:b5:6f:c2:e2:85:79:36:be:17:03:19:f1:
2d:42:30:01:28:00:de:1a:d5:7a:2d:ea:19:d7:46:
61:ce:6b:f0:5a:9a:be:9b:19:0a:65:28:d3:b0:d8:
a0:cd:62:e3:f0:8b:08:4b:8c:49:65:cd:a7:e3:76:
47:85:ae:e2:8a:2a:b9:ff:7c:f1:79:35:61:be:17:
91:af:c2:f1:88:04:c5:1e:86:ca:75:b4:1e:b5:cd:
cf:4b:a9:74:b8:b9:4a:f5:6e:aa:15:c9:22:2d:28:
22:cd:87:c7:8b:6e:02:37:9e:38:90:5d:c4:2a:f7:
96:1e:ad:e5:cc:0b:bf:d7:51:fb:2a:d7:35:0d:98:
16:4e:1b:79:b8:56:9d:25:a9:e0:cb:a6:76:cc:fd:
1c:dc:dc:cb:78:33:58:5c:86:69:4a:4b:c7:2f:50:
e0:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:67:15:56:CA:83:7C:28:E8:4E:E5:52:AC:C6:B9:41:94:B6:18:2F
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:7a:15:03:95:2f:04:e3:dd:32:7a:f4:45:95:0e:59:39:01:
3a:0d:ea:ea:ef:e7:d3:c3:a4:85:7f:15:1b:e9:53:54:4e:12:
ae:55:ad:6c:a3:2a:31:ad:65:a1:3d:ca:a2:d0:06:6d:59:c0:
71:2c:8c:db:37:a9:f2:99:c4:e8:fc:77:0b:96:5f:2f:fe:fe:
ed:88:f0:f7:1a:6a:8c:ca:c1:a3:5f:47:94:a3:ff:61:f7:6a:
42:13:08:c5:ea:45:5a:dc:f1:49:af:37:a3:12:47:63:77:59:
58:c5:b7:32:4c:ef:c9:37:6f:c9:cf:0c:f5:39:52:5e:f2:71:
4c:74:55:ca:e0:25:09:20:b5:40:90:9e:20:0c:67:72:70:f6:
57:93:f8:08:d5:3f:59:f8:9d:67:8e:a3:ee:c5:c7:38:fd:15:
df:ff:85:08:6a:bd:6d:a8:11:7d:b2:e8:74:6c:8f:ac:28:d8:
11:73:b0:f3:66:21:1d:30:ca:11:78:28:db:7e:61:0c:e5:6a:
83:a1:fd:33:20:e8:49:61:b4:d5:15:31:fc:a3:ae:90:14:95:
03:5c:2f:c5:f3:6f:99:2c:f0:62:44:b8:6e:17:7f:47:9d:13:
06:5b:66:da:58:7e:8d:4b:94:d8:8b:88:ee:d5:e4:46:e6:30:
52:2f:a5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:50 2025 by rpki-client