
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File: 4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier: qemMYG/8ez/w88husKdqJiazi+/UsjSNFpx4BQRxy8M=
Subject key identifier: 3E:6B:E3:81:79:47:C3:39:BA:46:D6:E8:6D:91:F7:F4:5A:0D:33:73
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial: 019A552DFF6A7C82B6C415EC4FA60EE7D5E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number: 0869
Signing time: Wed 05 Nov 2025 18:01:09 +0000
Manifest this update: Wed 05 Nov 2025 18:01:09 +0000
Manifest next update: Thu 06 Nov 2025 18:01:09 +0000
Files and hashes: 1: 15xabzkapAsSjIKERak6-4m1So0.roa (hash: FylhIFKLzVcHOQsVvyYerlKh6o6ajQeSyBB7cVFNmPU=)
2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: 526LJMD5UNHFBhnD5VZ6jk3E3OvMnB7NcMcJOGdVt28=)
3: 833FmQyz-5vw3V1ZpD3pqMArHGw.roa (hash: eyX1KEkROJtBb4g504oMdjM6lbQ+P16xnRGxTkb5zHU=)
4: SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa (hash: llqnu+z/IAMUkrZ/zCpWswAVAWND5pihVLoy0VRdDyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:ff:6a:7c:82:b6:c4:15:ec:4f:a6:0e:e7:d5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Validity
Not Before: Nov 5 18:01:09 2025 GMT
Not After : Nov 6 18:01:09 2025 GMT
Subject: CN=3e6be3817947c339ba46d6e86d91f7f45a0d3373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:12:34:c4:c3:b4:4c:97:68:6e:fc:99:d0:c1:
58:7f:dd:36:5e:62:50:bc:7e:93:29:b4:20:d3:1c:
46:8a:7b:34:4b:38:13:3d:91:23:2e:b5:ab:b8:59:
09:a2:08:28:cd:94:2b:d8:af:65:87:4f:ec:d6:30:
36:b4:2c:d6:65:af:db:e6:63:d9:89:c5:60:55:5d:
20:25:f8:13:6d:3d:13:72:48:d1:40:ca:9e:e4:53:
fb:8f:3c:b1:04:6c:bf:39:c1:f5:f6:cc:6c:fb:f6:
6d:8f:35:6d:30:fc:9a:81:22:88:44:35:32:97:ab:
5d:d3:47:6b:b1:b1:a6:79:a6:58:c2:54:12:e3:22:
2e:c6:3a:d9:5e:11:cd:c7:da:3a:09:02:98:5e:61:
2b:d5:c4:7d:cd:a2:a4:2f:91:41:4f:60:f5:db:fa:
77:b2:00:76:45:17:9c:20:af:53:9a:36:cf:1e:be:
09:95:8d:c5:e1:bc:d5:b9:da:42:f1:b3:46:de:6e:
31:f8:0d:76:0d:12:17:23:b4:dc:4c:73:44:80:78:
d9:64:cf:aa:c0:6e:e7:16:45:f3:d4:c6:ce:b3:de:
78:78:6a:0f:9f:25:66:d7:86:54:77:ad:ef:eb:55:
a1:f2:13:8e:4b:6d:14:c9:a3:92:ad:c6:7f:1a:9a:
5c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:6B:E3:81:79:47:C3:39:BA:46:D6:E8:6D:91:F7:F4:5A:0D:33:73
X509v3 Authority Key Identifier:
keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:29:bd:35:5c:b4:b2:07:9b:36:1f:29:c7:d2:ce:f9:3f:44:
6a:8d:8a:88:32:17:61:df:fd:a9:47:ca:40:9f:16:2a:90:2a:
ab:17:64:8b:32:25:cf:77:4f:18:1a:dd:a1:f2:43:9f:dd:11:
27:27:f1:7c:00:41:55:94:bf:8a:03:06:5e:bf:ac:3e:44:94:
cc:2a:9c:72:a6:b7:13:1c:9f:a4:cb:4a:77:b4:f1:40:29:5d:
94:6f:5b:88:24:37:d0:28:6d:c9:04:60:9f:5d:e5:a1:c5:7d:
1b:7b:d7:a6:28:47:57:36:e2:f3:a3:38:f7:57:d8:fe:50:78:
ad:86:3d:6d:d4:8c:7f:f9:2a:a5:60:97:43:9c:16:f6:76:33:
15:82:a6:20:fd:eb:89:64:23:96:c7:47:7f:b6:8e:bd:37:d5:
8b:e2:22:89:dd:c9:18:70:a4:4d:33:8a:8d:eb:7a:2a:5d:47:
f9:83:27:8e:d6:9f:8a:46:7a:f1:ac:47:7c:d4:b3:54:0c:f9:
c6:46:0f:cf:76:b3:a2:9a:74:41:b5:ce:a8:03:a5:6c:b2:67:
30:14:65:31:de:ca:c9:15:5b:a3:32:5a:1c:a0:cb:16:cd:cf:
a8:0e:43:81:b6:a4:3b:7a:e5:75:9e:79:0c:a0:4c:a9:82:9e:
c5:f4:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 20:01:04 2025 by rpki-client