Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
File: 4tc__D83xP7EvTWtHFlc0Fa67P0.mft (raw, json)
Hash identifier: SKPSaUIQ+1j54aaCT+GW+eN2FvbYuFyyJdQLgZqF0zc=
Subject key identifier: F0:96:3D:15:2E:A6:52:F8:36:F1:ED:BB:48:DD:15:44:A7:AC:1B:DD
Authority key identifier: E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
Certificate issuer: /CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Certificate serial: 019A533F6428CB25A3795FF197238AD7D480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
Manifest number: 0868
Signing time: Wed 05 Nov 2025 09:00:54 +0000
Manifest this update: Wed 05 Nov 2025 09:00:54 +0000
Manifest next update: Thu 06 Nov 2025 09:00:54 +0000
Files and hashes: 1: 15xabzkapAsSjIKERak6-4m1So0.roa (hash: FylhIFKLzVcHOQsVvyYerlKh6o6ajQeSyBB7cVFNmPU=)
2: 4tc__D83xP7EvTWtHFlc0Fa67P0.crl (hash: dfTGfbdnIMmojjDy7XQNedAtpZnr1gV6kjRCQdEJJgE=)
3: 833FmQyz-5vw3V1ZpD3pqMArHGw.roa (hash: eyX1KEkROJtBb4g504oMdjM6lbQ+P16xnRGxTkb5zHU=)
4: SSLLWRxY0V4J6I9l65vEUaKwK4Q.roa (hash: llqnu+z/IAMUkrZ/zCpWswAVAWND5pihVLoy0VRdDyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3f:64:28:cb:25:a3:79:5f:f1:97:23:8a:d7:d4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d73ffc3f37c4fec4bd35ad1c595cd056baecfd
Validity
Not Before: Nov 5 09:00:54 2025 GMT
Not After : Nov 6 09:00:54 2025 GMT
Subject: CN=f0963d152ea652f836f1edbb48dd1544a7ac1bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bf:93:5d:41:a7:bc:a9:8d:65:17:9b:e1:fb:
e4:19:e5:bf:bd:ab:eb:0d:4d:c3:a8:0d:dc:37:f0:
3f:b6:c0:32:47:fd:03:03:58:ba:eb:37:99:49:8e:
26:43:a7:89:c0:b4:ce:56:5d:a3:95:64:82:7b:af:
30:fd:30:12:d0:ef:8f:c9:d1:9b:cc:f5:12:85:34:
4d:fe:8f:2e:6b:03:cf:39:3b:ce:64:9c:93:df:06:
0f:17:3f:29:dc:c8:b2:99:2a:17:44:43:b5:42:f6:
71:62:4c:12:a5:c0:61:53:1c:7b:1a:a1:fb:ce:68:
f9:e9:4d:2f:c4:92:01:d3:e0:e1:d2:a2:6e:74:08:
aa:ad:e2:4d:dc:97:b0:bd:87:2e:17:a1:73:3c:8b:
fb:8f:8d:19:d0:48:8a:a4:e8:27:80:01:a1:e5:d7:
4e:fa:be:89:7f:5f:50:c6:d7:3a:4b:c7:97:c2:41:
5d:d1:72:78:79:7a:4a:6a:50:0a:37:9d:e9:cb:57:
4c:c5:c0:6f:e0:2a:82:ca:29:8a:32:87:da:2f:fa:
84:1c:d3:00:cd:14:96:4d:bf:94:7a:4e:a1:cc:64:
ea:58:06:0f:f1:e0:e6:e5:fc:80:7b:67:fa:13:a4:
9b:65:b4:7d:11:9e:57:ff:e8:6d:7f:57:2d:90:e2:
60:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:96:3D:15:2E:A6:52:F8:36:F1:ED:BB:48:DD:15:44:A7:AC:1B:DD
X509v3 Authority Key Identifier:
keyid:E2:D7:3F:FC:3F:37:C4:FE:C4:BD:35:AD:1C:59:5C:D0:56:BA:EC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tc__D83xP7EvTWtHFlc0Fa67P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/e5cf00-55b8-4359-ac1e-aa0c4dc03222/1/4tc__D83xP7EvTWtHFlc0Fa67P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:3b:ab:54:bd:8d:6d:89:c4:01:7e:5f:8c:df:bb:29:db:93:
17:18:69:c1:1a:8b:9b:a3:d9:79:ba:06:6e:63:74:1b:b9:70:
e1:07:da:29:e3:55:f5:b4:3c:36:e3:8d:3d:bb:6d:70:61:5b:
d9:d9:d0:b1:a4:09:b9:66:13:dc:ea:e8:33:d1:2f:d9:61:9b:
3f:6d:2a:2b:4b:b8:75:e3:00:39:e1:8d:61:73:8e:29:98:5d:
a7:23:4e:dc:d4:95:d7:5f:ac:b7:3b:1b:9f:d5:55:61:fc:cd:
80:df:b4:70:6b:c6:da:da:47:1a:db:e3:be:d9:f4:1f:ca:6f:
79:d7:8f:56:b3:80:8d:87:3c:b8:a0:a8:2e:89:7c:ee:f3:a2:
6c:4a:ef:ed:68:ac:13:4e:a2:14:1d:ac:08:8f:f1:36:94:c1:
c7:f1:b5:2e:ae:66:8e:6d:9c:bb:8b:1c:9c:bd:1e:ec:85:67:
e4:47:4a:ba:0e:87:f6:6b:31:ef:80:e4:a7:59:a7:ae:17:c7:
5b:44:c5:b4:91:ac:b0:b9:ba:5c:66:20:17:f8:ef:fb:7a:0d:
e7:6c:9a:21:ea:36:f6:27:14:a0:fd:44:ce:ea:1e:3f:e6:96:
d0:6b:4d:06:bb:57:08:31:9f:ce:e8:c2:5b:60:aa:d9:46:b5:
58:82:fd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 11:26:39 2025 by rpki-client