Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File: _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier: LLerWym2JUdQdd/wmODtvn0eixa9RJBkgAV7ATe7TQU=
Subject key identifier: 4D:DF:DD:3E:34:F8:55:CE:53:06:17:AA:90:8C:69:0D:73:2C:9B:58
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial: 019A4F6223A56B3B58F27AA0BA8364FFDAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number: 171D
Signing time: Tue 04 Nov 2025 15:00:22 +0000
Manifest this update: Tue 04 Nov 2025 15:00:22 +0000
Manifest next update: Wed 05 Nov 2025 15:00:22 +0000
Files and hashes: 1: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (hash: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=)
2: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (hash: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=)
3: RqVcFJZ-UOtFVhYTc8Tvk-2MyWc.roa (hash: EkympbPJChDE++MdHcZn5otezDPhnhwM5HrzDsbo97E=)
4: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (hash: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=)
5: VqGI977rLYSlPvPeIqKzU5gAsRQ.roa (hash: lpVLT1GI44DAxERwMidgTiLaLBc+qxFL0OsVYhw1jZs=)
6: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: MIOsrGylAMsX6S+q8gLsIge64Yl2GO552X3YKjlV+y0=)
7: ftA_0MHprxcS8SlFhkjswrNXwFY.roa (hash: smdGNCpTIhX1wgE3ptT3KMsrSmr38EbIS8Vn8KXDg24=)
8: vdV5qL7SpepCbsvsvfAJBAz8FxI.roa (hash: zM4+IpZ2NSkVy8xnsYcs6SKRJCNxX1j91N1iXdAJ3Zs=)
9: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (hash: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:23:a5:6b:3b:58:f2:7a:a0:ba:83:64:ff:da:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Validity
Not Before: Nov 4 15:00:22 2025 GMT
Not After : Nov 5 15:00:22 2025 GMT
Subject: CN=4ddfdd3e34f855ce530617aa908c690d732c9b58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:47:c7:3b:50:58:d5:89:b5:04:75:03:2b:ce:
39:de:71:c3:47:3c:04:68:92:89:64:59:87:e3:fa:
82:95:20:3e:0d:39:ec:6f:41:06:95:f6:34:25:10:
70:f5:55:1d:7a:d8:5f:80:8d:d7:fe:db:90:09:f7:
3d:5c:f9:29:0d:ef:1b:a8:98:3b:d1:d2:06:ff:9f:
2c:8d:29:26:18:bc:02:37:ba:72:58:a7:f2:dc:9d:
11:fd:fd:3e:35:0b:0e:d0:d7:bb:eb:8c:dd:61:b8:
41:6d:d9:84:3b:b5:8a:63:3b:ba:3d:5d:3d:ce:5d:
a7:ae:3c:ad:a5:20:ed:5e:10:19:50:36:2b:45:db:
f4:c8:12:7f:07:76:66:36:44:eb:8d:54:0d:a0:df:
d8:38:65:3d:30:ef:30:a1:d8:ea:2f:3c:e2:d6:7b:
7f:88:3d:29:9a:e6:f2:11:d5:37:ed:f4:1b:51:04:
7d:14:1e:35:a5:8b:76:d6:ed:2e:6e:87:59:3e:2a:
75:00:48:8e:5c:8b:50:0a:6a:a5:5b:c2:5f:0a:93:
80:e3:1d:ee:bb:55:50:1f:71:88:d9:a1:e6:a1:a9:
bc:f9:f1:69:5b:6e:92:6d:cf:35:9d:43:e2:c6:76:
0e:3a:db:1f:6e:7b:79:cb:7c:2b:b6:f9:7f:bf:0a:
55:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:DF:DD:3E:34:F8:55:CE:53:06:17:AA:90:8C:69:0D:73:2C:9B:58
X509v3 Authority Key Identifier:
keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:93:9a:d3:3d:dc:83:1b:8f:a1:bc:84:2e:08:78:b2:5f:7a:
58:dc:7b:b8:55:cb:a9:c1:44:65:17:bd:ab:49:2f:92:53:3d:
80:ee:7f:94:19:2e:93:01:3e:e6:dc:6d:23:a3:c7:88:b3:fd:
cf:48:1e:66:92:1d:90:ff:8d:71:e7:5f:18:54:29:42:c6:7d:
6b:70:81:3c:5a:78:45:ad:16:ad:19:ab:31:cd:db:94:ba:e0:
d8:27:77:e7:28:72:40:91:c4:c3:92:b8:95:64:ce:15:0b:45:
aa:6d:0f:12:d6:35:8c:58:68:b8:40:71:45:10:b0:d5:74:81:
68:3c:2c:4d:5c:d8:17:18:35:ff:a2:aa:fa:f9:ea:c9:71:d4:
f3:60:98:06:85:2e:bc:08:16:82:7d:71:b9:d6:da:39:bf:20:
fa:a1:bf:7e:12:2d:24:b0:47:b1:3e:ad:5b:c4:ac:2a:9a:b8:
f4:9c:38:f7:27:7e:ed:2d:f2:0f:c1:90:99:9a:cf:b2:f4:ee:
b4:c3:ec:d9:13:a3:f3:87:0c:ef:c7:f3:f7:ef:d9:fe:62:74:
d7:ea:a3:18:18:5d:08:ca:54:79:b5:bf:ad:27:fc:3b:9a:f7:
9f:ae:58:50:d5:66:d5:6d:da:b6:9c:ad:0c:9b:eb:84:28:b9:
d1:bc:2f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:18:17 2025 by rpki-client