Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
File: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft (raw, json)
Hash identifier: ZlAKiKlDcKGvs02Lts6qJL0NclG/DvjrTql2vuU303I=
Subject key identifier: D8:38:59:ED:BC:0D:28:8A:F1:C9:CD:D4:0A:BA:77:88:00:42:9C:F6
Authority key identifier: E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
Certificate issuer: /CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Certificate serial: 019A50E3F8F7BE38251FABCF356FA345585B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
Manifest number: 0411
Signing time: Tue 04 Nov 2025 22:01:48 +0000
Manifest this update: Tue 04 Nov 2025 22:01:48 +0000
Manifest next update: Wed 05 Nov 2025 22:01:48 +0000
Files and hashes: 1: 4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl (hash: YpCBG5IYlvIZU+YyphVf1mbxjMG/IvHhh2gLxMmI8/s=)
2: H7jD667ua1MTRSgNeUALgotBmYc.roa (hash: DYMDYLZ2zWAIEYH23OdxIBtMbFHxghghtjADwNcrKf0=)
3: b9-JZ3RdF7ZemK1dm7cPMRh2l58.roa (hash: oUjihEIhXb/rvj31i27jlX3Sh4tmRUO23s5LKuEs2r0=)
4: lchTEZvN-6afhfJLiZL0vloeA9I.roa (hash: ralvdBvuAobYP/kvHgUFvqB6/N94B6BhMEuSMEPEay0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:f8:f7:be:38:25:1f:ab:cf:35:6f:a3:45:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e260b0a55a87a66e90a7463a01da6414fc034d3d
Validity
Not Before: Nov 4 22:01:48 2025 GMT
Not After : Nov 5 22:01:48 2025 GMT
Subject: CN=d83859edbc0d288af1c9cdd40aba778800429cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:20:24:3e:62:83:5c:30:c9:7f:3f:9a:2d:3a:
65:72:4b:be:3b:ef:13:03:27:b1:8f:44:8a:07:93:
8c:1e:46:1f:cc:41:b5:f5:2c:0a:a5:ca:3f:7b:2b:
8d:5a:93:4b:9f:87:14:80:51:19:55:d7:3f:a3:41:
f4:3d:ed:49:8f:b3:b1:9c:02:d0:f3:e2:c0:d2:5a:
4c:ec:41:10:ff:e7:90:bf:4c:ad:70:a8:8f:dd:a2:
70:f3:10:1f:28:0c:e9:db:f8:f2:0c:4f:ee:86:4a:
59:79:37:ed:4b:5d:3d:42:8e:8c:d8:b9:6e:12:71:
d8:25:18:eb:f7:c4:2b:25:b5:49:e5:33:92:1a:f2:
14:0f:95:7a:5e:5e:2d:3e:6a:72:4a:18:f0:5b:8e:
27:dc:fc:1f:76:39:b7:41:97:86:06:2f:66:f0:6b:
ce:07:33:90:e8:f0:c0:a1:b0:b3:34:bc:37:aa:92:
d3:db:2f:ec:9a:a6:33:66:d4:f7:35:95:cc:a1:ab:
22:79:b7:bd:75:80:9f:71:7d:90:cc:3c:79:d6:c2:
77:94:b0:95:48:0e:8c:97:68:db:06:87:89:5a:45:
a5:8f:21:99:cf:de:62:8e:e3:37:64:7c:56:15:a8:
d2:10:c0:4f:6f:27:9b:98:9f:21:12:0b:c2:aa:36:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:38:59:ED:BC:0D:28:8A:F1:C9:CD:D4:0A:BA:77:88:00:42:9C:F6
X509v3 Authority Key Identifier:
keyid:E2:60:B0:A5:5A:87:A6:6E:90:A7:46:3A:01:DA:64:14:FC:03:4D:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1bcb11-341d-4ade-96b1-d2269f40f3d3/1/4mCwpVqHpm6Qp0Y6AdpkFPwDTT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:09:c5:e5:9a:ab:b1:cf:50:62:dd:3d:fc:4b:10:22:52:9c:
d4:05:86:c1:65:54:c5:7f:a2:96:51:9d:87:d5:fe:0c:24:8e:
ce:96:12:61:82:c6:66:f3:9d:61:d4:30:37:91:23:62:f4:25:
a3:a6:dc:13:f3:67:73:f1:02:40:f6:97:ec:5d:cd:42:1e:7c:
12:17:f4:5e:4d:55:a9:df:62:de:e9:d7:38:e9:26:48:f8:f1:
77:74:e9:2b:10:3a:9b:b5:e0:a5:c4:7e:c8:08:17:13:2e:ce:
16:ff:87:2c:88:2b:ed:1c:56:cc:9d:4b:04:8f:6c:2d:9a:ab:
5d:99:99:3c:a3:58:47:35:fd:25:5a:91:d2:d0:58:49:91:a3:
1c:e8:ff:d7:f0:b9:a8:57:20:04:77:cc:c3:a0:be:eb:f0:6f:
97:fe:11:dd:15:72:28:dc:3d:1d:fe:03:78:69:e1:6b:11:92:
81:c1:88:2d:47:cf:5b:c6:a7:1f:dc:39:3c:4a:95:0c:22:38:
59:d1:dd:c1:61:ef:56:77:74:56:b3:6a:36:9c:26:36:b7:59:
f4:cd:b6:36:3e:16:90:21:f8:0e:63:f3:38:b7:58:af:18:d2:
a4:79:e0:4a:ea:b8:cf:a6:d3:3c:10:d7:cd:df:53:6a:b9:46:
15:4f:cd:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:38:32 2025 by rpki-client