Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
File: 4_GcxeONj5wdZUcXdmX4khHeyJk.mft (raw, json)
Hash identifier: MijWNwbrtogAopX3nLHxAt8sRmTvCRMprDF0lVNxeQY=
Subject key identifier: 9F:F5:ED:96:A4:D9:64:41:98:42:63:44:1A:46:F8:C1:5F:D5:05:D8
Authority key identifier: E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
Certificate issuer: /CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Certificate serial: 019A53E4315CBFC3504A4245596DBB7197FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
Manifest number: 0F7D
Signing time: Wed 05 Nov 2025 12:00:55 +0000
Manifest this update: Wed 05 Nov 2025 12:00:55 +0000
Manifest next update: Thu 06 Nov 2025 12:00:55 +0000
Files and hashes: 1: 0mSInaOcQzcUaKnk3U9INfBb53Q.roa (hash: qM+YFRRYDhlfBg0HbT486tTWhmPISPFkNx0SGBRbZjE=)
2: 4_GcxeONj5wdZUcXdmX4khHeyJk.crl (hash: o25d9G+xyvVI2ylu/iFbQ6BQfTwJ/tbrq/NAWvkGvYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:31:5c:bf:c3:50:4a:42:45:59:6d:bb:71:97:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f19cc5e38d8f9c1d6547177665f89211dec899
Validity
Not Before: Nov 5 12:00:55 2025 GMT
Not After : Nov 6 12:00:55 2025 GMT
Subject: CN=9ff5ed96a4d96441984263441a46f8c15fd505d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f8:30:90:67:e3:1f:68:78:92:52:80:10:6f:
ce:5a:36:46:24:88:50:8c:e7:16:3c:fc:a3:73:30:
e1:e1:50:d3:fa:d1:61:20:91:4e:7a:86:78:e2:64:
fb:83:93:cd:1f:d2:4b:e8:41:19:e5:3e:ea:03:9a:
87:13:16:6a:36:f8:33:49:82:35:5a:f2:54:75:36:
f1:ab:57:c8:bd:4e:f3:d8:65:6a:d4:77:40:5b:90:
75:65:79:d2:83:d3:e9:b8:80:fa:56:2d:cf:9d:e9:
a6:29:27:9f:ea:71:4e:45:18:59:e8:51:19:1a:14:
7c:4f:52:1c:b8:e8:77:5b:58:ff:d6:5b:16:3a:98:
69:a0:f8:8a:75:06:e8:32:69:6f:da:2e:e1:fd:6b:
e7:91:17:9d:d1:49:18:21:32:35:6b:27:44:16:c5:
b3:8d:1c:96:2a:cd:8b:f1:41:43:a8:c4:3e:a3:8d:
66:c9:03:7e:c2:fe:d9:29:12:1f:92:da:ec:2e:2a:
fb:5b:78:1e:97:0e:0d:f9:4f:09:0b:9f:74:bf:1b:
11:56:63:30:fd:36:4f:98:fe:4f:23:19:3e:35:79:
db:3b:0e:d3:29:89:11:4f:2e:a2:eb:8f:26:72:04:
07:6a:38:48:5a:1e:9e:cb:c8:46:b6:3a:72:7f:da:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F5:ED:96:A4:D9:64:41:98:42:63:44:1A:46:F8:C1:5F:D5:05:D8
X509v3 Authority Key Identifier:
keyid:E3:F1:9C:C5:E3:8D:8F:9C:1D:65:47:17:76:65:F8:92:11:DE:C8:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_GcxeONj5wdZUcXdmX4khHeyJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/1a85a8-e4f8-498b-a5ae-a4be172c76ba/1/4_GcxeONj5wdZUcXdmX4khHeyJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:1f:71:6f:7b:6d:3f:12:7a:9b:e7:a9:12:4f:8b:6c:e9:1f:
e9:e1:13:1a:d8:b7:39:d1:fe:17:70:cb:e6:99:0d:66:c6:fb:
9b:b7:af:4f:12:5c:03:52:24:5d:93:0a:2b:ac:30:f2:66:7c:
92:fe:d8:6c:ea:7b:5c:df:af:a9:1d:f5:86:62:3f:37:c6:06:
41:1a:78:b6:43:32:1c:de:52:fe:46:ec:a0:7e:87:ed:98:08:
2d:ee:11:de:63:45:40:4a:77:11:10:b3:7e:23:20:50:b4:31:
d4:59:05:cf:25:d0:e8:b6:ef:20:71:f7:58:cb:c6:9f:61:76:
51:39:d4:7b:6c:72:0a:cc:34:7c:a9:b4:b0:a8:53:23:f4:16:
e4:78:8e:9b:b4:c4:97:1a:63:b4:cf:4d:23:5b:71:36:93:1f:
6b:71:3a:0b:b7:45:07:b9:8f:7e:05:62:df:83:cd:c1:b5:3b:
17:6c:74:cb:4e:ad:63:c9:cd:09:be:bb:e9:48:43:ef:b6:2b:
78:e2:9b:d1:a5:4b:1b:42:bd:74:5b:51:33:7b:98:ad:c3:aa:
81:61:e6:74:49:78:eb:8f:37:3b:80:1c:56:b3:37:79:14:2c:
ad:65:ce:f7:5a:4b:fb:f4:9b:54:c4:b4:be:31:e1:39:0d:f3:
ab:84:c4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:22:19 2025 by rpki-client