Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
File: PB4_3feITXhacI_U5mS2LekQ6-g.mft (raw, json)
Hash identifier: ZQdwLThX0T6b9Kq6hq63iCuFtIiqaw+Tx6rgVlataXI=
Subject key identifier: DA:A9:E3:E6:AA:37:3B:A5:EB:BE:BC:F6:5D:3C:95:89:9C:12:CE:F6
Authority key identifier: 3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
Certificate issuer: /CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Certificate serial: 019A503DB73A6A68EDB4D85E11A269B652CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 19:00:13 +0000
Manifest this update: Tue 04 Nov 2025 19:00:13 +0000
Manifest next update: Wed 05 Nov 2025 19:00:13 +0000
Files and hashes: 1: PB4_3feITXhacI_U5mS2LekQ6-g.crl (hash: SQv/gBl7HH1aSNcRKVffpxJ/fOJqSi7Frcfr2gW33k8=)
2: rVIEtQUeZ960hMeEwx6AF679dhM.roa (hash: s8qUIneeKVi7X6yParz6sZwUc96D/kko1q8RujoMkJ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3d:b7:3a:6a:68:ed:b4:d8:5e:11:a2:69:b6:52:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c1e3fddf7884d785a708fd4e664b62de910ebe8
Validity
Not Before: Nov 4 19:00:13 2025 GMT
Not After : Nov 5 19:00:13 2025 GMT
Subject: CN=daa9e3e6aa373ba5ebbebcf65d3c95899c12cef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4d:1c:7d:2e:ae:09:b8:53:0d:db:3d:44:e4:
1b:4c:75:a4:8c:01:00:0d:14:04:bb:91:32:ed:00:
4a:a0:6e:bf:20:71:a6:be:04:58:b7:60:50:ae:dc:
a6:c5:9e:82:3b:93:fb:8e:a4:a5:a4:44:1c:41:01:
b1:13:82:f7:45:be:7e:da:2b:4d:25:23:2e:7b:d9:
1d:f4:e4:9c:c9:cb:8c:86:38:0c:11:95:91:26:94:
8a:ed:81:f3:eb:8b:c4:81:8c:1c:5a:c8:fc:c2:ca:
2a:3f:d4:f7:0b:d6:3e:7c:50:3d:0b:e1:a6:26:f2:
3d:e5:22:a4:4e:b5:4a:30:dc:ee:18:53:21:ab:bd:
0d:a9:ca:e5:86:1f:4a:54:6b:52:77:5f:df:60:9f:
3c:50:76:30:97:61:7a:7b:62:6b:e2:d9:e3:3b:14:
24:72:7c:ba:01:d0:72:85:4b:72:85:a2:19:10:a6:
5a:23:d9:7b:08:cd:3b:24:2b:44:02:a5:c8:8c:e1:
e8:49:55:e5:58:0e:9f:9f:5f:83:d9:5f:6b:fd:5f:
e1:46:83:ae:89:f0:ed:0d:10:4e:91:7b:67:90:29:
c7:ed:c0:22:75:f0:e8:23:5a:90:9f:c3:93:08:0d:
9c:e2:26:70:b4:e1:21:bd:d2:f8:45:59:44:79:c2:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:A9:E3:E6:AA:37:3B:A5:EB:BE:BC:F6:5D:3C:95:89:9C:12:CE:F6
X509v3 Authority Key Identifier:
keyid:3C:1E:3F:DD:F7:88:4D:78:5A:70:8F:D4:E6:64:B6:2D:E9:10:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PB4_3feITXhacI_U5mS2LekQ6-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4e8e74-77e6-41eb-9047-59c18ada352f/1/PB4_3feITXhacI_U5mS2LekQ6-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:02:71:d1:ab:b1:37:6d:af:1b:29:6d:0a:42:1d:da:8f:37:
ff:07:47:bb:d1:e1:9a:14:34:11:b9:f3:eb:a7:5d:08:1c:2d:
cc:7f:84:7b:6b:62:15:78:0d:63:2f:b7:97:31:8b:11:2f:37:
bb:b1:cb:00:83:2b:bb:67:14:18:ec:b0:37:59:17:d3:ae:aa:
d6:9e:79:e8:4d:4f:7a:fd:47:31:f9:9b:5e:f5:10:a4:57:b8:
1d:46:19:9c:5e:38:87:f6:50:93:02:cf:6c:d4:2b:a0:65:a2:
88:0f:0b:0d:63:c1:cc:1e:be:dd:25:9f:71:a7:c8:95:00:ce:
2b:09:f3:5f:cf:dd:8e:e0:dd:f0:1d:ba:8b:a1:65:36:f1:7b:
5b:92:48:e5:e2:da:73:44:81:a7:5f:6b:f6:e1:39:7e:3c:36:
d0:18:e6:cd:02:ba:0d:8a:af:bc:31:93:2f:21:fc:5f:48:ed:
c6:c2:1a:5a:d2:e3:c5:84:4e:7e:2d:38:e1:a6:cd:75:62:df:
9b:d4:2c:30:03:ce:04:c9:60:a6:c3:05:01:f6:23:79:bb:0d:
c0:f9:e3:08:71:52:17:2a:af:19:e5:e5:bd:ae:a8:ef:bf:a8:
2f:c4:03:37:65:f7:3d:cb:10:70:4c:34:d3:85:a7:5e:67:99:
06:ec:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:22:17 2025 by rpki-client