Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
File: 4S9k9_aXqptumYLAt2u3hCEzh2o.mft (raw, json)
Hash identifier: zLGEwo+Obg1P8ayUBAy9YCwt+74fSgW5xrZb4OpKVM0=
Subject key identifier: EB:A9:DA:D0:62:87:C5:71:21:C4:00:02:9E:66:4A:3A:80:42:1E:05
Authority key identifier: E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
Certificate issuer: /CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Certificate serial: 019A4DAAC5DF9E8C3C3BDB66563FC305E34B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
Manifest number: 0A67
Signing time: Tue 04 Nov 2025 07:00:28 +0000
Manifest this update: Tue 04 Nov 2025 07:00:28 +0000
Manifest next update: Wed 05 Nov 2025 07:00:28 +0000
Files and hashes: 1: 4S9k9_aXqptumYLAt2u3hCEzh2o.crl (hash: qbOhJXcmw706jjeswqsNF58exb/b3Nnbd7oaOZEp/Gs=)
2: mhXII1TmoI3urvchZmrd238HnqI.roa (hash: ymkQlbzHXOVaEGzGKdRpU2whYkKkdIgkhGPuabVJPyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:c5:df:9e:8c:3c:3b:db:66:56:3f:c3:05:e3:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12f64f7f697aa9b6e9982c0b76bb7842133876a
Validity
Not Before: Nov 4 07:00:28 2025 GMT
Not After : Nov 5 07:00:28 2025 GMT
Subject: CN=eba9dad06287c57121c400029e664a3a80421e05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5a:52:97:45:bc:82:a1:a5:d4:be:bf:d6:4c:
fd:4c:68:31:13:31:ab:4b:ed:15:55:97:1a:04:b5:
95:fe:71:51:33:70:36:e1:35:0d:24:ef:e3:39:8e:
1e:ae:c4:4e:26:1e:f4:4b:fd:94:3d:91:1e:a9:2d:
80:bc:61:fa:3a:8e:e1:d1:db:30:aa:51:d9:0b:be:
5d:a0:7f:00:22:79:7a:d2:e0:4a:58:12:e1:21:3d:
7c:8d:4f:61:2f:8f:90:b3:f4:63:2a:0f:00:15:1c:
a5:c0:e7:f2:02:4f:0d:05:f1:42:9c:a5:47:41:b0:
bc:e1:43:2f:3d:ac:cc:3d:17:28:33:b4:51:92:7d:
7a:8c:87:5e:d9:5a:0d:bf:ee:92:10:9d:50:8f:d6:
5c:b6:1b:b0:0d:4b:c5:eb:22:6d:bd:d0:d3:8c:b3:
f7:11:91:dc:4d:61:d8:4a:10:8a:e8:8b:00:dd:04:
f9:3d:c1:d2:25:cf:15:34:42:7e:be:ba:18:f4:76:
92:c3:c9:b0:5d:6b:ef:8a:c0:9b:68:ad:85:2c:82:
1c:05:94:b3:b5:e0:79:00:e2:d7:bd:c6:f4:a4:12:
a6:e9:f6:9a:84:07:a8:69:7f:20:fc:3c:88:71:7a:
e3:35:87:59:cc:6c:09:e8:76:77:83:51:63:0a:a9:
d4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:DA:D0:62:87:C5:71:21:C4:00:02:9E:66:4A:3A:80:42:1E:05
X509v3 Authority Key Identifier:
keyid:E1:2F:64:F7:F6:97:AA:9B:6E:99:82:C0:B7:6B:B7:84:21:33:87:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4S9k9_aXqptumYLAt2u3hCEzh2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e7d1a9-ac76-4a9f-b175-47c10a5ce534/1/4S9k9_aXqptumYLAt2u3hCEzh2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8f:5a:17:09:38:6a:89:a0:23:6a:5d:73:46:5c:fd:5a:7d:
a9:0b:66:fa:2f:76:f9:23:f4:a1:47:bb:04:5e:0d:0b:f1:bc:
18:c5:de:f1:9f:01:d7:65:f8:05:59:15:12:29:50:37:20:09:
ff:92:3d:60:04:f3:a6:60:22:b5:44:62:35:6f:71:9b:67:a7:
71:27:ab:60:6d:66:45:fc:b8:29:60:49:d4:03:d1:b8:ca:31:
fd:12:52:78:a6:34:e0:9c:11:16:c0:4d:cf:17:f1:ae:ee:d6:
c5:66:3a:51:3c:d7:ca:69:6d:74:48:00:1c:50:72:5e:58:c5:
9f:3c:50:ce:51:69:40:b9:7f:9f:fa:dd:59:38:d6:a0:2e:ee:
8c:7a:62:3c:da:55:11:53:0f:b3:d1:06:33:52:af:fb:57:ab:
d6:b6:e2:f5:92:3d:b6:af:31:23:79:f1:eb:d2:83:85:0c:66:
f3:4f:59:bb:24:61:fa:4a:18:f6:31:e2:bd:e4:88:b7:37:9e:
6c:77:c1:4c:7b:6c:44:04:24:42:a8:ef:69:44:64:b8:e3:91:
03:c3:4b:67:87:ba:f1:94:21:46:c5:74:d7:1c:c0:21:3f:65:
2c:38:0e:0e:07:44:67:c0:4b:d1:65:17:bd:df:3a:2b:82:6a:
49:fb:ad:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:45:23 2025 by rpki-client