Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: qERJN8B9fjsfMl0Iy/Lh32fYh84IzhxYIQ6WLjhCTVw=
Subject key identifier: 62:C7:38:14:C7:0E:9B:3D:94:C5:D9:5A:C0:4C:2E:FC:3A:49:C5:0C
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 019A4F6227F4353C4DB5F8B75F842F3CDA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 15:00:24 +0000
Manifest this update: Tue 04 Nov 2025 15:00:24 +0000
Manifest next update: Wed 05 Nov 2025 15:00:24 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: AVODmaSWNCx/SgWZ4XObBlE1yDoHZRyr25uALtVMcEw=)
2: nvFWMlN4X92KRkvOxX78tU9AiMU.roa (hash: Cawdk3ecA0ugRKq4sCsh7iIYZI6bpAW5VK6MQOdmMWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:27:f4:35:3c:4d:b5:f8:b7:5f:84:2f:3c:da:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Nov 4 15:00:24 2025 GMT
Not After : Nov 5 15:00:24 2025 GMT
Subject: CN=62c73814c70e9b3d94c5d95ac04c2efc3a49c50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1a:d7:a2:45:bc:a1:0c:78:91:18:ec:b5:13:
8b:ec:39:01:31:59:51:ef:ab:26:17:76:cc:90:c2:
ae:92:0a:0f:89:c8:a3:a2:62:27:96:aa:87:0f:b6:
30:61:11:55:53:6b:5c:28:60:7f:6d:76:f4:4a:b2:
08:b6:e5:d7:e0:b6:23:97:c7:05:f3:b7:a8:5e:0f:
5a:ca:2f:18:0d:af:b3:9f:c6:49:28:64:b1:9d:8f:
88:21:48:a7:c7:8b:42:64:90:d5:80:7a:71:cf:95:
40:5c:7b:3a:a8:c0:df:99:55:48:cc:65:00:4f:4a:
11:38:9f:fd:c7:db:3e:70:85:69:f1:56:a7:6e:28:
d0:96:35:d9:b5:21:d4:aa:34:65:33:b8:e3:20:f6:
f4:8f:ba:1d:a2:d4:03:30:f3:7d:10:dc:e6:2a:52:
a4:1f:c1:26:54:1e:7f:df:63:03:36:a1:a2:7a:5c:
5a:22:37:a7:a1:e4:06:3c:53:11:bc:90:b4:59:ee:
ab:0c:70:51:d6:c4:0f:cb:3c:b7:72:26:9b:60:c0:
f0:a0:6c:38:70:70:a6:f6:ef:a8:e6:35:8b:42:14:
50:6b:e9:e2:00:c2:cb:90:e9:97:0c:f1:54:9b:b5:
37:dd:bd:64:12:22:45:c2:8a:47:0f:44:12:60:77:
e4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C7:38:14:C7:0E:9B:3D:94:C5:D9:5A:C0:4C:2E:FC:3A:49:C5:0C
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:f0:ad:76:b2:de:8f:0b:24:2b:83:6b:b0:af:0d:61:07:01:
2a:ad:64:57:1f:fc:81:58:84:32:1d:37:26:d3:09:97:97:c8:
c7:a7:8b:ba:56:d4:bb:e9:2f:3f:5a:e9:44:14:91:54:f8:dc:
4b:00:0f:71:a9:fa:99:ca:ef:90:34:bf:ca:9f:c7:5c:41:c8:
b7:ae:28:e0:2f:fd:cc:12:27:b9:44:d6:2b:63:7f:1b:0d:22:
83:1a:2d:82:60:50:4a:fd:d7:ef:e2:de:41:c9:cc:69:f6:47:
91:e5:6d:47:08:51:74:b0:94:43:6d:30:e9:0d:e8:5d:78:71:
fd:fc:6e:0b:6e:ff:ea:09:d4:38:41:51:b6:2a:bb:17:2c:2e:
73:b5:84:fd:38:e8:c3:39:0f:84:dc:b4:1e:57:52:ea:f5:00:
4a:b6:94:bc:f5:a1:c4:ff:3f:82:7e:13:5d:99:fa:74:e1:84:
95:05:ff:02:3b:5d:aa:68:22:58:bb:11:99:67:98:56:31:ba:
7d:63:3b:f2:07:fc:cc:3f:10:59:64:c9:b7:48:09:94:01:bd:
bf:89:4b:dc:b6:d9:af:32:d8:de:cf:f1:ce:0c:40:f1:e2:eb:
75:c0:01:d2:a1:8a:06:bb:9c:c9:cb:8d:24:1f:c1:de:51:89:
45:75:fe:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:42:58 2025 by rpki-client