Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: XJl0a0qQmSe1Qerohaukd52yyt6rtuBxnWqwrXNuzzY=
Subject key identifier: 30:D6:C9:78:95:E0:35:40:AB:02:59:7F:FD:C1:EE:23:1B:9D:81:C5
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 019A4EF50A6D1A945B972253B3D33A8A6848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:13 +0000
Manifest this update: Tue 04 Nov 2025 13:01:13 +0000
Manifest next update: Wed 05 Nov 2025 13:01:13 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: O23GEhE3mfqMbBQM+uxf3bPsmAa8webAcadMgc3KYDM=)
2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:0a:6d:1a:94:5b:97:22:53:b3:d3:3a:8a:68:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Nov 4 13:01:13 2025 GMT
Not After : Nov 5 13:01:13 2025 GMT
Subject: CN=30d6c97895e03540ab02597ffdc1ee231b9d81c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:3a:97:25:bc:cb:e9:11:3e:e3:4e:c7:e1:a7:
c6:ef:6f:66:c4:f3:48:7e:b4:37:ec:8e:5c:69:49:
4d:cd:8f:49:2d:57:7a:b5:bc:65:be:68:2f:d8:d2:
10:bf:67:7c:6e:aa:4f:b1:a4:50:c3:e0:e1:12:aa:
fc:f0:ef:40:6b:e3:9b:95:9e:c8:6c:2f:9c:b6:90:
99:15:49:91:89:96:d6:f6:54:b2:9c:1a:04:0c:a5:
82:22:c3:06:df:b9:f6:b4:3e:47:b4:bb:4c:b2:f9:
e1:51:cd:07:66:a8:fc:0b:12:13:a5:07:90:18:5b:
4c:a4:d0:88:fb:fe:27:ca:6d:58:45:90:89:ca:cc:
24:1a:63:0b:3d:eb:f5:8e:42:c3:f6:40:ea:73:af:
e9:b5:86:ef:36:9c:eb:62:84:21:eb:cd:37:db:6a:
ed:69:af:57:62:6f:bf:df:64:6b:c7:9e:18:f7:74:
a0:c8:a7:df:bd:a5:be:9c:73:87:f0:d2:04:1a:d8:
ff:f2:92:ae:ae:62:e6:0b:8c:ee:82:50:38:ec:79:
cf:53:3a:d8:21:de:5e:43:60:86:6a:2e:f8:c3:0f:
56:97:17:b3:ec:9f:3e:97:7d:5b:fb:03:09:c5:4a:
92:13:58:de:5e:8f:fd:34:bb:13:6a:b2:98:22:94:
5d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:D6:C9:78:95:E0:35:40:AB:02:59:7F:FD:C1:EE:23:1B:9D:81:C5
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9a:18:6c:29:d7:06:51:5b:f5:64:aa:81:53:d6:bf:4b:16:
a9:a8:f1:46:ce:15:74:31:1f:5e:15:e8:05:49:f8:cf:6c:d4:
60:1f:1d:96:50:0c:8d:01:cd:85:c2:35:34:08:a4:ed:ce:c8:
48:28:97:e6:bd:52:0c:e7:bd:37:c9:90:65:44:d0:6d:e2:61:
ed:9a:6d:83:11:95:8d:7b:f2:f9:24:f3:15:c4:ba:60:9f:67:
93:8f:1c:1f:cc:8d:48:c5:d2:04:75:c1:7b:70:58:ba:22:17:
65:08:7e:d6:9d:27:cf:91:ff:6c:b4:ab:4d:36:4a:c1:a8:12:
d4:0f:96:71:bc:fe:7e:4d:49:3d:2d:e8:fe:ae:c9:d1:14:f5:
4e:65:47:7f:f8:c4:81:d5:c5:f3:e3:49:8b:8b:7d:31:33:20:
4e:ed:00:0f:a6:85:43:7a:a1:18:f0:4a:d2:73:e1:46:8d:b9:
87:8e:79:40:79:77:bb:2e:ea:48:6f:5a:d7:f5:ff:79:7c:a0:
cc:bf:39:e7:fc:7c:0a:4c:cf:05:bb:ee:da:92:10:0a:b1:46:
3d:a3:58:82:38:81:03:19:c6:76:6e:52:36:6f:6c:0a:a7:64:
20:ed:21:bd:9e:1e:1b:d4:b6:36:a5:83:e9:96:d3:07:f8:40:
15:ce:ca:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:09:37 2025 by rpki-client