Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: uXVXBC5Qode2TneQoar+udP2ceyKG5haN3+syUHlLzU=
Subject key identifier: D0:6B:5E:7B:C1:C7:C9:CF:56:56:89:39:40:06:9B:04:95:8D:4C:0B
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 019A4EF44196244DCDBA07D8A831CF53CDF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:21 +0000
Manifest this update: Tue 04 Nov 2025 13:00:21 +0000
Manifest next update: Wed 05 Nov 2025 13:00:21 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: aNZECWxZDO/1Sw/bdZmoff3EyDOPVLNcdQaFbbDyXIg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:41:96:24:4d:cd:ba:07:d8:a8:31:cf:53:cd:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Nov 4 13:00:21 2025 GMT
Not After : Nov 5 13:00:21 2025 GMT
Subject: CN=d06b5e7bc1c7c9cf5656893940069b04958d4c0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:a5:ae:ac:3b:89:15:36:de:2e:90:b0:31:
a8:aa:66:b9:6f:fb:95:15:49:02:f5:c9:f5:50:f8:
04:e2:cf:05:4a:2f:00:56:bf:26:93:c8:f5:17:bb:
5f:62:d1:cd:39:af:06:ea:06:5e:87:41:e8:83:d1:
bb:a1:21:dc:dd:cb:bc:b9:8d:a3:30:41:09:61:aa:
11:a3:9c:ae:74:f3:f6:b6:18:78:30:11:a1:e8:dc:
f6:e7:91:d3:7c:88:69:0c:f3:d2:f0:13:33:25:ea:
a4:34:14:0e:63:0d:61:63:d5:c0:44:82:98:81:28:
94:95:85:79:3d:3b:82:78:12:7b:1a:77:1d:9a:e4:
8a:b9:2e:2e:56:ea:78:ec:54:9f:12:d3:cb:41:39:
13:68:65:b0:1d:d8:c2:5c:73:4b:44:53:6f:c4:b7:
3f:2a:f9:b2:cb:a3:63:13:15:b0:ae:e4:f4:52:35:
54:d3:d8:04:1c:08:9a:8e:98:a7:84:b2:04:91:97:
94:d5:27:00:ef:dc:93:d3:fa:b5:61:dd:81:a7:b4:
0d:d2:af:29:ca:46:9e:67:49:5d:f1:c2:7b:97:3d:
a5:1c:2f:7e:84:03:cc:fb:6e:e2:43:88:b5:91:42:
25:c3:00:4e:b3:5f:35:22:a9:a9:a8:13:80:91:db:
f2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:6B:5E:7B:C1:C7:C9:CF:56:56:89:39:40:06:9B:04:95:8D:4C:0B
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f3:fe:43:fe:b6:5d:8c:a6:4e:f3:58:45:b7:77:84:32:40:
67:87:8b:d0:19:63:fa:3c:ae:09:86:c0:46:9f:24:c8:0b:f8:
6a:42:f5:ee:f6:6f:6f:cb:10:9c:80:6c:33:ee:50:d9:76:6c:
c1:e6:e0:3c:50:86:73:3f:8f:ce:21:32:21:43:af:4d:b4:df:
52:ec:2c:50:5c:e3:fe:1d:4b:a4:20:96:56:47:91:2e:ce:a5:
31:58:fc:04:89:b0:70:e5:80:69:80:f0:98:73:f0:dd:99:d8:
63:d2:f4:1a:9a:a3:1e:60:df:68:75:85:bf:d3:f6:c3:64:53:
8a:bd:59:37:96:2b:47:01:a8:e2:19:ad:0b:e5:ce:12:84:f7:
4c:28:d5:8d:5d:18:c3:e6:12:cc:2f:ab:0b:64:6a:e1:88:b9:
19:4c:28:b5:70:f3:6b:e2:72:69:da:fc:44:7f:58:c8:05:a5:
bf:e4:fb:5e:ce:ab:e9:48:dd:b8:19:76:dd:53:ed:d9:0a:86:
76:cf:93:af:34:5a:69:59:a0:0f:63:f8:b1:ff:3d:ec:ad:f1:
d3:bc:22:34:d8:27:86:c6:e1:11:59:b5:a6:7f:ee:ef:be:03:
3f:18:ed:ad:f4:c7:02:63:8b:a4:14:47:b5:3a:94:ce:f7:21:
14:91:14:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:24:53 2025 by rpki-client