Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: SSFhWaHIyc+3zaygxm46V2UNd15PEHeHG2igJ9oNyIg=
Subject key identifier: EA:FA:15:0D:C0:33:FF:37:E1:79:CE:A4:10:E0:5E:0F:79:44:BE:5B
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 019A4DE217762705B487012CEC41A04A08F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 0427
Signing time: Tue 04 Nov 2025 08:00:53 +0000
Manifest this update: Tue 04 Nov 2025 08:00:53 +0000
Manifest next update: Wed 05 Nov 2025 08:00:53 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: vWEfP2ULylMAMsMcDLRqT+70gx2tgWbwsa+9kih4Gmk=)
2: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (hash: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:17:76:27:05:b4:87:01:2c:ec:41:a0:4a:08:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Nov 4 08:00:53 2025 GMT
Not After : Nov 5 08:00:53 2025 GMT
Subject: CN=eafa150dc033ff37e179cea410e05e0f7944be5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b4:9f:3b:d5:3c:e8:b5:80:94:dd:13:77:c6:
a9:3e:12:bf:ce:4c:d5:44:89:a1:31:f6:67:e6:2f:
a4:a1:cf:ca:8c:ce:3e:2e:47:89:4f:dc:0f:90:99:
0d:43:c9:1e:53:a3:b8:4a:71:c7:15:d3:5f:f5:95:
f8:a5:5f:6a:32:16:9e:0c:61:a7:c5:67:4d:64:8a:
8b:73:fb:0d:cd:c8:2c:e2:e8:40:0c:74:45:83:b1:
ee:e4:d5:13:0b:11:27:c3:f3:b3:ca:7b:2c:49:5c:
ca:6b:41:d4:5a:b2:b8:c3:7d:fe:6a:dd:4d:e7:10:
c8:be:a4:0d:86:a2:68:17:09:f2:d1:80:a5:44:de:
3a:ed:42:b0:15:df:79:6d:32:e5:3f:47:26:13:85:
27:71:69:0a:b9:f2:e4:78:88:1b:7a:fc:d3:46:d2:
8e:1e:d9:30:42:bd:a0:c5:d6:28:42:88:73:40:d7:
fa:70:bf:20:e1:3a:7e:7a:b4:35:a7:45:22:82:7c:
b2:06:62:a6:0c:90:6d:e0:06:cc:a9:8b:89:e2:76:
50:37:94:fa:20:5c:fd:5c:05:94:33:84:f2:e9:fe:
84:17:e7:3f:15:59:7e:69:95:f9:1e:74:46:ea:48:
42:60:8b:f2:05:da:4a:01:fa:33:1b:f7:f4:43:4e:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FA:15:0D:C0:33:FF:37:E1:79:CE:A4:10:E0:5E:0F:79:44:BE:5B
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:60:f3:a3:55:49:08:bc:0a:09:be:16:f0:61:e5:f9:ca:ec:
3e:2c:7d:36:a6:98:80:11:aa:28:24:6f:11:1f:f7:a9:e6:94:
af:91:62:e1:c8:c9:ec:06:87:e8:f8:d1:ff:36:e6:0c:bb:26:
9a:2b:2f:fd:e7:bb:fc:31:3b:12:a7:a8:cd:e7:ce:81:b5:a6:
d1:65:68:c7:92:4a:85:7b:1b:67:81:7d:d0:72:2b:c3:b9:db:
74:b2:49:a6:c2:6a:e9:46:f3:5c:b7:ff:67:32:0c:cb:4f:98:
11:6d:57:bb:08:a8:a6:f6:25:20:43:d6:22:9e:83:f0:7a:99:
76:54:14:3e:24:8f:e0:b7:33:67:56:86:eb:73:59:a8:1b:cc:
d6:65:bf:e4:d5:46:11:fc:52:50:c6:54:7d:b1:ab:84:0d:2f:
a4:6d:d9:70:dd:a4:a2:5e:f7:c4:2e:b6:6b:8d:ab:40:f5:ee:
da:93:61:2d:ab:8b:72:a6:f6:65:97:7f:31:88:3d:9a:ae:3c:
51:76:a7:0a:8f:34:50:92:60:1c:2d:aa:6c:65:d3:0e:6c:f7:
5c:e8:a4:cd:ab:b5:6f:ad:2f:35:67:31:e6:f4:5a:f3:41:59:
76:5c:f4:67:07:0a:c4:d4:d3:a7:2f:41:7b:81:4f:1e:ab:f0:
bd:36:fa:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:01:40 2025 by rpki-client