Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
File: 4z5OBZxk_xm-EKehUEV1YeRV0U8.mft (raw, json)
Hash identifier: erxiEhe4ndmQb12n14JKT7DeUmq8YoMtQWO1GGSjU58=
Subject key identifier: 2C:8C:9A:E4:87:60:9A:56:68:AE:A6:2F:3D:81:13:37:65:F3:FE:55
Authority key identifier: E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
Certificate issuer: /CN=e33e4e059c64ff19be10a7a150457561e455d14f
Certificate serial: 019A4EF5A46BEF9CE455C93DDC46765E2A04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
Manifest number: 0815
Signing time: Tue 04 Nov 2025 13:01:52 +0000
Manifest this update: Tue 04 Nov 2025 13:01:52 +0000
Manifest next update: Wed 05 Nov 2025 13:01:52 +0000
Files and hashes: 1: 4Vx5uY-wUi0YX0Kfqz3unLfjiuA.roa (hash: CqAh2hOC6+tjEARJLtXVTVdqWTjo1Zk7c/vuGkdSa5s=)
2: 4z5OBZxk_xm-EKehUEV1YeRV0U8.crl (hash: YtSWAhxKC86vBGOSAy9dtf5Uc2Gb4/i4+lCgENSd52g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:a4:6b:ef:9c:e4:55:c9:3d:dc:46:76:5e:2a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33e4e059c64ff19be10a7a150457561e455d14f
Validity
Not Before: Nov 4 13:01:52 2025 GMT
Not After : Nov 5 13:01:52 2025 GMT
Subject: CN=2c8c9ae487609a5668aea62f3d81133765f3fe55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:a3:17:ca:a5:5e:27:b1:63:8e:3a:93:a9:a4:
90:83:01:73:7a:34:11:e6:49:f6:ef:d2:1b:49:30:
57:8f:f0:ea:f5:eb:cf:17:06:5b:0d:bd:67:8f:1e:
1c:07:54:a7:3b:e7:00:25:6b:2e:aa:82:0d:4d:58:
ed:e6:8d:b2:68:9a:bd:fd:dd:25:78:9d:6f:9e:96:
fb:f0:c0:69:8e:75:77:be:46:20:b0:5c:cd:67:78:
9a:6d:07:e0:16:61:90:3b:c8:3a:76:f3:81:cd:80:
8a:66:f2:1e:c3:a4:9e:ea:89:2a:77:ae:93:7d:81:
06:db:4d:a9:23:61:0e:b9:8c:5f:5a:87:19:9a:f3:
4c:d2:7b:7e:b2:e3:97:a0:9d:50:6b:9c:11:83:bf:
30:d5:ed:86:7b:a3:8b:8e:c5:e9:6e:a0:2c:03:7f:
58:d1:86:e4:3c:4b:8e:d9:1f:6a:66:bf:7f:55:75:
81:fb:a9:9b:24:9b:fb:d6:63:4e:54:e5:2a:ab:06:
dc:53:58:b4:82:76:8c:8a:c7:0a:14:24:7c:77:6e:
3f:a3:7c:ed:76:c2:15:b0:ae:1a:69:84:c0:c6:5c:
03:e9:88:92:3b:e8:9c:69:2a:5f:cc:44:7a:92:3e:
5f:93:e4:5e:5a:ab:03:69:25:3a:33:77:ea:cf:b2:
13:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:8C:9A:E4:87:60:9A:56:68:AE:A6:2F:3D:81:13:37:65:F3:FE:55
X509v3 Authority Key Identifier:
keyid:E3:3E:4E:05:9C:64:FF:19:BE:10:A7:A1:50:45:75:61:E4:55:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z5OBZxk_xm-EKehUEV1YeRV0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/3bbe01-0a14-41bf-97da-2b2a8ba612fd/1/4z5OBZxk_xm-EKehUEV1YeRV0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:83:0e:92:72:6d:ba:3e:ed:23:33:3e:41:71:be:09:07:2a:
69:71:90:84:f4:34:ea:7e:c0:64:5a:36:a3:65:ee:29:e4:0c:
e2:09:de:04:2e:69:e6:7b:42:14:76:f2:bd:87:08:75:fc:67:
2d:e5:c4:4d:66:53:4b:7b:58:06:3a:56:b7:ef:f9:c4:0f:33:
70:54:5f:f7:91:c7:9f:0c:47:ce:bf:f0:8c:e1:e1:0d:d7:61:
ef:bb:d3:ee:fe:b5:9c:39:eb:df:81:ee:ee:b8:1c:6f:19:d4:
86:65:f8:e6:b1:1d:fc:93:e0:ac:18:cc:f9:79:f8:43:92:ca:
49:ce:aa:3f:0d:0a:43:82:b7:78:c6:16:89:63:65:c4:2e:b6:
a2:d0:c9:02:c5:64:1d:15:2f:61:26:8a:75:52:c4:5a:9e:6f:
a6:da:13:1d:2b:07:72:e5:fd:4b:74:22:9b:84:c4:19:7f:b0:
be:c2:b9:6e:34:52:74:9c:b1:40:17:73:b1:7d:3b:c0:59:49:
c0:ee:1e:f1:9c:33:8f:d3:36:94:f3:43:d7:9c:77:17:74:a3:
75:7d:43:a5:a3:ae:bb:d6:a2:49:e6:84:44:ff:0b:e3:27:ab:
88:90:34:58:30:e3:c8:32:a3:3f:16:71:6e:13:80:9d:51:00:
77:a0:9c:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:21:47 2025 by rpki-client