Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: PwWstT/vWHM1djATyPOhNYXG1G9bytN5VnoHpON8eSo=
Subject key identifier: B7:BE:58:7A:58:F6:D8:4E:75:0B:C6:5A:CC:62:F4:8A:43:77:22:F5
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019A4D3D2DEFD08567A33467632E2857C4EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 0632
Signing time: Tue 04 Nov 2025 05:00:46 +0000
Manifest this update: Tue 04 Nov 2025 05:00:46 +0000
Manifest next update: Wed 05 Nov 2025 05:00:46 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: 1COMPYdzMKKp3YhUJRX+lXhBrCUwrsHlLKotKyMKMY8=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2d:ef:d0:85:67:a3:34:67:63:2e:28:57:c4:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Nov 4 05:00:46 2025 GMT
Not After : Nov 5 05:00:46 2025 GMT
Subject: CN=b7be587a58f6d84e750bc65acc62f48a437722f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:4e:00:30:8e:e5:17:08:98:76:d9:05:09:a6:
05:2d:a2:d8:b6:49:e9:d3:58:42:87:e1:7c:af:57:
71:da:55:26:55:e1:5d:e7:27:a3:c6:fa:5d:33:fe:
1a:07:68:0e:17:63:75:53:b6:d4:6b:72:54:1b:83:
91:71:df:5d:23:10:aa:e0:1e:bc:5c:c2:5e:1d:f7:
c4:a0:0b:96:96:da:34:42:94:07:04:c6:96:f3:09:
76:e1:b5:49:5e:8d:53:b5:51:10:a5:94:47:a3:ae:
eb:2b:4d:ef:55:71:34:cc:b7:6f:85:33:8b:85:09:
1a:0d:c0:27:63:3f:fa:1d:85:4b:09:b3:8a:6a:3c:
c5:7b:ab:c5:2e:57:12:3e:8e:db:f8:04:9d:d7:4b:
9e:da:b9:34:4b:fc:62:42:32:28:cc:da:0d:64:ca:
86:84:43:18:50:6e:10:25:5f:22:76:62:01:d3:8c:
de:f2:53:70:e2:11:52:c5:f5:3f:06:95:26:df:78:
00:c3:a8:24:a3:6c:b7:47:18:20:94:6c:05:1e:f8:
05:b7:66:56:5b:98:dc:c7:65:b6:63:9a:5c:35:6c:
98:fb:6c:05:6c:d2:91:3a:5c:cd:63:7b:dc:a9:1d:
2f:7a:19:7a:d0:d4:00:a8:4a:12:b7:81:8c:d0:d2:
53:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BE:58:7A:58:F6:D8:4E:75:0B:C6:5A:CC:62:F4:8A:43:77:22:F5
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:db:73:82:f0:f4:a1:6d:73:83:7c:a0:ff:f1:70:9e:f3:17:
fe:3b:ef:9c:78:1c:30:d4:b0:d8:9d:b6:a8:d4:9b:7a:8d:d9:
b1:19:39:89:c5:91:3c:14:28:fd:12:88:2d:62:e6:ff:6e:35:
95:0f:4b:d9:77:ab:58:81:8d:89:06:35:7d:de:d1:d3:ed:dd:
3e:5a:7a:55:dc:89:81:44:35:d8:51:26:23:1f:19:56:07:66:
23:05:a5:47:aa:db:5b:36:3c:09:21:d6:51:52:4f:6f:da:f2:
a6:9b:3d:2d:1b:3c:17:51:4b:47:e4:e9:0a:d6:c7:69:a8:1f:
5a:61:9a:eb:0c:1a:5a:68:ac:b8:3f:ca:b5:7d:5c:b9:71:44:
19:af:d8:b7:6f:a3:c6:29:f4:46:86:d3:ca:f6:e6:1d:9d:de:
f0:47:15:ea:2e:99:3f:75:a1:54:1a:40:94:0c:96:ee:e1:b9:
1b:65:44:f2:38:3d:15:00:dc:f3:42:41:9c:22:bb:3c:fc:63:
ff:aa:3d:37:7c:d5:2b:71:e8:de:27:9e:57:1d:ff:ac:9b:93:
aa:ee:01:05:5e:34:6f:7a:3b:0f:f1:27:78:49:03:72:21:1b:
fa:58:bc:f3:5a:01:b4:e2:7b:7d:65:df:72:c3:9f:23:b4:89:
49:1c:a7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:47 2025 by rpki-client