Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: 9wBmt6/dkW81auk01qVmA0qTlq0bbB07sYh5yWRhLLA=
Subject key identifier: 9B:B5:88:14:77:F7:E4:B0:00:8C:A8:81:C8:64:05:E7:32:58:39:44
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019A541B014F07E75373B7761C8DE86BD501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 017C
Signing time: Wed 05 Nov 2025 13:00:47 +0000
Manifest this update: Wed 05 Nov 2025 13:00:47 +0000
Manifest next update: Thu 06 Nov 2025 13:00:47 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: ZqcqTPQLA9p2DbruONeOdE2SpOccjFS0af+3oy1/p30=)
2: Eba-gFj6_KEbGtGz74WD9Qe5r-8.roa (hash: IQzF41AYmHmWyxwMWh8AK7MBgafq4BN6uK+awf+6jdE=)
3: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (hash: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:01:4f:07:e7:53:73:b7:76:1c:8d:e8:6b:d5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Nov 5 13:00:47 2025 GMT
Not After : Nov 6 13:00:47 2025 GMT
Subject: CN=9bb5881477f7e4b0008ca881c86405e732583944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:cb:2e:9d:32:e2:26:01:b5:5f:62:63:e2:
5d:98:3f:3a:ef:b5:c9:7f:53:0b:32:82:a2:21:a1:
d7:a5:a3:99:0d:a7:1e:81:57:4b:e9:27:d7:46:e6:
5c:74:36:e2:76:52:af:cd:b7:5a:ef:38:01:31:93:
f5:1a:b5:29:a0:bb:b7:ae:17:f1:19:d4:3b:40:9d:
92:b9:95:40:6d:2f:8e:2b:b0:ef:d5:cd:73:0f:63:
90:1a:af:39:95:bd:e4:4e:7a:60:d2:99:6e:86:31:
d4:e8:39:27:5e:2f:ca:c2:59:c6:8e:e8:bd:cf:76:
f9:f4:22:b6:b2:28:e4:22:89:61:fc:bc:47:13:09:
a3:6e:d2:75:ad:c5:78:d9:43:1e:36:90:ca:7b:cf:
bd:57:e4:d0:13:90:08:dc:a8:1b:b7:01:5b:33:8c:
35:e5:1f:3b:5f:1d:9b:12:87:20:f4:13:6b:e2:52:
bd:4d:b3:c9:42:64:17:63:59:01:01:28:5f:a6:34:
1e:c6:1e:dd:ee:11:2a:a0:da:b4:f2:be:a3:01:95:
67:c7:e8:88:28:08:0f:08:d3:0e:9e:0c:e2:09:fa:
d9:62:b3:2d:c4:05:7a:c2:35:63:6f:0e:59:11:03:
75:a8:fe:4f:69:1b:cf:35:cb:cf:35:51:b0:63:30:
9d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B5:88:14:77:F7:E4:B0:00:8C:A8:81:C8:64:05:E7:32:58:39:44
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1c:3f:a3:04:25:46:dc:8e:aa:a3:26:18:6b:dc:e7:ba:17:
6d:77:c5:47:07:2b:01:16:26:3c:72:25:84:17:07:6f:52:d6:
48:31:6d:7f:e4:f8:48:4a:4e:b6:42:14:56:ce:d7:8d:e9:85:
da:54:4f:0a:5a:e0:8c:e6:7e:a4:37:a8:6b:62:8c:8a:de:02:
a4:96:93:81:49:00:76:0e:5e:cd:b0:50:a4:5c:7c:22:a6:f9:
cf:ad:79:af:f7:b5:f0:f0:bc:7b:c0:45:31:07:4b:6a:b4:36:
83:ce:50:a2:d6:f3:53:ef:b6:94:3b:05:8b:cd:d1:7d:c5:13:
35:a3:3a:21:6d:55:b1:f5:dc:df:76:86:79:6b:8f:a4:a8:ea:
21:fa:4c:0c:da:86:3b:9c:bb:f1:a1:ba:64:79:33:4c:0a:70:
ea:57:6b:b0:95:57:d1:11:ee:c6:4f:4b:6c:42:1c:05:8f:61:
77:8e:b4:7e:ff:45:80:8b:49:9f:d8:56:dd:7b:79:56:6b:19:
1f:5f:de:b5:92:ec:2f:b7:19:63:31:b7:0e:28:d9:ca:8b:ab:
41:8d:49:d9:65:64:8e:84:ed:a2:71:bd:e6:91:d8:c5:71:f3:
b2:7a:ec:87:65:33:b8:63:e3:0c:1d:d1:fd:58:99:6c:d6:64:
05:52:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:30:47 2025 by rpki-client