Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: kRaiwlvmJbuqzD8FEcSA38pGxcsujMlRfNgncp2bY2s=
Subject key identifier: 15:11:AC:62:CA:E3:50:52:34:77:FB:76:35:21:C5:2D:7D:6F:70:F3
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019A4FCFF7942CE36F2427C286B48C2039FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 06C3
Signing time: Tue 04 Nov 2025 17:00:20 +0000
Manifest this update: Tue 04 Nov 2025 17:00:20 +0000
Manifest next update: Wed 05 Nov 2025 17:00:20 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: QrCsVTJiE6bucNjaqigdwSkE3I7Lwmhlq7McvfV0JKY=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:cf:f7:94:2c:e3:6f:24:27:c2:86:b4:8c:20:39:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Nov 4 17:00:20 2025 GMT
Not After : Nov 5 17:00:20 2025 GMT
Subject: CN=1511ac62cae350523477fb763521c52d7d6f70f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:38:7e:1c:9a:5d:b7:91:e0:00:a3:1d:a2:2a:
04:d1:cf:6d:60:12:20:96:92:04:7a:34:3a:dd:25:
e7:09:5c:0e:24:35:65:ea:6e:e6:23:27:3a:ce:bb:
15:12:85:14:15:ad:7a:b4:a5:ca:fb:60:eb:72:c1:
26:c6:5f:f5:06:c0:42:5e:87:19:d3:58:75:8b:50:
97:b0:df:96:cc:14:95:b3:e3:e4:d0:62:4a:c1:84:
86:a9:4b:73:5c:97:7d:f7:59:b3:8c:40:5e:a1:35:
35:28:db:aa:a8:2e:f8:c4:ff:24:86:5e:fd:41:c0:
37:00:cd:ab:4f:61:d9:48:bd:17:62:c4:2a:13:c9:
29:90:b7:29:22:74:41:1b:36:cf:8c:c6:d7:32:e1:
77:23:35:9e:3e:81:37:07:3a:f1:e2:81:23:00:1c:
b7:30:16:eb:95:25:d5:c0:40:91:ce:81:58:2d:bb:
8b:d3:13:37:3e:f8:b2:cd:2a:fa:be:03:ba:8d:8b:
18:e9:6a:0a:a6:d8:6f:de:2f:f1:8e:98:2f:f7:af:
84:21:9c:26:8f:78:6e:ac:3a:6e:31:42:4a:b1:eb:
97:d9:f2:fc:f7:8d:60:31:e8:86:40:b2:08:24:2f:
4f:21:53:80:e2:c9:b6:e2:52:a2:d5:19:21:69:1c:
4c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:11:AC:62:CA:E3:50:52:34:77:FB:76:35:21:C5:2D:7D:6F:70:F3
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c1:16:88:17:d0:05:f9:d0:8f:f9:4b:08:f0:70:4c:fa:db:
09:dd:4d:0d:6b:6c:21:c2:cc:15:09:0e:1a:51:28:d6:b5:ae:
09:75:7c:09:41:72:fb:23:e8:ce:74:cf:53:31:42:66:9a:06:
cf:01:b6:0c:f8:d1:fa:a5:69:49:a0:42:02:78:81:79:77:b4:
92:de:a2:d3:a1:22:5f:5e:b4:e4:e3:41:57:f5:76:a6:f5:36:
6b:59:23:9c:27:8e:95:6d:c3:4c:ef:41:ed:a1:52:91:42:9a:
95:01:48:0d:89:a6:95:6b:73:69:8b:09:0a:6b:3d:3b:f5:52:
7c:f3:66:e1:d5:0a:56:8c:51:c8:c0:01:cb:ed:6a:e7:0a:20:
61:f2:6e:5a:89:d0:d1:b7:03:91:61:f8:50:dc:36:fd:c7:38:
d2:9b:c8:23:b5:30:bf:1d:1b:34:76:e2:cb:52:2b:5d:3e:08:
17:c6:e0:e4:44:4e:2f:4a:88:36:c2:36:3a:6f:8c:0a:0a:bc:
cf:1f:52:4d:97:2d:64:6c:f6:0c:ff:54:cd:64:f4:01:62:49:
16:49:1f:c6:a8:0a:07:60:f2:67:9c:b9:9a:88:76:85:b8:18:
11:a9:f0:93:42:bb:de:a7:dd:9d:e9:9d:59:0a:75:f5:6b:5b:
1a:27:db:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:39:22 2025 by rpki-client