Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
File: 4bpLKGfa04tzpGkYJB78cqISYvc.mft (raw, json)
Hash identifier: XJe1aGvDKVHLhhYBkvGQlBEmdw+86tmykGcu6OkbqIc=
Subject key identifier: 09:7E:29:1A:FB:12:36:51:0B:DB:4E:51:FE:45:14:BD:21:47:1E:67
Authority key identifier: E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
Certificate issuer: /CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Certificate serial: 019A54C04B28D1AD56F9CE649588332C6813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
Manifest number: 1710
Signing time: Wed 05 Nov 2025 16:01:19 +0000
Manifest this update: Wed 05 Nov 2025 16:01:19 +0000
Manifest next update: Thu 06 Nov 2025 16:01:19 +0000
Files and hashes: 1: 4bpLKGfa04tzpGkYJB78cqISYvc.crl (hash: Z1V0FstlDMjh/QT7hO736rY19ujKIvrbDk2etg/YVDM=)
2: MccPojCQ_5aiRX4Myokyw6v--7c.roa (hash: 6zT3oaRUJKtce125U7+EL/be9RKqr09GLQyUToqdrbc=)
3: UJACc2s1J5BaMpYznoUagPO6cuI.roa (hash: 5ImyJpj69YHNVaFZ4EKvt0GWM6aecM/AkpksMF5YZpU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:c0:4b:28:d1:ad:56:f9:ce:64:95:88:33:2c:68:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ba4b2867dad38b73a46918241efc72a21262f7
Validity
Not Before: Nov 5 16:01:19 2025 GMT
Not After : Nov 6 16:01:19 2025 GMT
Subject: CN=097e291afb1236510bdb4e51fe4514bd21471e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:d3:10:ab:94:87:de:42:f9:8a:89:d0:a6:
6b:93:c5:e9:c3:93:58:ed:57:39:8d:b3:50:39:a5:
28:1b:32:01:61:02:2d:cd:50:d7:bb:58:c9:46:74:
73:15:a0:59:4c:9a:47:83:e8:74:7b:aa:fc:24:4d:
11:f3:82:57:a6:a1:f2:e9:01:21:45:f7:e6:89:03:
10:4a:ac:91:3c:a4:1e:91:1e:74:6b:9d:36:4b:11:
be:9d:74:b9:e5:35:b9:3d:d9:37:46:99:19:30:38:
34:9a:b9:31:26:f6:7d:19:73:78:1c:ee:81:62:4f:
1e:68:0d:b7:b0:fa:cc:a9:98:0a:8e:a9:a5:f2:69:
96:89:ae:c2:13:f8:b5:dd:80:e9:91:50:fe:02:c9:
1a:6c:da:4f:a3:ea:2c:a8:8e:56:e1:d7:e6:41:9d:
64:98:1e:32:9e:e7:b1:86:e8:f7:b7:03:f8:26:03:
ba:3d:2d:ff:d2:64:c3:43:73:d0:b3:36:62:69:0c:
5b:91:80:cf:32:ed:a9:b7:f1:95:d5:b9:00:3a:5b:
b4:9f:95:ab:2a:d9:79:f5:64:39:55:c5:7a:71:df:
f6:b2:9e:1f:52:1b:4c:c1:aa:06:3d:59:62:67:12:
56:5e:03:d1:46:36:81:fd:98:6c:6f:25:ce:fb:46:
a4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7E:29:1A:FB:12:36:51:0B:DB:4E:51:FE:45:14:BD:21:47:1E:67
X509v3 Authority Key Identifier:
keyid:E1:BA:4B:28:67:DA:D3:8B:73:A4:69:18:24:1E:FC:72:A2:12:62:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bpLKGfa04tzpGkYJB78cqISYvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/689109-1723-4bf1-b63a-dc64ae72578e/1/4bpLKGfa04tzpGkYJB78cqISYvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ee:c8:6c:60:dd:91:0f:32:73:14:b1:69:40:b8:40:87:0a:
2f:bf:8f:a9:f4:fc:5c:29:ca:a8:6d:33:e6:52:60:31:30:a8:
22:83:85:96:34:f9:c6:54:b0:55:e2:e6:01:bb:26:67:ae:14:
d8:66:de:82:e5:e3:c7:21:bd:30:6e:d0:26:d1:b4:8e:d0:11:
eb:3c:5e:1c:31:10:a4:c9:a5:1c:97:f3:7f:fd:8f:93:4c:72:
72:c6:5b:ba:4b:d0:38:ba:0d:bc:56:b1:de:6b:6b:2a:7c:3f:
53:fe:35:83:74:76:80:32:e1:f9:99:62:83:ee:53:21:c4:83:
7a:ec:99:40:95:6f:15:35:1e:ed:bf:7f:69:c5:55:c3:21:fe:
f3:74:1d:2e:cd:24:21:8b:fb:d1:d1:18:43:dd:2b:b0:62:ad:
a0:99:e9:38:5e:0f:01:94:ac:68:35:5d:6f:45:e1:03:9b:ac:
7f:8e:73:9c:7a:21:61:d3:bf:27:25:b9:8a:7c:c5:e0:22:da:
23:c3:7e:4e:cd:ce:09:f5:74:72:10:12:8f:e0:bb:38:36:58:
ab:3f:13:cf:ab:03:32:26:86:d7:9e:d6:bd:43:8d:36:50:1c:
fd:45:ae:c7:b5:6b:51:79:78:92:c7:dd:a3:27:1a:59:a6:7d:
39:fa:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 21:10:38 2025 by rpki-client