Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier: rq3j0Rs/vGVRxc8EWs0LUw2Cn3Cw/axlJn6FCLyEQC0=
Subject key identifier: 0C:E8:2A:A8:10:73:99:31:F0:7D:31:47:80:ED:BD:3F:CE:C0:BF:9F
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 019A53E40648088F3867CC1C0A7BF535845C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number: 1037
Signing time: Wed 05 Nov 2025 12:00:44 +0000
Manifest this update: Wed 05 Nov 2025 12:00:44 +0000
Manifest next update: Thu 06 Nov 2025 12:00:44 +0000
Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: /tRGW9qko6pV/+TCXd1ye13F8p0OrhfE//USG+Mc2Xc=)
2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:e4:06:48:08:8f:38:67:cc:1c:0a:7b:f5:35:84:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Nov 5 12:00:44 2025 GMT
Not After : Nov 6 12:00:44 2025 GMT
Subject: CN=0ce82aa810739931f07d314780edbd3fcec0bf9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d0:4f:cc:c5:cb:1b:fa:f9:b8:91:07:66:e0:
b9:a9:d4:9e:2d:52:38:ce:ff:ea:5e:30:ef:89:f8:
53:dd:40:b0:cc:5d:dd:f5:10:e6:03:f9:8d:a8:c8:
62:c3:e4:fd:0d:d0:e1:03:9d:d6:80:3e:0a:54:e1:
e1:d8:c0:ea:12:5c:80:c4:da:78:58:9b:61:80:33:
65:af:fe:fc:83:2c:b1:91:68:dc:13:bd:a0:a6:0f:
73:6b:9c:b6:b3:a6:31:0e:31:ed:be:eb:8c:0c:13:
42:b5:34:85:57:91:2f:79:10:16:72:04:80:5b:b0:
cd:d8:06:16:16:2a:03:6e:96:90:ad:c5:6d:56:fc:
5a:37:1d:96:e7:30:2e:02:7d:a5:8c:99:37:48:8e:
87:9d:bd:9e:08:a6:53:8a:64:cb:f1:26:f1:e1:58:
ca:41:6e:9e:72:88:27:e2:08:4f:eb:40:94:3b:c9:
30:bb:10:69:81:a2:02:e4:60:0f:99:ae:11:81:45:
33:35:a7:78:35:98:d4:0c:52:7f:c0:dc:a5:72:5a:
f8:99:39:4f:f1:9f:fa:37:ef:8c:bc:fb:e8:b4:37:
ca:db:10:b4:9f:2f:59:d5:26:b7:a7:cb:43:9d:3a:
bb:77:16:dd:b3:3f:e7:b5:8a:d4:c0:76:a2:38:7e:
09:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E8:2A:A8:10:73:99:31:F0:7D:31:47:80:ED:BD:3F:CE:C0:BF:9F
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:56:55:9c:15:86:e4:85:3e:19:b5:dc:62:4e:38:dd:06:29:
f3:08:48:7a:af:d1:67:37:b2:70:fd:1e:34:d4:ec:9b:e9:5d:
4f:5f:b2:98:21:52:67:f2:9b:7a:80:7a:b2:2f:a1:e0:f4:de:
d6:63:a8:ef:a2:26:05:ab:73:e2:c5:12:7f:6b:b5:18:c9:fb:
50:c3:cb:45:c5:4b:1c:0d:89:19:c9:af:7b:ad:fd:6f:2d:04:
07:0b:ce:17:eb:08:0b:84:64:6f:38:46:a8:52:ed:79:e3:75:
5f:39:29:51:2d:d0:38:f5:53:93:0c:fd:ae:02:59:94:dc:6e:
7d:6e:18:87:48:31:99:3f:fb:5c:76:f1:c2:ae:5d:f7:53:0b:
38:e6:df:23:b4:9a:69:e3:f7:d9:21:38:76:4a:62:f7:88:53:
74:3a:e3:12:36:33:35:eb:4e:41:25:49:98:dd:c6:db:52:e6:
7e:68:76:de:04:2e:64:85:d1:f8:37:db:ee:3e:18:7c:df:f0:
4f:88:f1:00:00:8b:e6:94:1d:cf:41:72:e5:c1:06:6f:52:5c:
b0:af:a9:24:57:ab:7f:bd:05:b4:16:cd:5a:f1:a6:a7:e1:d9:
9f:22:10:ee:38:bb:23:58:c1:94:8b:88:f7:7e:4d:34:27:c9:
8e:e6:ce:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:02 2025 by rpki-client