Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: z2Ap5aaihEDx1lBwGPTeErpe/w8YtF3r5CZGl6lq1v8=
Subject key identifier: 1B:37:28:F6:9B:48:DF:40:36:EC:6D:D6:82:8C:96:17:44:9F:F2:62
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 019A4D3D2AB55EFDD408976754961BDAF6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 06A2
Signing time: Tue 04 Nov 2025 05:00:45 +0000
Manifest this update: Tue 04 Nov 2025 05:00:45 +0000
Manifest next update: Wed 05 Nov 2025 05:00:45 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: xQ42Rb6faFOjjQGfAXunvdaljXMkCRev6hZ/n0rqE0A=)
2: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=)
3: tC4kEyILNSgq-4HRu62K07yIvGs.roa (hash: gjkW2opUlQbptSUKgUELQ123yLms5Q+buV+jgPY3PiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:2a:b5:5e:fd:d4:08:97:67:54:96:1b:da:f6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Nov 4 05:00:45 2025 GMT
Not After : Nov 5 05:00:45 2025 GMT
Subject: CN=1b3728f69b48df4036ec6dd6828c9617449ff262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ab:94:34:38:a3:18:1d:b5:c2:79:f3:f6:9e:
fc:27:0b:c1:45:98:e2:05:59:1e:3e:e7:8b:80:d7:
e1:91:b0:19:9b:18:f5:5f:49:47:f6:c1:0c:a3:fb:
36:75:17:41:a2:7e:08:00:34:8e:31:d1:d1:cd:fa:
09:28:51:e4:96:d7:99:9b:22:05:38:9b:ff:a6:0a:
a1:94:4b:e5:28:a1:9f:00:6d:b2:5a:0c:83:74:34:
2a:aa:b7:4f:64:0e:c4:00:8d:1e:72:49:a5:b3:db:
dd:1d:88:88:c8:7c:14:07:a4:af:6b:af:f3:e4:bb:
5e:f3:70:eb:30:46:6f:5e:0f:87:4c:d6:5c:cd:b4:
7e:9e:7a:38:d9:49:3f:00:60:ef:72:f4:32:aa:f2:
55:4a:a9:33:ce:e0:fd:6a:24:ad:4c:a3:28:84:d8:
3f:d7:4a:0b:3e:f5:1d:12:49:16:ce:66:29:f3:e8:
b4:13:1a:a8:18:a5:a8:5d:c4:e1:21:e5:cb:cb:4d:
6b:d5:fc:70:fb:21:c0:b3:2d:0d:30:29:e9:6e:87:
da:44:7b:f5:ac:8e:e6:75:0c:92:90:06:5b:29:70:
31:6a:8c:07:81:56:ab:9e:dd:de:e2:ae:a9:b8:fa:
52:27:f5:6e:9c:3c:b3:da:8d:c2:7d:42:91:5c:62:
bf:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:37:28:F6:9B:48:DF:40:36:EC:6D:D6:82:8C:96:17:44:9F:F2:62
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:06:50:af:a1:02:95:9a:45:f8:f4:ad:68:b8:c7:0d:30:4a:
2f:80:66:35:4e:cd:e4:ba:24:ab:d7:73:10:8d:e1:fb:26:83:
96:57:f8:cf:ee:90:46:25:47:64:a0:16:83:20:ec:58:15:1a:
6f:59:fa:35:ee:b2:ef:b3:50:01:1b:e6:51:49:38:f6:c8:65:
ab:b8:4b:6e:32:4e:79:38:04:d4:96:c4:6e:ed:d2:27:13:4b:
75:3f:a6:19:1e:2c:a8:85:ec:78:37:4a:54:47:6e:35:a7:e3:
ee:e1:af:43:19:77:7e:73:df:4b:a9:3a:37:a9:e2:44:08:d8:
4a:8c:48:9b:6d:00:4b:cf:b6:de:2d:c2:af:3a:00:ed:f8:c2:
ee:25:ed:8b:05:30:b9:4a:63:c1:42:c8:b1:46:69:a1:b1:f0:
19:60:59:ba:18:9a:00:cc:11:bc:df:fb:db:e7:48:ee:30:f2:
83:e4:f4:fd:16:e0:df:db:fb:23:fc:6e:3d:d4:fe:9b:73:ad:
a1:5e:7c:ff:63:0b:b7:03:ca:1a:c8:44:b8:2b:56:40:50:b8:
3e:c8:3d:e4:d2:43:c3:84:dd:48:38:d6:fe:47:b1:95:98:41:
09:f5:64:03:83:6d:81:57:2d:96:55:bc:49:47:a2:92:eb:a7:
ec:ce:cd:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:24:33 2025 by rpki-client