Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.mft (raw, json)
Hash identifier: mB6PkqbibWNTFduaUb0Wc2vwooMYz3UPRO1JhcRLR8M=
Subject key identifier: 05:AA:EB:74:A4:8E:99:28:04:29:5B:B2:BA:75:88:AC:36:86:AA:4B
Authority key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Certificate issuer: /CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Certificate serial: 019A4DE209FB97AC4B2F057D9C549CCD5C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
Manifest number: 141E
Signing time: Tue 04 Nov 2025 08:00:50 +0000
Manifest this update: Tue 04 Nov 2025 08:00:50 +0000
Manifest next update: Wed 05 Nov 2025 08:00:50 +0000
Files and hashes: 1: 04m0GNo0qjk07N4rcx3x1O1-yA4.crl (hash: srm/L7j54Fx45D7unvNScKhnYjM9qmnT+BgvsXlfbsI=)
2: cWwT1szK5NdnVm06LjbXvG6eYg4.roa (hash: W4zwG2oQXcpZIEG+6MYSyZ5G6TI/ulbfB+7HQbWQK/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e2:09:fb:97:ac:4b:2f:05:7d:9c:54:9c:cd:5c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Validity
Not Before: Nov 4 08:00:50 2025 GMT
Not After : Nov 5 08:00:50 2025 GMT
Subject: CN=05aaeb74a48e992804295bb2ba7588ac3686aa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2d:6a:57:1f:04:33:26:d6:2f:50:82:17:2d:
53:7c:ea:a9:55:22:34:e3:a0:b9:11:1b:9d:5a:3c:
2a:d2:56:09:ab:f0:e3:eb:0f:ab:f0:c8:85:b9:b8:
fb:c4:01:1e:77:35:53:7c:c7:f4:db:bf:15:40:ad:
14:92:86:aa:81:f9:f5:75:75:99:36:f2:a5:cb:7c:
5c:8e:a0:cd:40:f3:66:d1:1e:d8:8f:be:74:2b:bc:
2f:55:29:12:7b:89:5c:a2:26:65:bb:4d:12:9e:3e:
f9:11:1e:5a:08:ca:e9:34:f3:c6:e5:20:1b:38:55:
57:78:55:fd:95:a0:ff:cf:d7:c5:2f:65:41:43:7c:
f7:7c:28:c3:f2:56:9d:c4:95:6c:a2:f7:b8:d0:4a:
12:71:b4:38:85:d6:52:79:f0:10:c3:d5:bc:cb:bc:
64:d2:f5:c1:7d:d7:f7:52:51:69:e2:cb:0d:1a:98:
ff:8a:40:f8:5a:f6:53:d4:75:7f:91:99:ba:4f:cf:
06:fa:ba:cf:94:26:44:2b:bb:d2:57:e8:b9:b2:33:
96:b0:61:f3:d7:28:5f:11:d2:a1:08:26:85:ed:83:
1a:9d:a9:8d:b6:67:d2:ae:89:17:16:c1:3e:03:85:
6d:6f:b4:3c:4d:59:4c:e8:e7:35:57:b2:bd:0f:6d:
d5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AA:EB:74:A4:8E:99:28:04:29:5B:B2:BA:75:88:AC:36:86:AA:4B
X509v3 Authority Key Identifier:
keyid:D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:cb:6b:9c:95:83:7a:b4:83:a0:74:7c:17:0f:53:4b:51:88:
ca:9f:79:e6:17:07:f2:dd:e4:dc:a2:bd:ce:7d:ca:eb:9d:d0:
0a:82:9d:b7:18:62:53:6a:2e:95:58:f3:a6:69:1a:74:26:8d:
3e:2a:a3:bd:09:63:18:b1:82:42:d9:37:fd:23:6d:05:42:f2:
11:1c:6d:4e:5e:25:0a:5d:ab:c9:b2:c6:ba:04:34:71:80:06:
5d:cd:61:bf:bb:6a:5c:58:53:8a:55:1c:81:e7:2b:11:1e:5f:
1b:e4:dc:7a:18:f3:7c:e4:f3:3a:78:77:b7:3c:98:d1:14:6f:
22:e1:f6:a7:ea:57:76:12:14:93:6f:af:4b:1f:6b:d0:2c:51:
d7:73:16:db:50:29:28:af:93:41:b8:19:6b:d0:8f:7f:62:c1:
84:63:b0:be:93:3a:f2:d5:d9:0f:58:04:ac:7f:42:b1:9e:39:
ae:c0:3d:db:9a:c4:83:1b:66:08:35:35:db:38:ce:cd:70:e5:
f6:52:ab:f5:61:3c:89:d0:06:07:4e:22:92:6f:88:64:24:b2:
dc:36:d2:a1:06:b4:94:e5:61:0b:7d:90:66:b8:00:48:89:d9:
bd:3c:f4:f2:47:d0:97:8d:6d:0c:36:ce:99:1b:66:71:77:95:
5d:6d:4d:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:52 2025 by rpki-client