Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: HAckr9B50dLCihfMlp9YPHz17SQekQ555FOMlHeDg6k=
Subject key identifier: FE:64:78:3C:AE:C9:5A:13:34:4E:86:C8:87:3F:34:73:65:00:8B:90
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 019A4EF46873D7482F2C56A7D3E35634651F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 13:00:31 +0000
Manifest this update: Tue 04 Nov 2025 13:00:31 +0000
Manifest next update: Wed 05 Nov 2025 13:00:31 +0000
Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: AAZzSkg7zcDT4pRBeofp9GmqvQ8NgSAP35OjUwf+hmA=)
2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:68:73:d7:48:2f:2c:56:a7:d3:e3:56:34:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Nov 4 13:00:31 2025 GMT
Not After : Nov 5 13:00:31 2025 GMT
Subject: CN=fe64783caec95a13344e86c8873f347365008b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:cd:17:99:80:6d:84:75:d2:f2:60:25:65:
5c:94:f0:98:82:b2:a1:04:1c:9a:f8:85:a2:d2:50:
14:a9:8c:56:af:cf:6c:8e:b5:5f:6f:67:e7:ff:6e:
3b:8c:3d:12:bf:e3:20:6b:ec:ea:6a:9d:d5:6c:12:
5a:47:e6:51:5b:b3:04:75:7d:1a:94:50:e2:c0:44:
af:af:14:4f:99:b2:9c:1f:94:a2:91:17:43:bc:8c:
1b:4a:5d:14:9f:4f:75:82:22:89:c9:6a:f5:a5:6d:
e0:d2:35:3c:8b:08:09:6d:49:11:52:d8:ad:f8:40:
83:ce:50:e6:60:47:fd:c8:87:b7:be:df:b1:5f:93:
08:e0:7d:90:95:c4:c5:90:77:5a:8c:95:78:9a:1c:
0a:dc:47:f8:f3:9b:f6:b7:9f:23:77:78:3b:ac:b7:
87:29:21:7f:27:e0:3d:56:37:17:f1:ee:c1:90:d5:
23:6e:b3:30:05:fe:0a:bc:10:d8:f2:ac:f0:bb:f2:
1d:a7:38:df:a1:a3:02:44:d7:52:da:38:15:60:62:
33:f6:fb:90:d7:43:11:94:66:8e:fc:be:a4:fc:87:
70:12:bc:f0:c2:e1:d9:41:8c:4d:4d:2a:38:23:6e:
ef:f1:a3:52:25:3f:fd:60:07:70:a6:c1:e4:c4:d1:
3f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:64:78:3C:AE:C9:5A:13:34:4E:86:C8:87:3F:34:73:65:00:8B:90
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:cc:d4:f9:4a:3e:6f:29:5f:63:cb:c8:2d:2c:2d:48:26:cf:
d0:a8:fe:42:ee:90:f7:c5:4b:a8:75:14:44:55:6a:68:d5:f3:
55:f6:a4:5f:80:d6:f8:d7:eb:c4:be:92:d9:6e:f8:bf:32:3f:
a6:c6:98:56:8a:a4:da:63:4c:db:cb:f6:e1:bd:cb:eb:c7:52:
ce:e5:cb:d0:a5:79:c0:5b:db:c0:1d:98:5c:38:0b:4c:90:42:
13:f6:bf:49:94:7d:a3:73:ce:c8:ac:d9:25:0e:ea:1c:ab:2c:
19:02:85:45:6f:05:98:c1:48:46:ad:9c:e0:a2:62:cd:8a:d9:
b4:33:a7:78:19:f5:ff:d3:d1:fe:a7:f3:ac:27:75:d2:14:82:
b8:6e:6d:f2:20:6c:0b:2f:55:1c:60:da:78:26:8a:5b:9a:ac:
15:90:ae:6d:53:e7:4c:bd:75:9a:31:92:32:64:a2:ad:8c:7b:
d3:ba:76:7b:85:9e:23:a2:42:cb:60:50:a5:c9:27:5f:56:e0:
2f:98:97:bf:49:0f:1e:d5:a7:e8:1f:a5:df:82:38:af:12:d7:
ee:90:0d:39:33:9d:98:cb:4d:5d:27:85:c8:06:f7:41:8e:ba:
a8:03:e8:bd:5a:3d:8c:c8:ab:c0:69:05:ef:0d:19:1c:ed:df:
ae:82:e9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:50 2025 by rpki-client