Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: C0jsqi1lJkxXytpQ+fJmRh/XFTRqjQL9MlH8OcX2u0Q=
Subject key identifier: C3:49:BF:0C:DC:5D:53:91:9B:0F:E5:6B:00:6F:34:E9:14:A2:A5:8D
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 019A4D7427687ACA306B8BD4D325D19565FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 0AB1
Signing time: Tue 04 Nov 2025 06:00:49 +0000
Manifest this update: Tue 04 Nov 2025 06:00:49 +0000
Manifest next update: Wed 05 Nov 2025 06:00:49 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: IoapCBfbmhV1z6Or+JAaWIAlB2MGPFE6HruaF6tzn0E=)
2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:27:68:7a:ca:30:6b:8b:d4:d3:25:d1:95:65:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Nov 4 06:00:49 2025 GMT
Not After : Nov 5 06:00:49 2025 GMT
Subject: CN=c349bf0cdc5d53919b0fe56b006f34e914a2a58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:82:0b:df:1d:ff:3b:65:3e:97:7d:eb:a1:af:
98:02:f9:66:b5:c8:ff:99:a4:35:13:30:f0:68:83:
a5:d3:79:6a:aa:4f:52:4d:e6:9c:18:31:53:91:48:
ed:df:6c:fe:29:5f:68:a5:a6:14:52:07:11:16:58:
34:6c:a4:e6:ba:ba:e1:fc:90:80:d6:64:18:15:53:
fa:38:95:2a:b1:65:bb:ce:a1:42:52:c6:26:03:d4:
f7:bd:85:24:50:2c:aa:45:aa:19:6e:aa:de:75:38:
43:2d:bb:95:cd:e3:6d:bf:68:c3:be:89:62:5f:ef:
50:c0:0d:c5:09:04:bb:4d:cc:2c:d0:41:84:74:97:
c2:69:d6:9e:f3:94:d6:78:92:4a:25:c1:f8:e4:c0:
ce:af:e6:72:df:38:e0:1f:07:7b:34:4f:f1:33:f7:
dd:a7:79:96:59:e5:94:7f:58:7d:3e:6c:ce:88:b4:
70:18:88:af:6d:da:ed:cd:e9:77:70:67:8e:bd:d5:
11:8d:1b:b5:6e:c4:9d:bf:c5:39:53:3c:c2:ae:19:
9d:4e:45:0b:25:73:96:b0:b6:8e:09:d2:cc:e3:8e:
0b:d2:d8:cc:b0:9f:44:0b:71:6e:3d:21:6d:01:c7:
dd:2d:4c:8e:9a:1b:42:66:dd:b4:85:39:fa:e0:b4:
53:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:BF:0C:DC:5D:53:91:9B:0F:E5:6B:00:6F:34:E9:14:A2:A5:8D
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0a:49:cf:c3:16:7d:0a:0a:eb:7c:ef:1f:62:c3:2c:41:f8:
29:f0:f9:51:e9:de:ee:33:bd:0c:69:20:79:e8:3f:12:b7:8b:
ea:10:ad:7a:ff:26:d1:67:51:ed:e6:e8:0b:50:8e:fa:da:2a:
0d:5c:54:4e:2d:c1:d3:9c:df:17:2d:03:b8:41:ee:3b:02:18:
72:e5:fd:16:49:1c:2b:a9:96:8c:6d:a4:3f:82:ba:56:b0:50:
25:21:46:16:8d:05:24:5c:2e:dc:f3:65:50:2e:a3:e6:78:b0:
56:a2:da:f6:d8:7f:92:0b:77:c5:d1:5a:c1:3c:5d:6a:1f:df:
47:e9:82:c3:12:0c:9d:ad:64:05:fe:45:90:f2:2a:4c:bc:f8:
57:5b:87:5d:59:0d:9e:0b:90:d2:c6:26:d4:c2:8d:37:92:a8:
1d:67:7f:ad:04:11:19:cb:9a:31:ad:fa:78:25:d3:16:fd:6c:
51:bb:d9:8a:d2:2d:e7:3a:2d:b6:49:5f:5d:bb:8d:1c:33:46:
5e:13:8b:e1:bb:45:5b:71:79:7e:0f:ba:01:19:35:f2:7a:ab:
2e:9f:69:42:c5:4f:aa:f9:f8:3b:66:8c:29:4f:fb:31:e8:db:
d2:e8:1e:86:e3:21:e2:a9:15:3c:bc:b7:23:55:cb:9d:c0:7f:
c5:9c:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:44 2025 by rpki-client