Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
File: 4PL1Rd2yNOOD02uKjWtWo43XL4k.mft (raw, json)
Hash identifier: 4GOLH7nKSl0eL1jzwgkY1tC6WA1aoWw52oP7K8ihA38=
Subject key identifier: B2:87:64:87:D1:04:B7:01:92:BC:DB:2B:72:80:A1:84:E3:AE:EC:DE
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial: 019A4EF563C1B2B5F6D2D1AE3129FA942E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
Manifest number: 091F
Signing time: Tue 04 Nov 2025 13:01:35 +0000
Manifest this update: Tue 04 Nov 2025 13:01:35 +0000
Manifest next update: Wed 05 Nov 2025 13:01:35 +0000
Files and hashes: 1: 4PL1Rd2yNOOD02uKjWtWo43XL4k.crl (hash: f7joKDCUqa2CTM9YTkut0kvZA57DtTOJcQbGxlWk/Sc=)
2: XiEwAhXSmb2kKQcnLFCKbFJrlrE.roa (hash: Yd4FhLWqP85JzI7J+m2iFxGbkWfW5fOZQ9iT2O1gqws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:63:c1:b2:b5:f6:d2:d1:ae:31:29:fa:94:2e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Validity
Not Before: Nov 4 13:01:35 2025 GMT
Not After : Nov 5 13:01:35 2025 GMT
Subject: CN=b2876487d104b70192bcdb2b7280a184e3aeecde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d4:fc:c1:22:4f:2e:d4:90:ed:f7:0f:60:93:
6d:6d:0e:65:10:00:d2:0e:ab:11:92:ce:b4:78:59:
a3:9b:ce:7d:8c:ba:8e:62:e8:58:e7:08:6b:74:1f:
65:e0:fb:f5:fa:8e:8e:b6:6a:44:65:98:f1:5b:b2:
69:e3:ee:f1:14:f8:12:7e:c0:cd:cd:56:f5:fd:67:
a4:39:52:82:25:f0:e6:25:8a:0b:34:37:19:f7:ad:
7a:84:bd:83:c3:ee:a0:6f:08:3b:27:02:57:e1:91:
36:2e:00:b5:49:27:b6:ad:49:80:6d:e9:02:eb:a1:
28:47:91:78:fa:68:15:ba:26:41:f0:1c:bf:db:35:
3a:9c:06:8c:59:83:cc:33:e1:2c:db:76:7a:1d:c4:
db:4e:c5:d4:53:1f:91:62:25:d5:6a:86:da:2b:51:
81:c6:53:9f:fc:bc:0b:8f:a1:38:24:f7:cd:3c:38:
07:14:39:ba:40:62:7a:79:17:12:ba:83:7c:7e:de:
20:98:d2:7d:7d:0c:e8:c3:1b:7e:59:64:75:a5:0b:
c2:83:6b:4a:03:be:41:a6:df:d3:9f:a0:a9:71:10:
0d:de:a5:21:4f:ba:27:bf:d5:fb:36:5c:17:da:12:
92:72:fa:46:2c:1a:2d:fc:6a:6f:4f:06:bf:94:d3:
e8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:87:64:87:D1:04:B7:01:92:BC:DB:2B:72:80:A1:84:E3:AE:EC:DE
X509v3 Authority Key Identifier:
keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:9c:39:bf:46:93:58:b7:69:43:b6:5e:1a:a1:0d:c7:88:6f:
c3:3e:04:20:57:ce:24:7c:2e:ec:54:42:c6:d1:59:d3:7e:f3:
cb:7b:bc:99:6f:ae:f8:05:9d:8b:cc:09:23:5c:22:15:d9:8b:
3c:dc:4e:57:d4:15:b4:ec:44:a2:21:c3:81:bc:69:90:eb:0e:
9f:92:b4:76:73:26:15:b2:cd:5b:b5:2e:b4:aa:93:a2:9a:f6:
ac:67:ed:7a:c3:8b:d8:95:4c:30:9a:64:6a:39:63:7d:b9:94:
51:e0:8c:5d:aa:90:18:1f:cf:e4:4f:e5:c3:e3:11:97:89:4d:
2f:b8:b1:84:14:83:da:fc:73:f2:c5:ca:0f:39:f6:c6:b0:9a:
70:19:8c:97:72:b6:3f:3c:79:2d:ad:cf:f9:5c:4c:e5:4c:ae:
17:c6:70:98:9c:60:dc:f8:e7:55:93:92:a0:05:9a:2d:13:fa:
87:20:21:90:ad:33:36:30:17:b3:fc:bd:38:13:20:45:ef:9f:
ec:56:9c:b2:1d:90:fc:7b:09:53:96:c9:a5:8b:c8:90:da:8f:
97:0c:b7:e9:1a:e3:31:6f:e9:68:01:bc:ff:f5:25:d2:15:3f:
71:5b:35:4a:df:dc:c1:87:ca:3d:26:73:b0:5e:7a:31:ee:d0:
1e:f4:fd:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:30 2025 by rpki-client