Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: IPl2X/5IGVXfn0Zpcv2JExRrJgfuoAZ1FgPo/hMpAg4=
Subject key identifier: 8D:5A:6A:94:4E:8E:45:57:8D:DC:56:41:28:3C:42:69:FC:96:38:AE
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 019A4DAAB52AC37D9F3B12D0F93AD13D87D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 1463
Signing time: Tue 04 Nov 2025 07:00:24 +0000
Manifest this update: Tue 04 Nov 2025 07:00:24 +0000
Manifest next update: Wed 05 Nov 2025 07:00:24 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: KhggLYEaB6WkPF1Xj8XNEg8MZVwClAuWgxB1j+X3mes=)
2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:aa:b5:2a:c3:7d:9f:3b:12:d0:f9:3a:d1:3d:87:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Nov 4 07:00:24 2025 GMT
Not After : Nov 5 07:00:24 2025 GMT
Subject: CN=8d5a6a944e8e45578ddc5641283c4269fc9638ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9b:c0:f7:1a:6c:58:05:e1:20:ae:43:20:bf:
bf:8b:ef:cc:f3:31:84:8e:8f:68:42:03:00:3d:e4:
b9:c2:3c:a1:10:1a:bb:51:0e:6a:c9:44:b1:98:9a:
9a:21:42:5b:60:63:2a:3b:47:fd:de:a1:62:2d:fb:
65:16:e2:c2:02:ce:87:af:e0:65:9c:05:12:cb:c8:
fc:b0:c4:09:b5:e1:2b:9f:b2:4a:40:d9:6a:49:38:
dd:8b:27:20:b8:d1:7c:78:76:de:4e:ee:ef:34:97:
17:7a:de:23:b7:52:ea:ba:0f:2f:4f:b4:d3:f6:58:
d1:b7:cf:8f:11:95:6b:ae:1d:a5:b4:c0:1d:31:94:
a2:4b:b9:0b:40:7a:43:a2:31:b6:c9:19:e3:8e:d1:
a5:73:ab:da:45:74:ef:5b:43:74:eb:b1:56:f5:f6:
a8:64:cb:a4:ef:92:03:d6:3c:0b:eb:82:31:06:77:
2b:09:ed:4c:7c:38:19:3d:39:51:04:25:fc:ce:45:
b1:14:4e:5b:8d:e8:b7:a5:c6:26:64:39:e6:c6:35:
a0:c3:27:b9:0a:34:7e:d5:b5:1b:7b:ea:57:ba:ec:
e3:d2:56:e9:2d:b4:63:02:5d:d9:b9:50:d2:43:79:
82:50:b9:20:e5:15:92:71:d8:43:7a:16:56:d1:15:
52:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5A:6A:94:4E:8E:45:57:8D:DC:56:41:28:3C:42:69:FC:96:38:AE
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:cb:91:4c:f3:a6:41:f7:ee:7a:04:e4:f5:79:dc:51:79:5f:
2b:0e:62:ce:ef:6b:a6:13:2d:bf:a3:a3:ce:d1:a5:3b:5f:95:
05:cc:76:51:6d:11:d6:68:f1:9d:03:45:7d:e3:2c:ea:22:3a:
bb:c9:d2:ba:7e:ce:c6:84:35:72:1a:c3:06:90:4c:4f:08:56:
0f:9a:2b:e7:d4:09:bc:74:36:d0:6d:e9:e2:14:9a:9d:d6:38:
48:a5:e3:00:c8:3c:69:4f:eb:7d:07:ae:32:40:1e:8e:a7:e4:
ac:ef:7f:cb:b8:07:b9:72:ee:9c:b9:bd:e5:3f:64:88:2b:9f:
bd:ac:a3:f0:b8:de:ae:c4:6e:e8:fe:9f:64:83:e4:a1:0f:cb:
a5:fc:3e:10:a9:8a:eb:f2:43:b8:44:0a:03:2d:c1:d8:c5:ba:
01:45:71:1b:38:4f:d4:ae:c1:c3:28:d1:3e:6d:ad:6b:5d:63:
df:88:8d:76:cf:c3:26:0f:18:e8:91:b4:85:8e:21:90:07:c0:
5a:6c:ec:92:c0:bf:fa:5c:e8:60:21:55:e4:4c:c2:9d:9e:f6:
d8:40:52:56:7e:75:60:d6:f0:89:02:e9:77:61:1f:c7:f9:26:
a9:91:d7:11:bc:fc:0e:6d:5e:3a:bb:53:e5:e5:49:8b:a5:99:
cc:5b:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:38 2025 by rpki-client