Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
File: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft (raw, json)
Hash identifier: 1Zk4GdsLv29KOPo9Hqx986MjNLR/Egl61zvq1ncxQDI=
Subject key identifier: 1F:9B:8A:08:31:2B:5C:D9:F9:67:E7:48:F0:94:EB:1D:A5:A1:D5:01
Authority key identifier: E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
Certificate issuer: /CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Certificate serial: 019A4DE1D8F3769C343A6330C10A91F2C054
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
Manifest number: 1330
Signing time: Tue 04 Nov 2025 08:00:37 +0000
Manifest this update: Tue 04 Nov 2025 08:00:37 +0000
Manifest next update: Wed 05 Nov 2025 08:00:37 +0000
Files and hashes: 1: 4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl (hash: RCXdjDhBF/kcGDERlYzbfjTuIg3v2yEUrTNt6yBMqQs=)
2: sG880b_RPrGdA8qdnVRGDqdPZs8.roa (hash: FkxQnvLlTo8fZxDMmVUsA4H8Po5+5uIaGq9jK/9F1N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:d8:f3:76:9c:34:3a:63:30:c1:0a:91:f2:c0:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1087e2f0df296fe11e76ee4c1017bcf1205b2f0
Validity
Not Before: Nov 4 08:00:37 2025 GMT
Not After : Nov 5 08:00:37 2025 GMT
Subject: CN=1f9b8a08312b5cd9f967e748f094eb1da5a1d501
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:20:c5:87:1d:cd:13:13:dc:e8:df:75:bf:d8:
8e:ce:3a:1e:6f:8a:05:2e:38:8e:63:a3:36:e8:52:
d3:3f:67:f2:b3:bf:0f:75:cd:79:68:d5:cb:a9:a4:
2a:1f:ee:e3:b6:ac:78:47:21:9d:37:76:d2:59:1c:
eb:d5:eb:25:e9:fc:34:6c:9d:fc:89:ff:a9:eb:a9:
2d:79:82:17:52:35:71:23:1c:04:c1:3f:53:9f:27:
79:1b:25:c3:58:cc:da:2a:da:df:2e:8d:90:8a:00:
60:ec:79:11:5e:69:f4:18:b7:9e:f7:c3:c7:be:38:
72:c5:56:b3:eb:dc:b4:86:72:18:36:dd:a9:06:0f:
2e:49:8c:e5:42:99:36:a8:b0:4d:9a:21:0f:bc:76:
af:c8:51:05:4a:40:8d:da:0b:84:3f:3f:32:4b:d0:
e4:dd:8b:e6:a0:43:2c:66:4a:9a:cd:97:34:72:30:
1a:c3:64:e3:13:bb:43:38:c4:08:43:ba:63:50:64:
51:a5:c6:99:10:e6:f6:42:d9:65:ba:a6:76:86:08:
0c:73:0e:5b:02:1b:1d:6b:d4:c4:c0:e1:76:f4:83:
ae:f4:d1:47:8e:92:e6:91:5a:5e:80:2a:94:24:cf:
bd:f9:44:8b:14:5a:b3:1a:71:aa:fe:dd:11:2c:ae:
da:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:9B:8A:08:31:2B:5C:D9:F9:67:E7:48:F0:94:EB:1D:A5:A1:D5:01
X509v3 Authority Key Identifier:
keyid:E1:08:7E:2F:0D:F2:96:FE:11:E7:6E:E4:C1:01:7B:CF:12:05:B2:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Qh-Lw3ylv4R527kwQF7zxIFsvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8fc397-ab83-4fec-b6c4-a50a880aa7fc/1/4Qh-Lw3ylv4R527kwQF7zxIFsvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:bd:08:c1:55:a4:8c:64:90:d6:df:85:1b:f0:54:d0:43:0e:
69:23:f2:41:9d:05:1d:f3:bc:37:f3:62:7d:5d:f3:13:68:1c:
78:af:16:42:e6:e8:1d:fe:db:1a:b0:cf:12:da:1b:d0:84:a2:
af:22:50:8b:46:3b:26:27:8e:32:b2:f8:d2:08:c5:cd:a1:52:
79:5a:5d:45:51:cf:8a:c4:7d:d2:eb:7e:d4:a9:a4:0d:7b:39:
95:a8:58:9b:e4:d6:f6:26:d2:f7:e8:0f:7b:fb:a9:36:1f:bb:
1c:01:f7:ce:8e:a9:a3:27:a3:11:5b:9d:44:d8:0b:c7:1d:bc:
a3:4d:6d:38:83:7d:30:a4:6f:1b:12:28:f9:9f:1a:59:3e:8e:
9b:59:b9:de:2c:29:9a:6c:04:03:f0:6f:f5:92:e7:4b:00:37:
bd:39:50:93:86:80:68:b8:85:8c:00:62:bb:b2:a8:1d:cc:78:
3e:af:83:78:21:94:4f:9a:e6:94:1c:99:04:47:6f:b1:0b:25:
78:65:0f:08:94:74:d5:25:0e:99:67:72:e6:c8:88:6a:9d:00:
46:5c:e0:38:98:0b:84:ca:fd:1a:6a:6b:3f:c8:4b:4b:96:3b:
a2:af:f3:70:12:7c:8e:7e:96:2f:62:34:46:a4:0c:a7:47:76:
84:a9:21:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:15 2025 by rpki-client