Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: A3PtBDCmSXbCzPXITfwz+MkNMYuOUT1LKgI0xuek6t0=
Subject key identifier: 31:AB:2F:DA:F8:CD:69:99:A0:EC:87:BF:83:CF:B9:4C:79:4F:9B:79
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 019A4FD08F6F8B06CEC1A2A7C06831D26A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 170F
Signing time: Tue 04 Nov 2025 17:00:59 +0000
Manifest this update: Tue 04 Nov 2025 17:00:59 +0000
Manifest next update: Wed 05 Nov 2025 17:00:59 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: 3wQ5ty2cAB5+clkKUrDcjV1v55xWHUykY+6xrmAlaks=)
2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:8f:6f:8b:06:ce:c1:a2:a7:c0:68:31:d2:6a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Nov 4 17:00:59 2025 GMT
Not After : Nov 5 17:00:59 2025 GMT
Subject: CN=31ab2fdaf8cd6999a0ec87bf83cfb94c794f9b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6a:58:e6:26:1a:ab:e6:a4:73:2e:75:50:58:
0f:61:ca:6b:be:30:23:32:29:15:bd:a5:43:34:d8:
e9:d4:2f:a8:56:bb:89:49:13:58:37:46:3e:1f:5f:
00:3c:1e:c9:2e:f5:e3:c3:0a:92:1a:ed:41:34:af:
60:78:f1:49:e8:4b:18:7a:11:5a:67:07:61:b1:d6:
0f:0e:10:98:a0:cb:d9:77:c8:60:e2:75:ce:da:1d:
58:9e:f1:aa:e1:46:ae:ff:5c:61:67:4c:29:07:bd:
64:24:25:c8:20:55:d7:ae:7f:6a:83:ce:43:15:09:
90:ed:a0:39:7a:20:08:53:c2:a4:91:18:e5:39:fa:
f7:8b:c1:01:4c:a2:c1:4a:36:52:38:e2:a1:27:07:
fe:73:80:92:81:67:19:fe:e9:43:0e:be:d5:3b:aa:
5a:99:ba:52:3d:88:c0:e7:c9:e3:3f:9b:bc:60:3e:
9b:f5:b8:e2:68:b4:9f:78:36:a3:9d:7c:d8:e5:50:
8e:92:20:78:98:fd:20:a0:f5:ac:19:43:48:dd:37:
1d:6e:41:64:e0:a5:dc:8f:b9:1b:28:d3:d7:47:45:
f0:bf:b8:5e:0d:57:15:9c:9d:13:12:3a:87:35:8d:
fc:98:0d:7e:e9:21:c2:97:b3:a3:a9:59:6b:ed:a1:
ad:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AB:2F:DA:F8:CD:69:99:A0:EC:87:BF:83:CF:B9:4C:79:4F:9B:79
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:9c:8a:ec:d7:27:30:a0:66:36:1a:09:f0:8c:e4:ef:79:fc:
26:07:18:4c:0e:c3:78:bc:1b:c9:f5:95:ae:2f:f4:05:5d:81:
ba:f9:c7:7a:39:71:f7:84:ab:16:ea:85:f9:57:73:d7:b2:82:
1b:02:ab:17:48:29:df:f2:26:bf:57:9b:b9:8e:db:bf:9d:5c:
91:75:4d:3e:e2:bc:86:e3:5d:a2:80:b8:a3:f7:d1:35:fc:96:
5a:2e:68:2a:1c:b2:1e:7b:f0:4f:ee:a4:2c:8f:d8:8b:2a:1a:
f7:26:6b:12:03:27:c3:11:cd:4a:24:2f:1b:78:00:4c:0b:a0:
b7:ee:4c:ce:42:3c:6e:c2:90:d0:f2:b1:29:7c:58:cd:f5:f0:
79:ba:bf:7d:27:9e:be:cf:e4:89:7a:9a:fe:f0:98:d0:bf:46:
ae:86:2e:a7:fd:a8:b9:6e:c2:5f:ae:5a:36:e9:21:e9:3d:f9:
02:9f:91:6b:ea:0a:87:c0:06:0e:64:d4:79:9e:fa:51:ac:70:
f3:90:cd:cc:2d:c6:79:6f:7f:d3:60:e7:ca:9a:59:89:c4:84:
fc:37:26:95:a5:4b:e6:2d:45:ad:de:c9:25:e4:ab:92:e6:66:
25:04:e0:e7:ab:7b:63:b3:9b:62:2b:ea:6e:b7:59:ab:f9:37:
25:0c:02:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:48:39 2025 by rpki-client