Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: YLK6b5y05ubxpfy/gLCG/B1rBy8VQCRT1HBX49wvkGA=
Subject key identifier: 89:0C:98:3D:05:EF:D7:0D:67:FD:56:2B:01:F0:D3:8C:49:F1:A3:F9
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 019A4D3CC47C03FB770F2531924CC7ABB4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 0BAF
Signing time: Tue 04 Nov 2025 05:00:19 +0000
Manifest this update: Tue 04 Nov 2025 05:00:19 +0000
Manifest next update: Wed 05 Nov 2025 05:00:19 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: sTQB9bHA7yBi7YWzWKj7+WNw5q/lVyWkk3d2K/Jgq68=)
2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:c4:7c:03:fb:77:0f:25:31:92:4c:c7:ab:b4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Nov 4 05:00:19 2025 GMT
Not After : Nov 5 05:00:19 2025 GMT
Subject: CN=890c983d05efd70d67fd562b01f0d38c49f1a3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:62:ee:26:63:df:fc:4f:8f:a3:0e:f2:6a:
43:78:ea:59:9c:e4:ba:bb:7c:c1:97:e7:cd:e3:fc:
51:37:5a:65:f8:e6:3a:4c:6a:02:9a:80:c2:37:30:
e1:e0:06:3d:d9:e1:36:17:5f:d1:e6:08:1a:4c:8b:
b3:cc:81:9d:4e:68:bf:e6:e6:a8:6d:a2:55:e9:c7:
fa:64:a1:1c:ea:a1:60:7c:06:e3:0d:77:3d:4c:57:
67:0e:24:d7:16:4d:93:0c:cb:0b:99:64:02:81:d1:
5c:c4:21:e3:09:3e:bc:1c:e3:68:bb:97:3e:35:c6:
ce:97:cc:35:a9:aa:66:eb:8f:df:8e:b8:07:03:df:
7d:48:00:7e:7c:f8:6c:66:5e:1d:3b:8b:70:8a:3e:
d3:b1:3a:11:23:c4:54:fb:73:24:5d:7f:08:28:71:
b3:85:4a:f6:29:94:1a:f4:19:22:3d:81:c6:ca:73:
c5:c9:0f:3a:40:8c:3f:c4:c8:60:3e:c8:0b:72:7b:
3d:8c:0a:2f:32:2d:8a:f0:35:8b:78:64:d0:b2:f4:
10:a3:96:6b:dc:75:04:2b:6c:a1:2f:bf:d0:a2:4a:
8e:ec:16:d0:e6:09:1e:d4:08:75:22:74:b6:09:5a:
be:38:6e:a7:f4:85:69:4e:1b:92:ad:42:3c:19:17:
86:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:0C:98:3D:05:EF:D7:0D:67:FD:56:2B:01:F0:D3:8C:49:F1:A3:F9
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a2:ee:03:80:53:92:6e:dd:1e:bd:f5:37:7d:a7:cd:5f:e4:
23:cb:e6:a1:58:ae:aa:a5:b7:35:70:54:31:f0:e7:ef:1c:c5:
7c:41:46:5b:77:77:7b:06:16:47:ce:86:a3:2d:41:68:3d:06:
66:ef:ee:fd:20:6c:b1:e8:0f:1f:13:fe:65:bd:f6:30:79:30:
58:02:a2:a2:45:d7:72:96:76:b8:1f:7a:5c:a9:28:b7:e7:a5:
10:4a:14:dd:e7:20:d8:dd:be:f6:ba:92:a5:2f:db:fc:58:dc:
6c:92:a4:e8:f1:a3:83:b2:f7:62:2f:e7:36:ce:a4:be:a2:8b:
92:8d:8e:28:06:3f:19:db:dd:1a:0b:22:ef:8a:03:03:26:f7:
75:b7:51:3c:ab:13:39:34:06:65:eb:4a:02:57:f4:27:30:c6:
c6:28:ee:5f:8a:90:88:c8:2e:84:cf:29:c4:3a:44:1e:ce:2b:
3f:0f:cf:c6:81:10:7e:00:f1:ac:4b:6f:b2:92:1a:70:0b:59:
26:08:8e:d2:fc:50:db:89:1e:ce:22:d4:bc:4e:3a:b7:57:6b:
78:c3:8a:f1:95:76:fa:cc:9d:9f:7e:7a:71:50:56:31:3e:51:
74:d7:ea:b6:ac:99:5c:19:a9:31:77:8f:d6:9f:63:f4:93:32:
0b:34:9a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:53:14 2025 by rpki-client