Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
File: 4zQsWGNx1GW881954WYOEeCAUVU.mft (raw, json)
Hash identifier: 2oaug5GbPe0lxnwCJyUt88nT2eOWhXiiT6MZ7tlE/Z8=
Subject key identifier: E4:B0:61:3B:E4:30:5E:E8:47:39:46:D2:F1:42:1A:10:4E:0D:9A:95
Authority key identifier: E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
Certificate issuer: /CN=e3342c586371d465bcf35f79e1660e11e0805155
Certificate serial: 019A25C17D885FAAB0004F914167B0D77660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
Manifest number: 0164
Signing time: Mon 27 Oct 2025 13:00:28 +0000
Manifest this update: Mon 27 Oct 2025 13:00:28 +0000
Manifest next update: Tue 28 Oct 2025 13:00:28 +0000
Files and hashes: 1: 4zQsWGNx1GW881954WYOEeCAUVU.crl (hash: FiHXGEnISrC9+DAcvt5cGJOin+Z7viUgDHKmnwiPyWc=)
2: Eba-gFj6_KEbGtGz74WD9Qe5r-8.roa (hash: IQzF41AYmHmWyxwMWh8AK7MBgafq4BN6uK+awf+6jdE=)
3: TjLS0-sv5HlbfwuedxiTX3hfr70.roa (hash: Xw4v/XHqrjPEUz2/nVAIr6aO/uYB4Ak47yBZaE0uW0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:c1:7d:88:5f:aa:b0:00:4f:91:41:67:b0:d7:76:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3342c586371d465bcf35f79e1660e11e0805155
Validity
Not Before: Oct 27 13:00:28 2025 GMT
Not After : Oct 28 13:00:28 2025 GMT
Subject: CN=e4b0613be4305ee8473946d2f1421a104e0d9a95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:38:d9:bf:b8:32:bd:15:4c:64:a0:b7:76:10:
0f:da:00:3e:66:ed:e5:5d:39:cc:73:1f:5b:0e:7c:
87:64:ec:bb:e5:13:44:0f:0a:d3:07:f7:77:cc:99:
d0:dd:bf:ab:ef:40:0d:5b:31:7b:97:07:97:cc:12:
6a:e4:05:5a:d2:6b:f8:ef:da:66:c1:cc:00:42:e7:
b1:99:87:5f:fe:6f:f6:da:f6:7c:86:39:9d:89:45:
ac:f5:3d:f0:23:b0:16:3d:23:76:95:b6:73:d5:ea:
81:fa:16:6b:4e:a9:d7:6c:f8:41:49:fa:b0:c7:dc:
0c:55:f9:aa:0e:68:32:69:ea:1c:98:82:46:93:71:
bd:30:1f:78:08:68:cd:41:ab:77:a5:79:80:e4:33:
c6:31:af:3b:9a:0a:77:6e:74:23:38:df:82:4a:3b:
20:bd:77:c4:5f:d2:4d:0f:c6:c2:bf:2c:0f:2a:33:
9e:b1:bd:af:9d:df:54:6f:5b:4f:d0:91:39:0e:d1:
ae:0a:63:72:0c:40:8e:72:5e:10:a8:b9:4e:f5:d6:
99:f5:6d:b1:39:53:1a:10:7a:00:64:0f:88:6e:bf:
66:01:7a:87:de:4d:84:ff:69:dd:10:3f:d8:fc:c3:
16:4e:86:43:67:b1:a6:ff:41:4d:83:c8:8e:54:6d:
39:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B0:61:3B:E4:30:5E:E8:47:39:46:D2:F1:42:1A:10:4E:0D:9A:95
X509v3 Authority Key Identifier:
keyid:E3:34:2C:58:63:71:D4:65:BC:F3:5F:79:E1:66:0E:11:E0:80:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zQsWGNx1GW881954WYOEeCAUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f2355-66ff-40b7-98d6-d95a38f0c06e/1/4zQsWGNx1GW881954WYOEeCAUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:72:3a:99:fb:26:62:0e:c4:5e:9b:94:ec:c6:43:bd:55:13:
2f:23:90:a0:2a:58:97:fb:1f:27:89:12:d8:a6:7b:42:24:2f:
c6:d9:e3:ef:b6:db:d4:81:8a:67:1c:e7:e4:83:75:83:b3:76:
e5:ef:08:20:7c:e7:26:61:4b:28:10:f5:80:17:5b:31:d2:92:
8e:e6:a5:6e:fd:a8:db:77:2e:4e:b5:94:c3:08:27:1e:d5:fb:
4c:d6:c7:51:6e:57:eb:49:ad:0a:fc:a0:0a:71:e8:b9:bd:72:
35:04:8e:6e:b3:82:c5:40:81:92:32:8a:a7:ec:c9:4a:31:36:
b3:c7:ba:85:da:5f:d9:ab:61:02:4a:68:b0:d1:ae:31:33:46:
7d:d1:02:d8:fd:8f:c2:05:68:a5:05:bb:ce:35:94:53:d1:0b:
d6:96:2f:11:4b:19:d0:10:92:6e:71:14:88:0b:ae:fc:e1:21:
e1:ce:69:02:96:44:9d:d0:df:a2:9d:da:a4:63:1e:f5:5a:16:
68:1d:a5:92:d5:98:1b:50:5b:5d:74:37:20:20:8a:fa:8a:4b:
c5:f8:8e:64:28:d8:1c:dc:50:cb:a8:69:b9:af:a4:23:1b:f7:
98:9d:b4:eb:9d:a2:dc:6a:4e:00:2f:0e:08:03:5f:a4:cc:00:
f4:ea:9e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 15:05:01 2025 by rpki-client