Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
File: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft (raw, json)
Hash identifier: 6t9IBjU65r9MNyG/lFNhLuz0NOk5uTTfz5rytZCnDEI=
Subject key identifier: 73:8E:31:E2:6E:13:F7:8B:1B:D6:4B:90:AB:06:4A:D1:E8:33:9C:08
Authority key identifier: E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
Certificate issuer: /CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Certificate serial: 019A4D3D4736C2795EB9A0D37394E3C84FAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
Manifest number: 06C7
Signing time: Tue 04 Nov 2025 05:00:52 +0000
Manifest this update: Tue 04 Nov 2025 05:00:52 +0000
Manifest next update: Wed 05 Nov 2025 05:00:52 +0000
Files and hashes: 1: 4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl (hash: SmdR4v0vjKioAy9LhAG0rP7gICmy/eKPe3AIiyQAb/k=)
2: tCDe7wPjFadsHNNfvUOgDucY0uQ.roa (hash: BMf/pb8712weiBqMIzsz+9w0GyVgsUYRF3OPa//jU1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:47:36:c2:79:5e:b9:a0:d3:73:94:e3:c8:4f:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1477072b91af5c3f3bfe69743243e7cda3ae879
Validity
Not Before: Nov 4 05:00:52 2025 GMT
Not After : Nov 5 05:00:52 2025 GMT
Subject: CN=738e31e26e13f78b1bd64b90ab064ad1e8339c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:fe:8b:23:d0:e7:52:2c:02:f7:ad:b2:5b:
7d:04:c1:98:70:f8:b0:63:1c:78:89:af:ea:a8:b3:
b4:62:16:3b:f5:6f:5d:e5:bc:41:e0:0f:b8:cd:c7:
b5:29:3a:aa:0f:d1:d2:e3:2f:5b:08:a5:c1:4e:5e:
1b:ef:69:c4:d4:9a:6f:a9:6f:71:2a:58:12:3e:a7:
32:57:df:c8:4f:11:7e:b3:10:ff:7a:fa:f3:25:e2:
f4:79:ad:43:b4:14:1e:f2:5e:fa:d9:36:ac:37:e8:
c1:05:a0:39:a0:62:0c:39:de:14:8d:d6:04:05:19:
da:62:93:77:9c:a9:39:da:75:be:ea:33:ac:81:35:
3a:8e:5d:f3:5a:b2:60:d5:9c:62:36:08:10:4c:20:
fa:b7:b2:99:f4:2d:03:35:7e:45:63:69:00:02:fd:
06:d0:8b:f0:13:35:5a:65:dc:0b:0b:44:14:db:45:
b9:dc:76:55:7d:20:8e:af:61:a4:d9:a0:92:69:e0:
7d:12:2f:ee:d8:15:ba:4f:4c:96:eb:97:15:d5:3d:
59:a1:9c:95:69:54:0c:32:6d:03:4f:5b:a2:5a:68:
a9:3d:0e:e3:e6:3f:a2:2c:d3:e1:a3:17:c1:8e:ac:
c3:3e:71:4f:a7:25:5c:98:d9:88:f2:72:f1:56:14:
ab:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8E:31:E2:6E:13:F7:8B:1B:D6:4B:90:AB:06:4A:D1:E8:33:9C:08
X509v3 Authority Key Identifier:
keyid:E1:47:70:72:B9:1A:F5:C3:F3:BF:E6:97:43:24:3E:7C:DA:3A:E8:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Udwcrka9cPzv-aXQyQ-fNo66Hk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7494bf-8acd-4e43-86ce-e7c8cf3af5de/1/4Udwcrka9cPzv-aXQyQ-fNo66Hk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ce:2c:ee:42:08:3b:c4:a4:0d:45:a7:59:7f:ab:70:32:42:
17:7d:43:78:54:20:dd:bc:39:54:1f:59:1f:e8:b4:b6:a0:13:
d8:da:26:13:42:cf:a8:d4:2f:29:8d:36:6b:99:44:83:df:10:
ed:53:2e:ca:e6:a3:80:7f:b1:3a:c2:48:bc:a6:f4:5a:d3:7d:
4b:43:40:b2:7b:c5:4a:cb:47:0c:ed:cc:5e:69:24:ce:ea:5e:
60:73:2d:1e:ce:c3:30:a5:70:be:e9:f1:d9:61:40:72:66:d3:
c6:2c:e2:8c:26:51:01:7b:91:13:65:d7:d2:86:3f:5c:68:21:
13:01:a9:7a:fd:e3:34:a2:30:75:07:73:08:35:44:85:b7:12:
c9:6d:28:d0:85:33:49:96:63:24:a5:21:2a:9a:49:32:e8:01:
b9:96:78:7a:85:65:22:50:66:0f:06:50:4d:b3:85:68:db:4c:
55:db:bd:de:d0:4f:9b:b7:e7:a9:81:4c:5d:a6:65:4f:d9:d5:
50:50:4a:7c:e6:1d:05:4d:62:71:ff:8b:e9:f9:a7:10:a4:96:
a5:34:8c:0c:1f:56:ef:cb:18:5f:9d:c2:b9:af:44:83:62:93:
b4:18:20:f6:bd:64:bc:5c:ac:81:4f:a6:d5:df:73:96:ff:c5:
82:2e:f3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:30:14 2025 by rpki-client