Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: vHNvLpot4HK7w0926/eKGBwXwDuaVviZUU+P9SAe6GU=
Subject key identifier: 3D:B2:79:A8:CF:5A:D9:07:64:C1:AB:0D:1F:2D:3F:30:30:F9:2F:C5
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 019A22F776F575184BC4344E22A0ABCDD987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 1180
Signing time: Mon 27 Oct 2025 00:00:34 +0000
Manifest this update: Mon 27 Oct 2025 00:00:34 +0000
Manifest next update: Tue 28 Oct 2025 00:00:34 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: FJYP8bsaaaEY509CT2Og+sYVOBbIcu5OUkj5f/RwuEc=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:f7:76:f5:75:18:4b:c4:34:4e:22:a0:ab:cd:d9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Oct 27 00:00:34 2025 GMT
Not After : Oct 28 00:00:34 2025 GMT
Subject: CN=3db279a8cf5ad90764c1ab0d1f2d3f3030f92fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4a:bc:95:f3:7b:48:6e:04:3a:eb:aa:89:23:
a4:74:02:ff:fe:f3:82:f4:a8:b5:8a:e4:db:67:fb:
15:c7:0d:b2:64:8b:ad:68:30:ce:38:97:f1:14:41:
bb:c0:c6:7f:28:d5:0a:f5:9a:8e:8d:35:ae:fe:22:
49:51:6c:7e:8e:e4:3b:7a:a5:6b:af:6b:fa:63:6c:
6c:b9:06:76:ee:a3:53:97:1f:b8:c7:5f:96:24:e6:
bd:0b:90:27:15:85:75:35:f7:10:db:48:cd:69:59:
54:a8:45:4d:27:bc:d3:9a:32:d2:7b:cb:c2:d8:22:
91:35:52:be:43:ed:8f:de:21:da:1a:dc:ec:c1:d4:
51:a6:0a:5e:af:5c:45:96:e0:0d:8b:3a:c0:ec:12:
eb:04:6b:c1:af:9c:7e:1f:9a:93:2f:21:3d:8a:f1:
83:ae:bc:72:79:22:a1:d5:50:8f:01:b2:e7:9a:8e:
31:a7:0f:63:af:29:a0:b0:9d:0e:58:04:94:a5:04:
6f:c5:38:34:09:81:95:b9:20:66:e0:58:36:9f:a1:
d2:ac:f0:ee:ab:96:13:0d:cf:69:f9:12:ec:1f:85:
2d:ce:7c:24:cf:1c:83:4e:dd:9b:02:9f:3e:79:75:
08:70:8c:e7:62:94:74:30:e0:27:d2:21:e5:e5:e9:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B2:79:A8:CF:5A:D9:07:64:C1:AB:0D:1F:2D:3F:30:30:F9:2F:C5
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:e0:88:29:b2:bb:5a:97:ca:a8:86:f3:04:a7:ab:e7:0d:80:
dc:26:0d:f0:de:6e:c1:b6:ca:4f:20:18:c6:cb:43:60:79:32:
19:36:e3:02:5d:d7:78:77:b4:9a:4b:70:92:f0:07:62:bf:e0:
66:64:bb:f9:16:2e:7f:2c:52:08:16:ec:ec:41:37:9b:24:3d:
72:98:55:3e:4e:44:fb:b6:3f:6a:26:53:8e:04:3b:5f:28:e4:
b8:b7:1f:cd:bc:6d:81:a2:8a:ba:a5:09:3d:92:39:80:c7:2d:
cf:57:35:87:61:72:d5:90:dc:9e:aa:1a:ef:34:ad:5e:51:3f:
73:35:dd:92:03:2d:ce:c7:e3:a2:8b:57:12:8f:f6:8f:6b:73:
4b:3c:be:62:f2:2e:f0:25:5f:4e:78:58:4a:64:dd:17:c6:60:
b5:cf:b1:b4:bd:91:67:e2:a0:48:43:d4:83:48:cc:81:25:62:
ec:64:d4:76:e5:e3:02:16:6b:0d:84:78:97:44:c4:12:ae:c9:
6d:5c:08:10:81:7d:a7:72:7b:ab:0f:1a:c9:4f:e1:b7:92:38:
9f:e8:e3:5f:8e:1b:ed:d4:fe:20:f2:08:cc:e0:8b:1f:14:7b:
e9:ec:0d:a8:34:d0:0b:bf:83:2a:c0:eb:1f:db:d8:52:6c:65:
27:97:5e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:08:19 2025 by rpki-client