Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: zcg+XP1xRNk/KAKAxov7FzCw9FCiqerKaBc8YSlHAaQ=
Subject key identifier: F0:BB:66:08:9C:90:26:A1:95:63:DC:1D:F6:61:00:4F:83:B3:74:A2
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 019A552D482051A5035CF6E3B48DFC1DE0AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 06F2
Signing time: Wed 05 Nov 2025 18:00:22 +0000
Manifest this update: Wed 05 Nov 2025 18:00:22 +0000
Manifest next update: Thu 06 Nov 2025 18:00:22 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: BGE0kMHi+tBUM4FXdx+mxR0iT3avyIknP3U3RJYrejI=)
2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=)
3: RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa (hash: U62vygXnMfJooP0R/d4gF/Enn1AJ0PueFVZ40dCASXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 18:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:2d:48:20:51:a5:03:5c:f6:e3:b4:8d:fc:1d:e0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Nov 5 18:00:22 2025 GMT
Not After : Nov 6 18:00:22 2025 GMT
Subject: CN=f0bb66089c9026a19563dc1df661004f83b374a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d4:81:ed:e8:ca:85:70:33:96:a4:5c:79:d4:
e6:6f:cf:eb:7e:53:3a:be:f9:0d:9a:d6:64:5d:5b:
82:cc:9c:ca:92:65:22:f9:ce:a6:56:4f:0d:a5:94:
f8:32:4d:2e:d9:77:6c:5e:18:44:de:0b:99:9b:14:
3f:34:2b:43:b9:80:e5:00:a6:9c:8e:5c:0e:99:14:
14:62:31:e2:da:41:91:51:22:5a:c7:69:8e:1e:b4:
69:0e:d2:d1:6c:97:7e:d3:b4:3b:05:f0:13:00:5d:
d1:3a:18:f1:94:0a:c7:1a:32:35:0c:35:f9:43:97:
fa:66:71:d6:e5:4a:b7:49:c7:85:ac:ec:3e:d1:5d:
58:cc:3d:4e:0f:ae:51:61:36:95:de:13:c6:96:a5:
8e:dc:f4:75:1a:72:11:99:d1:86:f8:d5:a2:e9:e0:
18:62:d5:64:26:5a:71:93:bf:e9:c0:4f:69:6a:e2:
1f:26:35:1c:18:65:3c:66:be:87:ee:88:9b:25:5b:
de:e9:96:82:3e:9c:39:a8:32:33:ca:1e:42:0c:78:
a5:29:a1:af:50:ad:92:f8:a6:76:1d:8a:60:0f:1d:
05:bc:b8:25:e1:54:95:cb:1f:02:cc:0a:23:5c:47:
72:54:ed:3f:29:df:17:d9:ff:a7:c7:03:50:87:14:
8f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:BB:66:08:9C:90:26:A1:95:63:DC:1D:F6:61:00:4F:83:B3:74:A2
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:76:c9:9e:6f:5f:18:0e:29:88:2a:e9:1e:04:70:0a:bd:8b:
46:51:65:f0:86:10:b0:04:92:46:dd:83:4a:88:4e:3f:fe:0d:
48:76:a7:b0:3f:75:65:60:f3:44:ab:8a:4e:c7:4d:55:8c:08:
f9:04:05:6c:d0:21:3b:15:36:07:9a:e5:40:57:ea:19:8a:5f:
d9:bf:d5:e7:80:63:4d:ac:9f:0a:0a:fd:a8:1a:bb:e9:66:23:
47:42:e1:da:37:6b:48:3e:cf:fc:59:4f:0d:6a:b3:91:93:0b:
70:03:0a:9d:2c:fc:29:f1:01:2e:86:c3:50:8f:e1:f0:ab:60:
c0:34:42:56:c6:76:75:a5:1a:8b:13:d3:d1:89:b1:10:58:be:
6d:0b:08:ef:aa:fe:7d:82:2d:e2:cf:96:5a:ea:57:fc:10:8a:
9f:92:75:74:ca:8b:a1:12:6b:c2:ec:99:fe:67:44:3e:2d:47:
c3:62:d7:e2:f9:50:0a:c5:44:f2:99:9a:3e:c2:19:e1:a2:78:
1e:46:7a:bf:00:f8:f5:6c:fd:9f:96:1f:59:2e:d6:79:1f:8b:
74:43:71:c5:aa:74:1b:ea:94:bc:b2:07:54:41:94:c7:61:06:
f7:16:d9:74:29:53:60:21:72:13:c2:03:7b:3a:fa:99:29:d1:
9d:aa:89:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 23:34:12 2025 by rpki-client