Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: NyKVo57xMKr5tE5gz40M/TM4ANWhE1JzV+EgK1DRDNY=
Subject key identifier: E3:4A:35:B3:80:94:15:B8:CC:BA:84:0D:E1:CB:17:8E:BC:E3:12:4D
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 019A71B7EE5A729F82066F755F117D8A922C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 1430
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: EbzHlZuLicSvVmTmJYs7+3HbiOQSSUfDvBGWLc0bV9A=)
2: KUdT6ERAiaY5ZjAg0l7_pkDNLCw.roa (hash: JWvFQTdlTw7oZyEK0anyzQ0bLLNEO6CoBLxhpsT9tmY=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ee:5a:72:9f:82:06:6f:75:5f:11:7d:8a:92:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=e34a35b3809415b8ccba840de1cb178ebce3124d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:7f:48:bb:ad:b8:26:19:62:a0:05:55:73:14:
78:fe:ef:7a:43:09:29:de:89:b3:8b:19:cc:8c:5f:
79:11:58:d2:f7:84:cb:b0:c7:f4:e1:97:21:a1:28:
cd:94:9a:1c:3e:a4:e8:98:7a:f1:7e:9e:85:77:0b:
4e:2b:ab:e8:59:b3:aa:d7:66:5e:0a:02:43:da:e0:
ee:d4:2b:24:e5:f9:cd:3c:d8:50:5a:ac:2a:21:1c:
39:b8:75:9c:1e:2e:90:07:ff:89:f1:66:ef:65:38:
14:3d:c9:3f:61:bf:76:50:c1:59:37:44:68:0d:b7:
b7:a4:a7:c2:ea:dc:f8:1e:85:33:99:50:10:a9:80:
f9:99:4d:10:48:cc:fc:b8:56:da:b0:c1:4a:25:b0:
b8:70:8f:ee:bf:7a:06:33:5b:e1:e2:90:4c:c9:5f:
1a:4c:4e:c3:5f:46:4b:b9:de:8c:0c:98:e3:b2:48:
d4:46:be:9e:f5:72:bb:80:f9:58:99:74:26:88:c4:
f2:39:a7:35:20:2f:78:d5:ae:88:92:f2:1a:b4:39:
48:2d:d0:98:6c:f5:15:7c:33:af:a9:62:dd:30:eb:
4d:66:93:5e:54:dc:4b:b3:39:3e:ad:e9:04:7f:d4:
cc:7b:5c:a7:ee:a1:d4:ec:aa:40:e7:07:64:6c:8d:
d0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4A:35:B3:80:94:15:B8:CC:BA:84:0D:E1:CB:17:8E:BC:E3:12:4D
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d2:cf:64:02:b4:0b:81:d0:4a:21:fe:b6:1e:cd:08:a5:6a:
4a:dd:fe:82:bd:10:87:a9:89:04:c0:02:41:03:6d:ae:fc:f6:
f7:bb:2f:4b:90:fc:fb:8a:9c:1d:aa:ed:c5:aa:d2:09:4d:59:
87:27:a2:33:31:6a:fa:41:97:87:11:0b:1b:04:24:ea:cc:11:
48:2f:59:3e:e8:34:16:4b:01:bb:8e:ce:28:32:11:f8:49:10:
e6:7a:3f:f3:c9:18:81:41:0e:4d:f7:db:51:9e:21:a8:2a:fe:
a4:78:ea:5d:1f:b4:cf:ba:c2:10:ce:16:b5:bf:c9:fc:ad:3e:
86:3b:fe:2b:1f:de:ce:b5:43:f5:ae:14:ca:98:b8:35:1f:bc:
65:26:1e:b1:c2:1c:ad:54:67:ea:8c:1e:f0:65:b2:39:30:6a:
e3:f5:fa:f3:6b:c0:4d:99:a2:6c:da:f2:e0:aa:23:58:b5:08:
e2:88:cc:76:13:1e:1b:4a:26:1f:b7:27:b2:8d:7d:f1:c6:0c:
a3:86:cb:7b:1c:1c:41:d2:d8:41:4d:f0:97:96:f5:08:f8:1a:
83:3f:19:db:86:25:7a:dd:c8:c2:dc:86:77:83:19:95:7b:3a:
7d:29:9c:30:e7:7a:80:49:ee:5e:b8:d4:bd:83:0a:78:ef:80:
c3:13:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:08 2025 by rpki-client