Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
File: 4QnieMeGIlTIh1XkcXOYpVKkkEA.mft (raw, json)
Hash identifier: Im+4drORShDvdDZk5ArHVRQkEv4vVoJgP7ADdnCoiBc=
Subject key identifier: EC:E1:D9:5C:13:CB:58:75:7F:F4:08:56:51:28:C4:BA:B4:37:58:6E
Authority key identifier: E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
Certificate issuer: /CN=e109e278c7862254c88755e4717398a552a49040
Certificate serial: 019A725C4FDD041FEE2157F97BE7D8A9DA35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
Manifest number: 04BF
Signing time: Tue 11 Nov 2025 10:00:43 +0000
Manifest this update: Tue 11 Nov 2025 10:00:43 +0000
Manifest next update: Wed 12 Nov 2025 10:00:43 +0000
Files and hashes: 1: 4QnieMeGIlTIh1XkcXOYpVKkkEA.crl (hash: xNhGHPX5Wo3RRHYSJoCqhyFlT2GhsERtpEe5m0fNKy4=)
2: 8a9J3an90z8mWS8TkwqA1Af6V60.roa (hash: Sfg4OixpuznuGw9qd09AY2Lx61QBeTwn9kYrisQDEss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:4f:dd:04:1f:ee:21:57:f9:7b:e7:d8:a9:da:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e109e278c7862254c88755e4717398a552a49040
Validity
Not Before: Nov 11 10:00:43 2025 GMT
Not After : Nov 12 10:00:43 2025 GMT
Subject: CN=ece1d95c13cb58757ff408565128c4bab437586e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:43:b2:73:c2:bc:7f:93:6f:78:da:c3:e4:e2:
31:ef:ec:f2:94:36:c6:de:5b:af:66:cf:e3:da:68:
9b:49:77:07:1a:71:46:57:a0:cd:65:db:fd:a1:e9:
32:be:1b:bc:10:17:09:90:bb:f5:21:e0:04:eb:53:
53:5c:a0:42:a4:e5:3a:88:4d:58:da:06:4f:34:55:
6e:d9:53:ec:f6:70:b0:cc:62:d9:78:42:f6:72:47:
76:3c:80:b1:52:d4:25:d8:f2:a7:a9:54:43:4c:0a:
e1:13:75:19:58:33:79:f8:e4:7b:97:0d:68:a4:40:
d9:2f:8c:2e:56:7d:60:6d:39:65:14:05:07:f8:63:
2d:90:01:9c:37:cf:56:1b:c8:7b:f6:73:ef:01:bd:
a5:0f:00:9f:64:36:d6:c7:de:88:46:20:64:08:7c:
3a:d3:5b:75:28:a9:60:5b:fc:91:55:dc:d8:1b:a3:
cc:c8:de:20:6e:79:10:32:d6:a2:fc:a8:f9:7e:6f:
d8:6c:19:78:9b:73:93:39:02:85:38:a2:82:98:da:
c1:95:f2:b2:ef:cb:6e:9d:b2:f7:e8:4f:ec:88:5a:
d3:96:94:dc:f0:78:a9:91:45:ee:24:b9:81:cb:f8:
bf:92:b8:fa:ee:7f:f6:c9:96:b2:31:1a:ac:78:23:
a9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:E1:D9:5C:13:CB:58:75:7F:F4:08:56:51:28:C4:BA:B4:37:58:6E
X509v3 Authority Key Identifier:
keyid:E1:09:E2:78:C7:86:22:54:C8:87:55:E4:71:73:98:A5:52:A4:90:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QnieMeGIlTIh1XkcXOYpVKkkEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/e072d7-87c0-4b73-9a4d-2f03e32bd21a/1/4QnieMeGIlTIh1XkcXOYpVKkkEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ca:4d:02:b7:76:fa:45:39:3c:9e:09:c9:04:52:10:a3:c3:
a1:5b:53:d8:d1:11:de:11:a2:29:4d:fe:36:65:7e:a1:72:d0:
86:91:46:55:82:fa:67:1b:33:87:3a:aa:75:82:17:0a:56:52:
77:71:28:a3:da:0f:b7:ae:38:cc:6c:d9:12:19:4d:4f:da:b7:
8b:bd:b2:f1:88:c2:25:27:86:f4:83:d6:23:ab:c6:fc:e1:71:
a6:bc:b4:48:f9:4d:f3:18:9c:25:14:78:2f:1e:78:40:a6:c0:
37:3b:f5:61:02:bd:67:32:5e:aa:8d:7c:dd:86:a1:80:b4:fb:
88:53:52:8e:3d:b3:d0:aa:61:0d:3d:5d:d9:3c:a6:4a:50:8f:
d1:01:71:16:1e:f0:35:02:8e:79:4b:5f:1a:ae:e7:34:1a:de:
2c:02:1b:c2:ac:a2:77:8d:aa:bb:70:75:81:f2:37:ac:da:e8:
96:01:f8:fb:3b:85:3c:34:55:79:64:fd:ed:d4:b9:80:a9:46:
c2:e3:53:ab:66:54:53:42:c5:39:b3:23:ba:e2:40:69:4e:ef:
9b:c2:de:cd:1c:3d:f5:b4:0b:54:e4:ce:0d:5d:02:c4:21:de:
61:68:c7:9f:69:e1:88:12:38:11:0c:41:b5:ef:c2:91:e7:df:
8f:f8:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:39:13 2025 by rpki-client