Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft (raw, json)
Hash identifier: XPvLF1pMPZpcRDjKYa1EoHwGaC7NF0YlgFwSXJRJw3c=
Subject key identifier: 2F:1F:CB:12:5D:5E:4A:88:F8:02:9C:FC:CD:AC:0F:43:EE:02:81:E9
Authority key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Certificate issuer: /CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Certificate serial: 019A2478838B19B84EE3FEA965E4C013B541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
Manifest number: 075D
Signing time: Mon 27 Oct 2025 07:01:09 +0000
Manifest this update: Mon 27 Oct 2025 07:01:09 +0000
Manifest next update: Tue 28 Oct 2025 07:01:09 +0000
Files and hashes: 1: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl (hash: 8+Xg2gKhrePHi2i+FJrrZgLU5Re6gGGnXqzOHIeL+To=)
2: 6yVMq5BTt8MOOejBYcSjDgADz6M.roa (hash: +lA9zA3W3Yg9Ww1/RHvP0oevwKXOFVEKE6vwlBI3GS8=)
3: r7S4PGOtYK_PBp7kgURvb3XFM1M.roa (hash: oYqwnDt8x2Fy139phL6QrAYp1Cw9URTCQ1HjbcPByVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:24:78:83:8b:19:b8:4e:e3:fe:a9:65:e4:c0:13:b5:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Validity
Not Before: Oct 27 07:01:09 2025 GMT
Not After : Oct 28 07:01:09 2025 GMT
Subject: CN=2f1fcb125d5e4a88f8029cfccdac0f43ee0281e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:f3:08:6a:f3:a4:d0:c2:20:c3:04:5c:22:
3d:95:33:d8:46:a5:e6:e7:38:9b:10:5c:c8:c4:aa:
d1:1f:0f:7d:46:43:ae:70:78:72:f1:76:a8:a5:0d:
82:ed:6b:0d:e1:39:cc:31:30:5e:33:b1:3c:e1:1b:
67:e4:26:e7:6c:62:30:cb:00:70:f1:b7:26:7f:b0:
eb:5b:ed:5c:86:26:10:9e:f6:f0:3b:e1:fd:19:22:
ab:6f:67:bb:1f:de:45:14:ea:0a:99:a6:4c:55:55:
88:6e:98:ac:cb:92:36:7e:ce:4e:c8:3b:cd:da:b5:
4b:14:c2:cb:df:73:f7:96:f2:d2:bf:74:a6:da:55:
94:ef:a5:bd:80:83:b7:c5:7f:33:a3:c4:69:ac:12:
56:48:fd:8b:61:d9:bd:06:a3:7b:10:4e:3a:d4:06:
c5:99:64:60:e7:bf:38:2b:3d:c8:bd:a3:b5:71:b7:
e4:9d:1f:8f:c3:97:10:b3:92:2e:6a:3f:f1:79:33:
6a:9d:a0:b3:b4:5b:df:15:5d:c7:86:5d:9f:35:75:
70:cf:57:12:ff:0f:61:7e:97:b1:b1:2a:bf:f1:c0:
e8:a3:a3:41:11:be:a6:55:fb:60:84:85:9c:78:86:
03:d8:9b:fd:7e:93:44:b2:63:1a:0a:a2:dd:cb:fa:
86:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1F:CB:12:5D:5E:4A:88:F8:02:9C:FC:CD:AC:0F:43:EE:02:81:E9
X509v3 Authority Key Identifier:
keyid:E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:f5:fd:71:e4:0a:03:8c:da:a4:5d:44:0c:58:6f:43:51:1b:
fa:da:2d:8e:0e:42:21:b0:28:29:e7:d6:6c:8a:71:39:72:e0:
77:ab:9b:b4:a2:67:eb:f6:d1:61:01:ad:a6:65:2d:9a:9c:fa:
ca:cb:62:7e:92:22:d4:99:c6:b3:59:49:e4:64:92:8f:c9:61:
41:20:8b:61:02:8d:44:cc:e9:5f:e7:0c:37:27:09:76:49:7f:
74:83:57:29:da:ae:18:05:c0:4f:38:44:b9:7b:47:87:ed:22:
b6:02:2e:de:82:d5:f3:a3:35:9f:75:a5:7e:b8:6f:cd:12:a2:
65:87:57:87:b4:88:7c:fa:01:7f:ae:ad:85:d1:3d:ec:24:90:
a6:43:02:96:3f:8e:02:c2:ac:d9:70:23:ad:54:be:08:55:9f:
a4:de:55:7e:2f:4b:87:19:21:61:f3:4b:0d:13:99:b0:bb:31:
bf:99:da:c2:5d:07:59:75:a1:ba:ba:53:74:09:dd:24:05:79:
94:64:95:59:ce:81:e5:ed:eb:d1:b2:58:16:7d:ff:5e:3b:f2:
0f:66:b3:e0:fd:6e:3f:f8:18:2b:55:7e:52:b4:77:8e:7d:3c:
ca:cb:5d:49:f4:87:33:f9:5b:e9:fa:4b:5e:b3:c5:cb:2a:3c:
36:8a:cd:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 14:12:41 2025 by rpki-client