Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
File: 4mthhRZS_I_twBGm8i966ba-sKM.mft (raw, json)
Hash identifier: KVuHcIUS+bfNE6Tkzq21UqzKaKnIazIQpTSpX08zGiI=
Subject key identifier: 82:38:22:A6:87:0B:A9:C0:52:84:1F:4F:A8:AD:1F:8D:23:6C:85:27
Authority key identifier: E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
Certificate issuer: /CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Certificate serial: 019A72259DB14A5E12D8A2A6B0E202EE2D5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
Manifest number: 0B4B
Signing time: Tue 11 Nov 2025 09:00:59 +0000
Manifest this update: Tue 11 Nov 2025 09:00:59 +0000
Manifest next update: Wed 12 Nov 2025 09:00:59 +0000
Files and hashes: 1: 4mthhRZS_I_twBGm8i966ba-sKM.crl (hash: oW4EgddyYAa3STmTqm4UpbqQpIqrytAafZvf1AiygoY=)
2: bp1oEKvy0k4AWur_R9trAhI-EY0.roa (hash: 1L++/xzP2iQbZgWJOfAhv8wOoNcuV9GiE8g7Q92+ZBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:9d:b1:4a:5e:12:d8:a2:a6:b0:e2:02:ee:2d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e26b61851652fc8fedc011a6f22f7ae9b6beb0a3
Validity
Not Before: Nov 11 09:00:59 2025 GMT
Not After : Nov 12 09:00:59 2025 GMT
Subject: CN=823822a6870ba9c052841f4fa8ad1f8d236c8527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:15:ae:75:57:14:27:94:84:01:5c:ea:49:24:
04:69:65:c9:11:9a:fe:53:fb:88:24:26:a4:62:98:
bd:e2:c3:14:2c:32:2c:ca:5f:e8:8f:3e:85:75:6f:
70:ab:ca:86:33:5e:dd:67:ca:ca:5d:da:72:e9:31:
68:c2:7e:5a:44:05:fc:6c:ba:dd:db:11:dc:d1:53:
0e:7a:a0:f0:19:6f:1c:a7:ca:9e:33:08:50:da:b1:
ab:73:e3:3a:d0:33:6b:1a:26:1a:cd:0f:bf:04:ce:
8a:21:e6:ec:94:80:48:f2:6d:6b:24:39:9a:94:12:
05:18:b6:c7:a7:e2:17:58:21:8a:4d:94:79:1f:de:
83:cb:93:23:d2:3d:8b:48:45:40:bd:b8:ea:ee:12:
8c:17:d0:4d:48:2b:fe:20:2e:13:f6:b8:f4:e0:cf:
91:4f:99:ac:55:07:58:f3:69:10:fb:0c:4d:22:91:
e0:6c:b6:74:bd:4c:51:2b:7f:92:f7:92:7b:72:d6:
6d:25:89:51:31:0a:c7:fb:66:35:d9:05:4a:55:99:
6d:23:a5:86:a2:94:a4:76:63:41:79:2a:ea:ac:72:
5d:64:44:f4:77:44:77:2f:6a:8d:21:0c:a9:88:87:
ba:44:f0:dd:8d:bf:1c:c1:61:98:63:3a:8d:dd:1c:
17:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:38:22:A6:87:0B:A9:C0:52:84:1F:4F:A8:AD:1F:8D:23:6C:85:27
X509v3 Authority Key Identifier:
keyid:E2:6B:61:85:16:52:FC:8F:ED:C0:11:A6:F2:2F:7A:E9:B6:BE:B0:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mthhRZS_I_twBGm8i966ba-sKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d70833-68eb-4100-9123-94e1ab575094/1/4mthhRZS_I_twBGm8i966ba-sKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:ca:a1:a1:9f:da:13:54:5b:5e:ff:49:57:6c:20:b1:32:83:
ec:76:43:0a:d8:64:94:50:2f:1b:9b:59:40:c6:b8:df:4d:14:
98:fe:c4:7f:24:37:7c:07:86:d8:eb:73:e0:8d:4d:02:8e:41:
10:74:62:e4:dd:cd:dc:45:20:95:15:de:bf:ef:07:d6:df:5e:
7d:f6:4a:8e:4c:d7:74:de:6e:bf:46:0a:b3:bd:cb:c3:75:0c:
59:74:42:06:9a:67:f7:2c:ab:82:24:75:13:8b:b4:52:c7:8b:
9e:80:52:cf:44:81:8e:c5:8a:d6:a1:57:9c:0b:a0:33:6a:06:
c8:53:db:e2:c7:43:5d:75:b5:cc:38:e3:06:b2:3f:07:93:b8:
21:4b:8b:b8:87:25:5c:a5:29:54:0f:95:53:2f:aa:52:0b:0a:
02:d4:0d:f7:e0:69:4c:ca:dd:09:7d:91:a6:06:62:39:41:9b:
5e:b0:3f:18:8f:43:81:b8:70:e3:4e:48:70:03:89:0c:67:a9:
8e:c0:c9:24:ca:81:03:bb:c4:af:54:21:b1:0a:fa:db:1f:e4:
b7:4d:79:da:02:94:53:b1:47:20:be:66:a4:56:3b:8e:76:88:
a4:55:d1:71:ae:f6:93:7b:cd:5d:5f:c8:a1:3b:bf:90:8a:bb:
fe:3d:e6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:37:07 2025 by rpki-client