Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
File: 4SOGDiDNss_fLO-zdToVuCKCkmY.mft (raw, json)
Hash identifier: oEpbD8udXde/A2jaPb3LBsur/z7sVZIfnNOBXm+EEII=
Subject key identifier: 24:5A:69:1A:0E:BB:1D:0E:76:DF:52:11:34:31:F2:E0:DD:E6:2F:F7
Authority key identifier: E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
Certificate issuer: /CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Certificate serial: 019A5789770FC5F18EBFB81D34EAB2CAB776
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
Manifest number: 1723
Signing time: Thu 06 Nov 2025 05:00:17 +0000
Manifest this update: Thu 06 Nov 2025 05:00:17 +0000
Manifest next update: Fri 07 Nov 2025 05:00:17 +0000
Files and hashes: 1: 4SOGDiDNss_fLO-zdToVuCKCkmY.crl (hash: ZMXsxU/R8kwaRhUbjH0GiXDn/Yiqv7BJb76h1kfK6yg=)
2: C_WwagoxlETCmC3xgCtnJTSTiFU.roa (hash: DG+d+a6FZH6p2em3ravozO37hhn38lEfqxBjBjLqEHk=)
3: egQwRHU5AE-klzoLV3_Sw_tkXYo.roa (hash: Nr/ciMVzEFBT/2eRIx3/XPFBkeS8bONzVMg9DvriCrs=)
4: p0iloktOu4HrQp8Fbazd0VMW18A.roa (hash: WuG4K1BU3enI1jODi4UBhPWn6TyCLQBuQYRFhQ0mg6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Nov 2025 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:57:89:77:0f:c5:f1:8e:bf:b8:1d:34:ea:b2:ca:b7:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e123860e20cdb2cfdf2cefb3753a15b822829266
Validity
Not Before: Nov 6 05:00:17 2025 GMT
Not After : Nov 7 05:00:17 2025 GMT
Subject: CN=245a691a0ebb1d0e76df52113431f2e0dde62ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:7d:bb:ac:07:18:6e:5e:74:bd:fd:65:41:
a5:70:c2:b9:56:13:4d:3f:7c:03:9d:a9:d1:a1:db:
9d:d3:4c:86:10:23:39:2b:6c:d5:24:cb:33:92:f6:
21:4c:20:cb:d5:98:a9:87:16:68:d3:0f:a9:c7:b8:
74:69:87:67:a1:24:0d:b1:4c:75:77:2b:a7:4f:6d:
32:4d:86:5f:7d:d3:fd:b5:45:8e:2b:e0:c1:41:d4:
48:bf:0c:41:8c:67:76:61:24:b9:d5:84:80:01:91:
15:6f:43:2e:e5:e4:30:c9:66:2b:29:51:1a:51:32:
de:72:f7:69:60:10:10:02:28:d0:f5:2d:7f:e2:68:
65:37:7e:29:b0:6e:da:41:53:f9:f0:74:66:f0:1e:
b0:06:1a:82:2d:24:a6:50:48:c7:31:bf:e7:46:7e:
90:d0:5d:e0:60:03:b3:a0:d9:e5:b3:20:fe:58:9b:
e0:20:b1:4c:07:2e:79:26:b5:98:bd:0d:c6:d3:89:
32:a6:a0:09:3a:e4:65:ec:e4:45:ba:8e:fc:b2:6d:
a6:d3:54:fd:cd:43:48:0e:99:70:bf:6e:a6:a0:54:
3e:c9:e9:ee:24:45:0f:79:44:59:cb:2a:71:dd:7b:
46:d7:2d:f2:8a:b7:ba:6c:31:d0:5e:6d:d1:86:b3:
fd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:5A:69:1A:0E:BB:1D:0E:76:DF:52:11:34:31:F2:E0:DD:E6:2F:F7
X509v3 Authority Key Identifier:
keyid:E1:23:86:0E:20:CD:B2:CF:DF:2C:EF:B3:75:3A:15:B8:22:82:92:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SOGDiDNss_fLO-zdToVuCKCkmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/810599-731a-486a-b23f-47537eb644f5/1/4SOGDiDNss_fLO-zdToVuCKCkmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e0:ca:48:9e:21:fd:06:05:8b:f1:42:4d:ff:61:f2:64:4b:
27:27:b4:8f:24:2d:6d:87:ab:4c:09:31:b9:29:6a:9b:1f:46:
38:be:ee:49:f4:41:92:19:16:bf:3b:73:d5:7b:f8:b0:1c:20:
1b:1d:ac:14:99:c0:41:3b:21:1f:84:4c:91:99:6a:7b:ee:f3:
5e:3d:4d:f7:69:ba:ff:db:67:fc:06:e6:0e:8e:5e:92:96:36:
47:b6:bd:c8:b6:b5:01:65:34:10:4b:23:b2:78:58:6c:28:3a:
a0:7e:c1:cf:81:f9:46:0e:6c:b8:9b:5a:cd:10:9c:42:52:9a:
c9:ad:4b:b2:f6:49:03:88:6f:48:36:03:0b:2e:90:66:16:c4:
d0:fe:02:3a:77:af:f3:38:54:a9:a3:40:0a:67:66:ec:cd:eb:
04:32:e1:86:24:f2:1c:9e:83:62:9d:69:96:04:35:94:76:34:
aa:c3:77:2c:d6:df:a9:10:11:3a:4a:f4:5d:5b:18:11:ea:71:
4d:22:e3:45:98:5d:be:74:b9:11:9b:86:74:71:00:7b:90:08:
5c:2e:79:41:0d:97:8c:28:c7:c2:70:6d:e9:ac:53:3a:44:de:
a2:c0:00:13:33:36:9b:74:d0:e0:1a:78:b2:64:1b:40:2f:1b:
be:69:51:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 12:27:12 2025 by rpki-client