Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
File: C_4rJzg320FmbWipe8esN9zJbyA.mft (raw, json)
Hash identifier: Y7eEbvTF/yij6p4+2syiuTJyaPTw/+v+vN3cadUaMt4=
Subject key identifier: E5:6C:BE:D6:A9:E7:AA:8D:66:79:03:DE:C8:36:7B:67:97:CC:03:8C
Authority key identifier: 0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
Certificate issuer: /CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Certificate serial: 019A0C38CD5CCFCFDFE7E96A81BFDD9EEB11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
Manifest number: 04B8
Signing time: Wed 22 Oct 2025 14:00:40 +0000
Manifest this update: Wed 22 Oct 2025 14:00:40 +0000
Manifest next update: Thu 23 Oct 2025 14:00:40 +0000
Files and hashes: 1: C_4rJzg320FmbWipe8esN9zJbyA.crl (hash: u5U6uCEDBJag8a4oAsPOUN7dV6SOwWSTIXqKITOu7yo=)
2: GN1cEGtzhGUtNVwPMehD-Lj4N1Q.roa (hash: C8P5r4sDxFHAMG8SatPLslHel1irs4/AKLXy4El1DWk=)
3: lBowDCcGSdkP56eGU0lPL4u_SEM.roa (hash: j0fleVV6sjY4GNZzRXgYAIbJa3v2es0FQGzI6ZY2suc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0c:38:cd:5c:cf:cf:df:e7:e9:6a:81:bf:dd:9e:eb:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bfe2b273837db41666d68a97bc7ac37dcc96f20
Validity
Not Before: Oct 22 14:00:40 2025 GMT
Not After : Oct 23 14:00:40 2025 GMT
Subject: CN=e56cbed6a9e7aa8d667903dec8367b6797cc038c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:79:c1:d5:5a:08:6b:0b:dc:10:7d:1f:ae:da:
bb:86:f8:23:8f:32:ac:e6:87:34:24:9b:ce:55:32:
f6:0d:63:3a:48:24:37:49:e1:4e:88:6e:49:14:7c:
db:a8:2a:75:fd:b5:77:bc:94:a8:c7:31:32:7b:d9:
f3:61:ff:a8:70:c3:8e:a2:b3:e3:d0:00:01:5c:fe:
bb:a6:02:ec:dc:12:a9:4c:1b:6f:5a:95:46:b5:a7:
87:30:5b:5e:89:1a:b2:47:41:c9:30:1f:34:60:72:
44:76:e9:10:59:68:09:20:30:f4:58:3b:d3:96:9f:
8a:53:f5:a8:3b:51:e9:61:f3:49:46:f4:b9:a5:eb:
63:fc:80:fa:df:a1:f0:5e:fb:ae:e1:59:f2:8f:55:
a9:57:36:c8:83:4c:a1:f7:f5:fd:2e:f7:d2:8b:49:
a3:7c:55:37:9a:fb:58:9a:b8:d4:df:20:c2:ce:19:
c3:d1:06:80:66:f3:69:0e:23:cf:d4:bb:87:4c:c5:
79:5b:ae:45:3c:b9:5e:3f:7d:cb:f4:d6:51:24:7b:
4e:32:fd:ee:66:19:24:81:b0:53:2d:4f:f2:12:34:
99:a5:e5:45:08:11:7b:cc:62:3c:a5:29:f8:a0:53:
e2:76:d3:72:40:fd:67:e3:f8:ae:fa:26:0c:b2:c7:
9e:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6C:BE:D6:A9:E7:AA:8D:66:79:03:DE:C8:36:7B:67:97:CC:03:8C
X509v3 Authority Key Identifier:
keyid:0B:FE:2B:27:38:37:DB:41:66:6D:68:A9:7B:C7:AC:37:DC:C9:6F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_4rJzg320FmbWipe8esN9zJbyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/feb927-7a83-403a-a1c1-eb1e91644f2d/1/C_4rJzg320FmbWipe8esN9zJbyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:27:b5:cd:ed:77:a3:4d:19:b0:11:86:e9:a1:7d:d9:19:6e:
8f:5d:d8:15:39:a5:6f:96:4e:94:4b:dd:40:38:b1:b1:f8:0c:
42:12:a5:cc:03:bd:cd:4b:85:60:35:94:af:41:92:00:41:9d:
3f:32:f8:50:63:00:92:41:42:02:45:4a:37:8a:f4:c8:35:2a:
c0:b6:e0:cf:bd:4d:a4:07:54:73:0a:3c:fb:74:ee:86:bd:13:
f0:f1:75:58:0f:28:c7:ae:e0:72:ee:f0:8c:91:7d:c9:f6:6e:
e8:23:c4:ff:26:2b:0e:f4:b7:c2:81:8f:8f:a5:97:b3:80:5a:
8f:a6:da:ce:19:87:ec:72:49:96:9b:e2:1f:62:0f:0e:a2:95:
b7:5a:71:e2:2f:2a:29:90:e7:5d:fd:1c:92:03:6d:93:33:f9:
07:8d:01:05:60:6c:01:83:22:c0:27:e8:5f:71:12:12:25:02:
a6:63:b6:ac:dc:fe:d2:e6:fc:db:f3:b2:e6:8c:5f:d5:a3:13:
8c:e6:61:61:5f:9b:f3:09:cf:a5:57:f3:23:96:d5:54:3d:38:
3a:de:ac:63:d5:9c:0f:ec:a9:90:3f:f2:b8:91:ad:ec:15:dc:
f3:74:78:38:90:c7:1b:9a:77:da:65:3e:59:f8:ed:e5:25:01:
15:99:68:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 21:59:48 2025 by rpki-client