Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: 12fBQ8dTeGpJM3gD2cMIiBv9i2lp4GYaou683neVqXs=
Subject key identifier: 72:F4:2F:1E:C2:D2:E0:87:3A:8C:36:47:4F:37:82:D5:0D:43:1C:DB
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 019A2C688EB7A9394F2EA557922B0E44750C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 0621
Signing time: Tue 28 Oct 2025 20:00:40 +0000
Manifest this update: Tue 28 Oct 2025 20:00:40 +0000
Manifest next update: Wed 29 Oct 2025 20:00:40 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: Q8uRlFEbR1yZ1GdjT0NHybc54Y3IjFIVWLoCyBFB0yc=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 14:12:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2c:68:8e:b7:a9:39:4f:2e:a5:57:92:2b:0e:44:75:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Oct 28 20:00:40 2025 GMT
Not After : Oct 29 20:00:40 2025 GMT
Subject: CN=72f42f1ec2d2e0873a8c36474f3782d50d431cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:68:05:b6:0c:ee:c8:97:29:c4:66:00:4d:
a2:87:0e:5b:48:df:17:da:cf:44:dc:e9:d3:72:70:
a6:68:b1:43:e5:a1:a6:f0:7f:4e:e5:26:4b:1e:61:
3c:c0:3f:96:83:bb:37:f6:55:e3:33:0d:79:b4:66:
b2:33:5d:ea:91:6a:dd:3a:f3:86:ae:4d:74:7d:7b:
1c:5b:c0:ce:f2:c8:0c:9f:5c:34:7f:94:0f:25:1d:
ed:5c:c6:21:7c:c0:74:41:46:62:bc:b9:1d:f2:40:
63:68:bb:b0:66:18:86:c3:37:37:49:58:9a:f0:d7:
75:3d:06:3d:27:87:e2:0b:a1:9e:8f:07:8e:1e:6a:
d6:f6:99:b1:ea:a8:24:48:4e:aa:f4:6c:a6:91:9b:
95:c0:70:14:3e:47:40:1c:7a:8f:78:26:9b:37:8f:
f3:c0:7e:eb:a8:02:50:02:dc:3d:85:8f:5f:7c:6d:
06:1b:2f:e6:88:0c:89:89:cd:97:e4:f2:be:e9:79:
04:c7:3e:4d:e0:b0:32:00:4a:d3:c3:6f:6b:e0:51:
d8:44:21:26:58:eb:d8:4a:38:ad:e3:8b:de:46:39:
93:37:d2:cf:40:0f:5a:be:15:31:ff:94:1a:90:ec:
a8:06:c8:b8:f1:ac:8f:9e:34:ba:e8:74:ff:8e:a7:
4e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:F4:2F:1E:C2:D2:E0:87:3A:8C:36:47:4F:37:82:D5:0D:43:1C:DB
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:ab:f7:5e:30:f3:56:2e:67:53:4f:ba:da:ae:34:5f:8c:49:
30:04:4c:ad:0c:f3:76:4d:79:4a:00:d2:95:4a:f4:a9:6c:b7:
53:d5:29:4d:b9:f3:82:e1:aa:28:d6:df:30:85:e9:f3:71:26:
8c:c4:5a:c4:b5:63:12:43:87:41:a3:b2:c9:ca:b8:b4:a2:e6:
0f:12:07:b6:3e:5c:5d:1e:93:8d:64:f7:36:f3:38:b1:fa:bf:
b7:87:7f:af:6b:c1:1b:54:40:72:4e:cd:5b:d4:49:8d:e7:36:
37:06:32:28:81:44:bf:8c:da:e3:b2:6e:11:80:13:24:06:0d:
15:bc:d6:a3:6d:99:4c:71:bf:96:6b:52:02:b8:1a:9b:dc:e9:
1b:0b:51:51:89:5c:8f:fa:dc:6f:1f:9f:a5:b2:bd:b6:66:66:
0b:94:fe:79:cb:2e:79:8a:2c:8a:64:73:29:cd:51:99:7d:24:
fd:93:30:8d:3e:85:44:9a:96:ed:fe:0c:81:32:93:90:40:ac:
2f:7a:3f:45:66:ab:f2:8d:f9:75:9b:de:39:23:85:e6:d4:6b:
c9:73:0e:37:4b:bd:b6:10:4b:99:d7:ac:32:77:27:a3:48:16:
ee:36:ef:3b:cf:0c:c2:a0:0f:e6:6d:7a:bf:34:4a:75:59:ae:
1f:86:e7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 21:50:24 2025 by rpki-client