Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
File: P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft (raw, json)
Hash identifier: Wr/KC4TjtwxrgLZn/ul2pktVtg7+zccXmJrVVXEZtEo=
Subject key identifier: AE:3D:6D:59:AA:6F:32:3A:4B:E4:52:8B:2B:17:70:BA:73:1F:BB:C8
Authority key identifier: 3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
Certificate issuer: /CN=3f8138fea066d6f504436001cc9d7f339db734c8
Certificate serial: 019A52D146E5F4ABBC9462C038F21DCD3C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
Manifest number: 0391
Signing time: Wed 05 Nov 2025 07:00:38 +0000
Manifest this update: Wed 05 Nov 2025 07:00:38 +0000
Manifest next update: Thu 06 Nov 2025 07:00:38 +0000
Files and hashes: 1: P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl (hash: 18sujZwyUWCCgjLBcNJQhG61bgpJZf20qymzGjEoWPE=)
2: a7YNlS63NsZTTW2uGzFrnfKok9w.roa (hash: A6Vj/t1HktktvRKs1GT2mBgPnzQ8ZrkihcAERAUHOMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:d1:46:e5:f4:ab:bc:94:62:c0:38:f2:1d:cd:3c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f8138fea066d6f504436001cc9d7f339db734c8
Validity
Not Before: Nov 5 07:00:38 2025 GMT
Not After : Nov 6 07:00:38 2025 GMT
Subject: CN=ae3d6d59aa6f323a4be4528b2b1770ba731fbbc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c3:3d:cf:1c:3c:3f:bd:a1:65:20:8f:a8:c5:
18:60:c4:30:24:87:44:a2:b6:4d:3a:d6:c9:60:2d:
94:cf:51:df:40:78:55:e7:26:6d:27:9c:2e:8c:b8:
be:59:9d:eb:c5:62:18:89:9e:62:84:5b:00:9d:75:
81:99:d5:ce:d7:aa:c4:82:f9:c1:87:5b:d4:59:7f:
da:a6:b8:05:1a:f7:1a:fb:ba:bd:5d:33:a9:65:72:
e0:b3:0f:c1:6d:5e:b7:f9:6e:63:31:d0:5e:69:ea:
95:18:70:f4:2e:c1:c9:eb:6f:06:62:74:8b:00:38:
6b:d3:28:38:b0:72:9e:49:c1:99:eb:be:fa:85:35:
01:cf:82:4d:ea:4a:df:30:a1:01:9e:a9:e2:af:43:
f7:6d:9b:2d:e1:b8:1d:1e:97:6c:a2:cd:86:27:51:
fd:e3:4b:ca:bb:22:af:30:8f:bc:cc:84:98:a4:93:
34:2d:21:ae:1e:d5:b3:7f:1e:b3:23:f4:7a:47:a2:
e9:d4:7b:4f:3a:f4:25:d5:e7:d1:c0:e4:71:38:45:
38:98:44:50:fe:1c:de:7c:0d:09:71:9e:57:3f:7c:
28:11:1b:f0:8b:4f:1c:d4:f3:ef:56:bd:b2:33:fe:
3e:fd:f8:1e:17:19:cb:b4:29:ce:c5:40:45:82:6e:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3D:6D:59:AA:6F:32:3A:4B:E4:52:8B:2B:17:70:BA:73:1F:BB:C8
X509v3 Authority Key Identifier:
keyid:3F:81:38:FE:A0:66:D6:F5:04:43:60:01:CC:9D:7F:33:9D:B7:34:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P4E4_qBm1vUEQ2ABzJ1_M523NMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/2618f8-1264-4011-9b88-e327e5227066/1/P4E4_qBm1vUEQ2ABzJ1_M523NMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e7:36:af:c7:fb:68:e5:41:f1:a7:d5:e0:e0:f3:7c:3d:f6:
c3:96:ab:9f:d0:8e:b4:13:69:35:ee:7b:20:46:7c:a3:3d:bd:
6a:7f:47:92:64:49:63:ff:37:e0:bc:b5:a2:5f:de:c0:1b:23:
66:c0:ca:15:d2:89:16:04:81:e2:5c:ff:7a:e7:32:0f:69:c9:
02:3c:14:81:e5:63:17:71:bc:e4:8b:f7:19:6c:de:39:06:cf:
89:30:37:d0:1b:03:25:2d:0d:db:2a:9a:5c:24:5a:77:6b:de:
29:bc:0f:95:08:11:32:e4:37:54:8b:b5:ba:dd:72:91:12:21:
a6:ad:42:5a:8c:d8:ea:9a:d8:0d:d8:24:40:59:2e:fd:52:df:
c0:61:a5:a5:ab:75:60:da:84:e4:a3:8e:56:b2:05:95:d0:85:
5f:c1:c9:3b:9a:5c:1f:40:c6:28:f3:c6:bc:db:5f:ef:18:bf:
a6:98:13:da:9e:2e:f9:0c:49:94:c3:01:63:12:07:18:eb:d1:
86:9e:e4:4a:b8:0a:41:3d:18:7f:ba:cc:27:2c:a5:1b:f5:e9:
67:af:36:56:58:b3:24:51:48:09:88:35:20:f8:d1:8f:e3:03:
bc:c5:76:50:1e:9b:3c:15:a4:44:7d:3a:16:86:b2:d3:a4:dc:
f1:17:fe:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:27:40 2025 by rpki-client