Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
File: 4qhjHttIETIyWh0Yb73gH6FXeRA.mft (raw, json)
Hash identifier: XMJfdSg6aLt6rD4OTH4gAF4McvoLKtI4OuPHhjSY84c=
Subject key identifier: 3F:AB:A2:99:B2:A6:C3:19:4A:9D:72:DB:E4:8F:5F:62:04:C5:DC:62
Authority key identifier: E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
Certificate issuer: /CN=e2a8631edb481132325a1d186fbde01fa1577910
Certificate serial: 019A194F81DADB75E666EBE07D7865E768D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
Manifest number: 0674
Signing time: Sat 25 Oct 2025 03:00:32 +0000
Manifest this update: Sat 25 Oct 2025 03:00:32 +0000
Manifest next update: Sun 26 Oct 2025 03:00:32 +0000
Files and hashes: 1: 4qhjHttIETIyWh0Yb73gH6FXeRA.crl (hash: 4Gf5CZ9F9wOuPPuT+rKmrqk+qW72AV1krGDqatws4sk=)
2: h3E6-zfi_xyDMKZ-mjqCgktKu5o.roa (hash: jFGY2eFUS/f/RiSzQYMsT/EoV/0tdGrsjyAMY/vYpEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 02:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:19:4f:81:da:db:75:e6:66:eb:e0:7d:78:65:e7:68:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a8631edb481132325a1d186fbde01fa1577910
Validity
Not Before: Oct 25 03:00:32 2025 GMT
Not After : Oct 26 03:00:32 2025 GMT
Subject: CN=3faba299b2a6c3194a9d72dbe48f5f6204c5dc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:fa:e8:61:1f:c2:c0:98:a5:b7:e6:d1:9b:
5d:5f:9e:cb:68:e7:0b:69:43:3c:a7:81:1b:b4:df:
94:67:32:21:9b:7f:97:d7:63:93:37:46:72:af:99:
01:f9:87:48:76:ef:fe:f1:16:51:72:35:e5:12:35:
34:89:12:c4:81:18:60:8a:76:b6:c5:38:56:ab:f5:
15:a7:af:e3:73:5e:0a:7f:36:eb:1e:2f:f0:b6:04:
f2:ca:d2:13:72:44:dc:50:62:27:f0:a6:9e:e7:f9:
4d:2b:68:1a:61:f3:7d:e5:77:bd:c6:83:7d:8e:d7:
ca:6d:80:69:5a:84:5f:9f:d4:69:f9:07:67:17:b2:
53:2d:e6:fe:ae:72:15:51:1a:a7:b2:d6:9f:c9:d7:
47:57:b0:9e:54:3e:05:b7:fe:05:e9:ad:a8:c5:99:
34:85:54:2f:8e:e2:c0:36:75:4a:88:0e:2c:0c:ca:
82:3a:8e:2e:ba:ec:b9:1c:a0:73:c1:8d:d3:1b:39:
d8:2d:b6:0c:44:d5:2e:a5:08:1d:2d:ef:60:5f:bb:
48:31:46:b4:d6:b3:a1:f5:e4:8d:1a:c4:2d:cd:53:
6a:3e:51:b0:3c:c8:14:78:37:53:2f:23:b9:0a:e8:
57:8a:82:cc:2b:5f:73:c9:10:27:ce:67:37:95:0c:
ec:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AB:A2:99:B2:A6:C3:19:4A:9D:72:DB:E4:8F:5F:62:04:C5:DC:62
X509v3 Authority Key Identifier:
keyid:E2:A8:63:1E:DB:48:11:32:32:5A:1D:18:6F:BD:E0:1F:A1:57:79:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qhjHttIETIyWh0Yb73gH6FXeRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6ac056-baa4-4c71-b940-46d6baefdab1/1/4qhjHttIETIyWh0Yb73gH6FXeRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:0f:bd:03:c2:dd:7c:11:34:9b:cc:55:7a:26:8d:71:ef:fa:
ec:6b:84:e3:8c:e9:b5:9b:de:e7:bb:57:fa:e0:8f:71:de:ab:
34:65:df:12:a5:8a:8e:49:41:01:ab:fa:b4:ef:f7:c9:ca:81:
a3:42:b2:0f:4b:95:86:88:15:f3:90:d0:db:76:d7:e2:29:23:
98:b0:1c:e7:49:5d:ef:49:17:9f:fb:3f:0e:ac:26:85:61:7a:
11:ec:35:44:72:ec:40:46:78:ef:15:47:1d:41:6e:be:a0:25:
ed:58:ea:83:df:69:77:cf:ec:b6:1c:e4:aa:82:c8:11:c5:39:
c1:9f:a7:46:0c:e3:7f:fa:87:d4:1e:7e:58:24:bf:72:e9:86:
5e:2d:10:31:54:ac:95:9d:df:41:26:ca:eb:b5:94:62:4d:bf:
47:84:b4:07:50:0b:d3:34:4b:26:f8:03:37:67:dd:e0:23:de:
e0:c5:5b:1e:93:8f:98:44:b4:cb:49:c8:aa:df:65:49:9c:53:
b3:59:a1:46:a6:a1:e0:2f:bb:03:b5:41:66:e1:4a:9c:ae:78:
d3:08:42:ac:c7:9a:c4:67:ff:93:7a:b7:a8:77:bc:6d:08:c0:
83:ce:c9:bc:05:d2:05:90:e5:95:48:57:b4:ce:4c:fb:ab:bb:
f8:63:5b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 11:27:22 2025 by rpki-client