Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: ZVoqJ5nRhGFYu7GSA8UUjSvWGhCHMns0O3ctWn5MpiY=
Subject key identifier: 64:55:65:19:5B:6F:5B:9A:43:3A:58:C6:B1:97:B1:F0:47:DD:2F:D6
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019A4DE1C9DB211F2D4CCB9E609B6C3E718A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 06C2
Signing time: Tue 04 Nov 2025 08:00:34 +0000
Manifest this update: Tue 04 Nov 2025 08:00:34 +0000
Manifest next update: Wed 05 Nov 2025 08:00:34 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: wJP5zxPa4r8w/4jj/GaZGVG96mS8DPJkSitHmAzyseU=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:c9:db:21:1f:2d:4c:cb:9e:60:9b:6c:3e:71:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Nov 4 08:00:34 2025 GMT
Not After : Nov 5 08:00:34 2025 GMT
Subject: CN=645565195b6f5b9a433a58c6b197b1f047dd2fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:34:eb:5a:14:ae:66:54:26:79:64:e6:32:
d8:ef:3b:3e:ca:88:8f:9c:b2:e1:34:a8:7e:c0:5c:
fe:a7:93:0e:6b:4b:d6:57:2d:e9:66:a7:37:a7:28:
f4:b3:2c:86:1f:08:cf:df:09:b3:9b:fd:9d:cb:8c:
9f:cd:4d:ad:77:5b:f4:b5:f0:52:2c:73:86:14:c7:
68:f5:60:25:30:e1:5d:3b:eb:a3:9e:5f:53:8c:c1:
83:43:29:2f:67:63:77:f6:5d:f4:1e:37:4e:43:9c:
28:a7:b3:82:ce:96:c6:a9:37:00:8a:36:0d:7a:81:
8a:c8:41:fc:3b:ed:95:5a:83:0c:f8:29:c8:9f:18:
cb:2f:30:56:d8:37:28:6d:3f:c6:23:00:41:ab:41:
04:df:e3:4b:7f:07:5a:fb:e0:eb:a0:67:eb:9c:43:
ed:cc:0e:26:a8:eb:1a:16:e9:d1:68:f6:32:dd:c1:
fa:1e:d9:8d:3f:5e:79:0a:e1:9b:74:20:4a:39:61:
23:87:34:0c:79:a5:8f:06:9a:52:3d:ad:d6:1d:14:
df:9e:db:f1:7f:4b:e9:e7:0f:2e:12:e8:48:d7:b1:
bd:d9:0d:77:ff:16:98:8a:a2:39:78:0c:23:8b:ae:
16:4b:b2:75:2e:56:6a:84:fb:ec:e3:f6:20:b9:be:
e4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:55:65:19:5B:6F:5B:9A:43:3A:58:C6:B1:97:B1:F0:47:DD:2F:D6
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8a:38:d5:ca:7c:a3:0e:4e:89:b8:fe:ed:11:a9:6c:d4:70:
b6:aa:01:02:4d:62:75:15:9d:81:91:90:d9:b3:8f:b1:33:78:
77:ba:ae:23:0e:96:97:68:34:71:3e:1c:fc:a8:29:2c:70:de:
b2:9a:b4:af:e0:8c:b2:8a:ee:4d:af:72:52:21:3e:c9:c8:a8:
c3:9f:a8:1b:6b:9f:0b:ef:fd:0a:fe:85:4c:58:70:26:f1:cb:
df:4f:26:48:57:d8:e9:c8:00:4a:18:1d:a9:59:df:85:e7:4a:
60:2b:ba:b5:fe:7d:09:07:fc:54:7e:45:1c:b4:0f:81:94:29:
7a:d0:24:16:bd:2f:c5:e9:b7:10:8e:33:ca:ff:5b:5a:e0:d5:
a8:bb:62:80:82:2f:2b:12:97:51:af:71:08:bb:bd:2f:09:da:
75:22:46:a8:5d:99:e3:fb:73:4c:81:02:10:b5:37:9c:86:80:
fa:64:57:9e:ae:96:19:c3:70:94:69:f1:ae:5e:ef:cd:81:81:
dd:c4:5c:d6:38:bb:c0:25:0e:40:a2:65:4e:36:bd:3f:c8:a8:
d6:a5:11:ad:2d:a5:12:c1:c3:fc:83:7e:61:5c:48:04:fa:4f:
76:8f:23:5e:91:ea:df:58:15:26:5f:68:5e:ff:fa:95:47:18:
68:33:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:49:16 2025 by rpki-client