Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
File: 4pIlILZ7Gr98QDr6IjVTQyYnIog.mft (raw, json)
Hash identifier: smiQLyl/Z+KP19FQ5NEDsFx+xR4GyxGRRX+w2Yc4its=
Subject key identifier: E8:AC:93:23:FD:18:2A:8B:D7:3F:E9:C2:C8:D8:83:44:66:8B:E1:78
Authority key identifier: E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
Certificate issuer: /CN=e2922520b67b1abf7c403afa2235534326272288
Certificate serial: 019A71EE8ADAB44A74E7A7E723D447DDF78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
Manifest number: 153A
Signing time: Tue 11 Nov 2025 08:00:49 +0000
Manifest this update: Tue 11 Nov 2025 08:00:49 +0000
Manifest next update: Wed 12 Nov 2025 08:00:49 +0000
Files and hashes: 1: 4pIlILZ7Gr98QDr6IjVTQyYnIog.crl (hash: ZApfVB/DurIJXcjfJ/o1CrcLffrzF3MCUZPPOcypbRM=)
2: sraNB3Tq9hs6fPR3orHTINDfXdM.roa (hash: 5fJUa4xuxE1H1Nc9qB8vUJm4+A17xrBmdzBKBxK5rEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:8a:da:b4:4a:74:e7:a7:e7:23:d4:47:dd:f7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2922520b67b1abf7c403afa2235534326272288
Validity
Not Before: Nov 11 08:00:49 2025 GMT
Not After : Nov 12 08:00:49 2025 GMT
Subject: CN=e8ac9323fd182a8bd73fe9c2c8d88344668be178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4f:d9:b5:ad:ca:0b:73:7b:4d:e2:bf:6e:3a:
53:90:f2:80:29:fe:1d:86:aa:19:54:60:c5:dd:8d:
9b:98:f8:04:96:62:0f:6b:f2:12:a7:7d:d1:2d:59:
c6:63:3c:3f:75:f0:56:ca:b5:f6:36:83:16:47:b7:
22:b9:7f:b2:ac:59:81:40:03:ce:26:45:64:c8:5b:
26:e4:5b:fc:15:13:de:b2:2b:b9:de:ca:a4:52:da:
d5:07:54:58:b4:3e:cc:68:25:68:3d:dc:20:3f:28:
4e:42:8e:37:bf:21:4c:22:fd:b7:d5:b6:74:61:b9:
d7:de:7d:83:01:b7:dd:27:9c:ec:28:4a:1e:1d:36:
43:77:5d:0e:0a:2b:45:9d:fb:cd:6a:66:fd:6c:c5:
04:1e:de:67:f7:b3:8e:73:5c:00:ff:ed:34:7c:fd:
d8:b2:2e:0e:81:d3:fa:01:a3:5b:26:1a:36:d8:32:
b8:a5:30:89:15:80:46:04:6c:fe:a6:a0:84:70:77:
25:ef:1f:92:21:bc:73:a0:d0:ee:b7:2e:e6:82:3f:
c1:a5:1d:63:e5:dd:61:f0:e8:06:82:82:2b:49:67:
e9:14:bd:58:44:8c:5f:50:63:2e:6d:c0:45:40:86:
8b:e9:38:59:a0:1e:d2:5b:97:c4:3d:d1:79:64:31:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:AC:93:23:FD:18:2A:8B:D7:3F:E9:C2:C8:D8:83:44:66:8B:E1:78
X509v3 Authority Key Identifier:
keyid:E2:92:25:20:B6:7B:1A:BF:7C:40:3A:FA:22:35:53:43:26:27:22:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pIlILZ7Gr98QDr6IjVTQyYnIog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/ca13ca-f640-496c-922a-500abd93b9d4/1/4pIlILZ7Gr98QDr6IjVTQyYnIog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:15:8a:39:8e:6b:21:41:ed:5b:84:9f:7b:ff:2e:87:a6:d3:
14:c9:db:97:50:e4:d3:13:20:5b:93:c5:4a:0a:7c:46:85:bc:
cf:82:91:7c:85:56:b7:ef:4f:80:4e:04:f8:e2:54:e4:3f:5d:
7d:40:ab:4b:40:e1:72:97:99:e8:9b:2a:6a:c3:72:f9:65:12:
59:9d:96:8e:6a:21:b2:31:33:69:ce:5c:5e:5c:52:ba:2f:eb:
e8:e9:31:f5:5f:5e:c2:db:ea:f2:39:2b:08:01:ca:26:92:9e:
06:ee:ed:d0:73:66:6f:db:69:36:b5:a3:10:b7:e1:c7:09:cd:
02:a7:3f:4e:71:61:e7:a3:36:81:02:07:36:bc:19:11:88:b6:
80:dd:c8:b4:ed:8d:8d:7b:2a:26:5d:9c:14:6a:cb:a8:31:aa:
39:5a:26:ef:5d:f7:c8:6f:e1:9e:16:2a:0f:30:c9:30:58:1a:
e1:c6:1b:71:30:03:b7:6a:97:37:b8:c5:e5:bf:ae:45:71:8c:
78:9f:99:d1:94:ad:29:e7:ca:a5:f8:00:5a:f6:22:90:03:0c:
fb:15:dd:ef:69:48:ba:34:52:2e:3e:ef:18:71:c3:6f:96:3f:
ec:8e:7e:c5:b0:05:5e:3c:3a:d8:9d:35:d7:f3:ba:61:91:22:
a2:f8:ab:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:49 2025 by rpki-client