Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
File: 4g44BaG09bYc_nMBDoOMLw0ltEs.mft (raw, json)
Hash identifier: aVJ+hXpLxwhz52npDYgbnxUK/ymEEEewelM/Mbnx9EM=
Subject key identifier: 77:90:75:42:DD:99:8D:C9:E5:80:95:C7:17:A8:22:54:2B:1D:E3:EC
Authority key identifier: E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
Certificate issuer: /CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Certificate serial: 019A18E24ED44256DFFABC42E00D70D16090
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
Manifest number: 0E03
Signing time: Sat 25 Oct 2025 01:01:15 +0000
Manifest this update: Sat 25 Oct 2025 01:01:15 +0000
Manifest next update: Sun 26 Oct 2025 01:01:15 +0000
Files and hashes: 1: 4g44BaG09bYc_nMBDoOMLw0ltEs.crl (hash: Qbk2e8HikW05ltZ0emPuM/aREdKyxCsJ38O/EYso0Ts=)
2: BD04oGhJezcKgfhBVSPLxiCwx-U.roa (hash: 6BJW9GRsg9XqwBDaRIKZatrd81rOIFw+haS77P869vM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 01:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:18:e2:4e:d4:42:56:df:fa:bc:42:e0:0d:70:d1:60:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20e3805a1b4f5b61cfe73010e838c2f0d25b44b
Validity
Not Before: Oct 25 01:01:15 2025 GMT
Not After : Oct 26 01:01:15 2025 GMT
Subject: CN=77907542dd998dc9e58095c717a822542b1de3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:a1:cb:b1:e7:6c:8b:ea:36:8a:3e:96:e9:
d9:d8:2a:f8:63:04:ff:e7:0c:ef:a6:0a:86:79:a3:
5d:79:f6:de:e0:be:48:1a:7d:2f:09:dd:d7:47:31:
c5:82:6b:61:87:cf:1c:ad:0d:75:23:55:10:11:fa:
0e:e8:40:ed:d0:e3:ec:ba:b7:1a:f9:6a:4a:e1:4f:
49:fa:d2:da:8c:0a:4e:5a:c0:94:e5:d5:0c:1f:50:
fb:02:ff:5d:85:19:c7:f9:d2:af:52:29:1e:52:46:
58:68:6d:ea:16:dd:af:95:ab:52:8d:c6:df:88:94:
22:5f:3a:00:bf:fa:a4:b7:34:26:a8:7a:cd:aa:3c:
ec:b2:3d:97:c1:51:ab:20:6d:12:c4:d6:76:b6:96:
95:9f:0b:63:d1:0d:31:2a:e8:65:a2:f5:81:75:34:
ca:a6:95:4f:04:67:07:76:62:5e:66:c4:d1:1c:b1:
12:e8:1f:a0:1f:81:c4:f0:62:fb:28:67:72:19:f9:
64:5c:a7:ea:76:42:a3:54:f2:6d:ab:ec:4d:7d:d6:
7f:57:ed:e0:c1:c1:d3:61:2a:79:44:0c:24:33:98:
3c:84:2f:52:4e:c9:12:1b:10:00:60:8f:95:91:d6:
99:4d:10:15:49:36:13:4c:2e:d7:a3:f8:06:9a:b5:
c7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:90:75:42:DD:99:8D:C9:E5:80:95:C7:17:A8:22:54:2B:1D:E3:EC
X509v3 Authority Key Identifier:
keyid:E2:0E:38:05:A1:B4:F5:B6:1C:FE:73:01:0E:83:8C:2F:0D:25:B4:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g44BaG09bYc_nMBDoOMLw0ltEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/d16e3e-eb09-4fb9-9081-bd3e7adde8de/1/4g44BaG09bYc_nMBDoOMLw0ltEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6c:c2:2d:db:da:75:41:05:7f:92:f7:44:20:53:b3:8c:56:
e3:1c:47:c7:5e:36:2a:f8:92:6a:10:37:f1:3e:fd:78:ed:6b:
79:91:78:06:90:85:15:49:f4:92:5d:76:ab:eb:e0:fa:1c:f7:
ea:55:88:95:db:34:75:33:75:e3:f7:0b:ef:d4:db:fb:36:5a:
9a:df:be:b3:c5:0d:fc:1a:7c:f4:00:16:99:b8:98:ce:61:e5:
f1:1e:e3:84:3b:31:fb:b0:c0:21:6b:00:72:61:91:60:39:c4:
3c:58:15:d4:ad:48:0e:7f:db:84:77:6e:6f:bd:02:3e:ac:34:
ff:7a:8a:e6:bd:23:4e:5c:09:3f:08:cd:8a:d4:c0:1d:df:d3:
3d:88:7f:11:22:4c:58:72:0c:1a:5d:a8:11:b3:36:dd:fd:a3:
e8:90:a3:2a:5a:21:6e:6b:9d:49:63:0c:b7:e2:bc:c8:66:5d:
a0:50:1d:a7:ec:9f:86:44:64:e3:8e:9f:29:e2:e6:64:41:65:
9a:14:cd:09:8c:b5:35:a5:9e:20:83:9d:5f:20:a2:9d:aa:e4:
5a:67:d5:8f:fd:ef:77:aa:fd:0f:ca:e7:8f:96:f8:e6:88:63:
a7:4b:91:15:52:86:b1:8a:31:49:c4:db:7c:45:de:d6:fb:4d:
15:a3:b0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 25 10:37:37 2025 by rpki-client