Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier: qdTc+Q0m2Nz7llxhiEzHDIMbzf/I9MaVj4AJWyzO8eg=
Subject key identifier: 08:45:C5:9C:AB:A3:40:24:7E:3D:1E:0D:27:6C:E5:7E:90:E2:13:11
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 019A72CAAABA304DE01EC21E6F025004EBF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number: 1047
Signing time: Tue 11 Nov 2025 12:01:15 +0000
Manifest this update: Tue 11 Nov 2025 12:01:15 +0000
Manifest next update: Wed 12 Nov 2025 12:01:15 +0000
Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: lc3gAF2JbpXmYXUFTGeExovHTSYs8P6KSk8mATkVLyA=)
2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:aa:ba:30:4d:e0:1e:c2:1e:6f:02:50:04:eb:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Nov 11 12:01:15 2025 GMT
Not After : Nov 12 12:01:15 2025 GMT
Subject: CN=0845c59caba340247e3d1e0d276ce57e90e21311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:f3:3d:31:41:d5:70:01:5b:b3:df:ad:0e:
fe:2f:cb:b5:bb:ef:c6:8e:02:e4:5d:23:52:0b:5c:
ed:1e:7a:5f:6d:bf:50:8f:db:7d:f0:52:6c:4f:cf:
e3:c3:f2:97:6b:7d:b3:63:17:95:3a:10:a3:46:4c:
17:c6:e6:ef:fb:e6:c8:05:d1:77:cb:42:cd:fc:4d:
d6:95:51:15:1e:8d:1e:ac:a3:20:9b:14:88:91:ef:
3e:1d:21:11:ad:ce:b5:03:db:0c:63:d2:85:fe:6b:
47:b2:ce:00:8b:6f:4b:ae:8d:bc:7e:97:de:96:94:
9f:db:4b:79:07:2d:1d:da:e0:d5:1b:b1:92:4d:56:
ac:f0:62:48:0f:05:19:94:75:1a:de:ef:cf:15:42:
a9:59:c0:36:f9:27:a0:1f:f5:0a:69:e1:e0:86:70:
1a:aa:b6:ee:10:9c:13:9f:0f:bf:83:6c:fb:62:20:
91:e7:19:53:58:f9:41:46:3f:ee:5d:cd:e8:d9:4c:
a7:00:34:27:26:00:57:c3:39:ee:fb:86:2e:92:7b:
21:c7:5c:bd:c4:71:72:7b:fc:8e:f9:ce:f3:1b:b1:
03:2e:a0:12:56:a7:7d:5e:7d:18:1e:4e:a4:4b:cf:
5b:be:4d:90:b3:76:b4:57:3f:a3:34:fe:af:7b:7a:
19:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:45:C5:9C:AB:A3:40:24:7E:3D:1E:0D:27:6C:E5:7E:90:E2:13:11
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:a2:72:d6:1c:79:3c:0b:dd:05:90:c0:50:1b:1a:ed:22:a7:
1a:d3:9a:fa:84:dc:d4:81:d2:7f:99:66:32:6e:4c:6e:e4:d3:
b7:ba:e5:29:f5:c3:65:57:35:7a:e3:c1:c3:a4:db:d6:3d:7b:
9b:05:d1:c4:c3:cd:e5:4f:d6:02:79:25:a5:a3:02:bb:8b:9e:
e5:19:31:fd:80:b6:2f:ae:d1:f5:27:0f:9c:b2:0f:b7:50:85:
67:bc:5e:c2:52:d7:f6:ad:57:af:70:44:2b:fd:6c:ff:d8:d3:
49:ad:d4:5a:04:6e:2d:5d:54:20:68:62:01:1c:00:49:76:9f:
cb:da:0c:06:bf:13:1d:6b:c9:1f:2a:82:d3:02:c4:0b:5a:03:
70:dd:4a:81:e2:1c:ee:6a:df:b2:a4:0d:8e:dc:e2:60:62:a0:
28:62:6c:6f:05:5c:60:c9:fa:ec:0b:39:6f:35:21:b1:c1:f6:
7d:82:00:bf:33:77:96:c6:e1:ea:00:03:8f:0a:af:32:8d:3d:
8b:2a:97:7d:29:72:48:ea:1b:31:c3:27:71:d3:76:50:96:a7:
d2:77:0d:ec:45:3e:d3:dd:ff:c0:4c:d8:2e:a9:41:0b:88:55:
78:a1:fd:79:0b:f6:a9:3d:ae:64:a6:6f:13:38:40:b3:8d:3d:
ee:d8:25:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:11:27 2025 by rpki-client