Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
File: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft (raw, json)
Hash identifier: gmCqVsQ3fa2rX02njz2t87J6RLsGMjiTFR+Vk3oUDC4=
Subject key identifier: 93:62:70:54:95:B6:15:68:5F:A6:78:DE:30:DB:FA:E2:F0:66:B3:4F
Authority key identifier: E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
Certificate issuer: /CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Certificate serial: 019A714A23BCADC6C0F9A450A451EF2C9B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
Manifest number: 171D
Signing time: Tue 11 Nov 2025 05:01:15 +0000
Manifest this update: Tue 11 Nov 2025 05:01:15 +0000
Manifest next update: Wed 12 Nov 2025 05:01:15 +0000
Files and hashes: 1: 4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl (hash: 5MDkI7Si5jkuB2ZPhshUJwv/CyJPRLiCpd9attcj65Q=)
2: PmKzLROtlSNpGVP9Gabn59_vPcQ.roa (hash: 4+SnbeNGMFNkaQG14haNRuuikDneIrgDVYY+Z1QI1eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:23:bc:ad:c6:c0:f9:a4:50:a4:51:ef:2c:9b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31aba3c2f56283ce5c74bce405844c1591babfc
Validity
Not Before: Nov 11 05:01:15 2025 GMT
Not After : Nov 12 05:01:15 2025 GMT
Subject: CN=9362705495b615685fa678de30dbfae2f066b34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:e2:43:a7:89:02:f3:07:3e:5c:1d:0c:a7:
e0:bd:e6:42:0a:fb:9d:89:b4:20:9b:f4:03:4e:7b:
4c:7f:4b:31:dc:2b:b7:46:64:40:53:da:31:0a:cd:
f6:3d:0e:91:df:fb:62:34:3f:e8:55:a7:9c:c8:ff:
ce:2f:0a:b4:a2:77:80:10:b6:19:15:b5:39:fc:86:
6f:5f:6f:8a:b1:79:76:27:2c:80:a5:42:2d:3f:57:
5f:11:f3:c9:9c:fb:42:23:84:41:ba:ef:7f:d2:a1:
c6:c1:d4:a5:f2:03:e9:b8:d5:91:9f:66:2a:71:ae:
dc:d3:97:c0:86:c7:6e:ad:90:60:b4:4d:47:b7:60:
3c:d1:e3:5f:7f:70:f5:fb:31:9e:b8:cb:44:4b:5d:
48:fb:8a:bd:c3:d6:cc:86:8e:cd:25:a5:9d:c9:04:
23:12:f7:6c:08:08:a6:67:a4:cf:23:d2:32:0a:93:
ab:7a:ec:43:40:d8:15:4c:d3:6d:ba:32:44:4a:4a:
7e:3c:c7:36:5e:82:34:9c:96:af:b6:f2:a4:73:36:
98:d8:4a:de:2d:fd:2f:85:25:f9:f0:6c:f4:09:67:
64:e0:6b:3d:84:80:17:bf:e7:9e:1c:ea:ba:56:e3:
90:db:05:fe:ef:93:29:bb:b0:62:5a:af:63:9c:fa:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:62:70:54:95:B6:15:68:5F:A6:78:DE:30:DB:FA:E2:F0:66:B3:4F
X509v3 Authority Key Identifier:
keyid:E3:1A:BA:3C:2F:56:28:3C:E5:C7:4B:CE:40:58:44:C1:59:1B:AB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xq6PC9WKDzlx0vOQFhEwVkbq_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f83073-9e80-42f2-b0a8-5f28137a7658/1/4xq6PC9WKDzlx0vOQFhEwVkbq_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:8c:20:5f:fd:31:16:ef:c3:2f:e8:c1:4b:9a:54:a7:64:
c4:5b:a2:6d:de:50:e5:f8:63:8c:fa:86:dd:50:be:76:a1:d4:
c3:e6:27:3b:dd:a9:e0:67:f3:ff:0d:ca:73:b5:c3:75:3e:00:
7a:a4:5d:a1:81:24:da:5c:52:87:df:ef:e6:c1:e8:ea:bc:21:
a2:ff:67:84:86:e7:dd:19:50:b3:d5:d3:f2:77:aa:88:94:7c:
73:19:11:4f:9a:c4:28:0e:62:52:4b:3d:ad:b0:d3:b7:36:bb:
3c:7d:ee:7c:de:1a:dd:04:03:82:fc:e7:cf:6f:9c:23:5e:9e:
b5:4c:18:79:60:b5:7c:8f:88:dc:0d:54:78:c0:18:8b:20:65:
fb:f9:1a:4c:ac:07:3d:bc:b4:7f:79:61:90:b9:cf:77:f7:e6:
32:c1:54:33:45:fc:11:a8:77:5c:d9:9c:c3:72:17:3b:16:4f:
ca:65:f6:01:2d:27:14:52:1e:c8:49:bb:bd:77:4a:12:db:86:
53:90:9f:75:09:73:0f:9d:d8:df:9f:44:a7:a4:a1:b1:68:6b:
26:64:32:ff:ce:61:e5:e5:72:2c:42:0b:e9:a7:81:2e:f1:6b:
1a:f9:54:a5:36:88:21:55:49:84:f2:28:f3:ea:f1:53:9d:54:
9a:10:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:14 2025 by rpki-client