Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
File: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft (raw, json)
Hash identifier: V9vimlYOAZG7Cxjyib/2rn8wkzmtc8CjRjPcDyMJFas=
Subject key identifier: 1C:E6:A8:8E:5E:DB:86:44:E2:EF:7D:BF:BD:21:9D:B2:61:AD:55:3F
Authority key identifier: E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
Certificate issuer: /CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Certificate serial: 019A7149BC184FED2B97183D7C24E7D35F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
Manifest number: 124F
Signing time: Tue 11 Nov 2025 05:00:48 +0000
Manifest this update: Tue 11 Nov 2025 05:00:48 +0000
Manifest next update: Wed 12 Nov 2025 05:00:48 +0000
Files and hashes: 1: 4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl (hash: fslGyWNYefFJ2/GNGFQSd+QPkq6yc7VewLtkMnCqW88=)
2: WX9ifdPc509PIWH1MshzaQ9gKs4.roa (hash: N2NEfXL50JrESYal+4AtaFkCctqevfpLSA3CNFTMaFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bc:18:4f:ed:2b:97:18:3d:7c:24:e7:d3:5f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19db0c5b2d9610ef586e97fba1fca875006f3da
Validity
Not Before: Nov 11 05:00:48 2025 GMT
Not After : Nov 12 05:00:48 2025 GMT
Subject: CN=1ce6a88e5edb8644e2ef7dbfbd219db261ad553f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:51:54:51:ab:04:1c:c3:92:ae:a3:c5:99:47:
37:86:e0:7f:16:91:5d:84:6b:96:2e:18:77:de:9c:
e2:d1:35:0d:31:71:b6:ab:d9:9b:ca:a1:9f:c7:b7:
2d:90:54:9b:70:41:d0:c6:62:28:b5:49:5d:0e:bc:
78:34:d0:e6:dc:2d:9b:e7:d6:b0:8c:e9:0a:39:f5:
ec:25:52:87:70:e6:fe:7a:5e:62:3d:8d:1d:b4:fe:
86:c5:e7:2b:8c:e6:4c:5e:7a:08:36:6a:50:17:f3:
35:d0:e9:aa:99:36:fd:76:93:56:9a:f1:01:1f:0c:
a7:d4:56:f0:e7:5b:55:b0:d2:86:52:24:ab:fe:1c:
18:bf:f7:c3:c1:61:d8:8c:f9:65:73:d4:4f:b7:68:
7c:bb:aa:f9:8e:bf:29:28:82:0f:7b:86:b3:84:77:
e0:4e:b1:37:f1:fa:f3:c2:e0:be:e9:50:fa:0b:1b:
3c:26:07:ed:51:f0:39:d4:51:60:3e:a1:4e:55:ac:
91:2d:6d:17:4e:99:36:7a:4e:e7:db:fb:68:67:9d:
b0:57:c6:23:b5:53:f2:f1:3b:dc:74:1e:3f:bc:f9:
86:d4:96:eb:66:2f:40:60:63:8f:5c:20:9c:8e:b6:
83:16:24:95:9b:53:d4:e8:13:5b:74:1b:6e:9a:9c:
78:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E6:A8:8E:5E:DB:86:44:E2:EF:7D:BF:BD:21:9D:B2:61:AD:55:3F
X509v3 Authority Key Identifier:
keyid:E1:9D:B0:C5:B2:D9:61:0E:F5:86:E9:7F:BA:1F:CA:87:50:06:F3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z2wxbLZYQ71hul_uh_Kh1AG89o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6b78a5-4c5c-4383-87fd-0cf74be303ff/1/4Z2wxbLZYQ71hul_uh_Kh1AG89o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:50:9d:3e:b0:09:33:4e:10:2c:72:ed:0e:44:b5:57:9e:ba:
85:a2:67:c4:f6:87:04:1d:38:38:f3:db:17:de:94:9c:5a:06:
1a:12:a5:f4:b6:70:60:93:02:86:1f:95:3a:ea:f0:6b:53:5c:
5d:d4:23:5b:80:66:de:6d:e6:c1:ab:24:8a:94:e1:33:6e:66:
88:f1:9b:d3:14:c0:33:33:76:30:84:4a:3c:84:2d:39:f5:88:
5c:43:ac:08:ba:2b:4d:8b:7a:51:1e:5a:dc:04:29:30:8a:30:
3a:7b:93:97:9f:2b:88:ce:8a:31:54:d4:4f:0c:d4:7a:20:d4:
06:49:ba:47:f7:87:ad:0a:b7:87:a8:11:25:28:04:ef:ac:9c:
1e:c0:ec:dc:27:9e:f5:d1:a1:a0:26:3a:dd:3c:f9:99:84:06:
9f:0b:a3:2b:21:97:be:f2:4b:8c:f1:48:a8:54:d2:aa:dc:76:
c4:2a:aa:7c:be:82:46:de:4e:10:ba:aa:b5:07:52:64:b5:2d:
e7:76:22:42:cf:a8:bf:37:a9:8b:9b:ab:73:ed:a4:96:ff:a0:
c8:27:10:a7:d5:6b:72:12:7f:78:0e:63:67:53:34:50:1e:95:
29:48:2d:e7:7a:78:a0:9f:a4:93:6a:7d:f1:69:6a:c4:73:58:
d3:34:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:26 2025 by rpki-client