Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
File: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft (raw, json)
Hash identifier: 4IrekpP63T5LGUBJXUKryVUcJ7ZGkP/is3kosITdU6o=
Subject key identifier: 4D:EC:02:84:72:77:42:9A:99:50:FE:7C:92:69:C1:97:FD:BE:41:D9
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial: 019A71B8DFFDEE62978B177F76EB0B0843CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
Manifest number: 1722
Signing time: Tue 11 Nov 2025 07:02:12 +0000
Manifest this update: Tue 11 Nov 2025 07:02:12 +0000
Manifest next update: Wed 12 Nov 2025 07:02:12 +0000
Files and hashes: 1: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl (hash: uukHHfnewR0TJ819eakicGslwfEZ3vhi+htbEwLEPj8=)
2: BiNIPlrjeE3rdm2XK22vRf-wuzQ.roa (hash: ezcE9QgtvtC5wwnkaiaobICKGA7cBVTWIAYbMzMm22U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:df:fd:ee:62:97:8b:17:7f:76:eb:0b:08:43:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Validity
Not Before: Nov 11 07:02:12 2025 GMT
Not After : Nov 12 07:02:12 2025 GMT
Subject: CN=4dec02847277429a9950fe7c9269c197fdbe41d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c3:93:0f:d4:6d:92:33:b8:9f:af:db:12:ca:
ed:15:89:41:3a:cd:cb:30:cf:ed:fd:39:62:97:f2:
b1:ac:d5:76:5d:f7:74:dd:90:d8:96:59:14:0f:a5:
94:2c:ab:c6:fd:31:bd:f6:96:8c:19:40:db:b0:91:
19:e0:0f:18:26:5b:b6:42:6c:d9:9c:a2:a0:11:12:
36:53:80:89:64:a0:37:4f:2a:17:6d:af:ad:1d:c0:
32:8d:bb:4d:0b:bd:55:5c:61:4c:bc:63:44:b7:1b:
fb:9e:4e:db:dc:f2:41:27:c9:a5:6f:c6:51:a9:f1:
09:ea:af:fd:29:be:e9:a4:54:1e:62:67:12:bc:09:
07:1e:14:95:ee:46:c5:53:c1:85:da:9f:03:6a:b0:
b3:96:76:10:c6:06:65:40:1f:c9:fd:3a:a9:15:b7:
ee:f1:eb:e4:85:88:1e:4e:0b:35:d4:91:e2:24:14:
7c:d7:35:0a:4b:49:c4:90:23:17:35:53:9d:2e:a7:
6c:f2:8d:a9:7e:1c:ce:82:65:0b:ae:51:75:96:f7:
8e:c0:af:a3:6e:5f:e7:04:9e:c4:14:26:24:80:4b:
a8:3d:ae:cd:a3:e3:59:64:af:e1:60:37:23:75:18:
26:ab:bd:f4:52:f0:29:4b:e0:a4:32:78:78:4d:bb:
23:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EC:02:84:72:77:42:9A:99:50:FE:7C:92:69:C1:97:FD:BE:41:D9
X509v3 Authority Key Identifier:
keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:62:06:79:09:8f:d9:bd:36:dd:b8:96:9b:6f:e3:da:cc:7c:
f1:46:fc:e7:8b:26:ab:09:10:fa:a4:18:9b:b6:25:c8:6a:d1:
ff:bf:e2:1f:38:e0:0d:87:6f:1f:ca:de:d0:a4:01:92:3e:e4:
79:c9:66:51:c7:f6:87:8a:f3:7d:99:81:28:88:76:88:b1:0c:
96:ba:7a:34:8a:1c:2a:50:65:c7:d1:01:97:38:3b:46:1c:9b:
f6:03:e4:5f:68:21:fa:c5:c7:05:b7:6c:a3:2f:0f:3b:bc:3d:
f2:2c:be:d7:3a:19:9c:29:ef:2f:5b:1b:28:48:9b:97:3e:2e:
9b:f2:3a:31:28:df:17:1a:56:c5:b3:4c:ce:1c:88:91:d4:d0:
69:ce:d9:77:cb:e1:88:08:fa:1a:c1:e9:d9:ab:f4:8e:73:8a:
83:02:19:e4:dc:41:5c:3a:2d:3c:53:04:53:68:b4:4e:3b:68:
22:73:e1:92:56:d1:d3:21:c6:4c:34:62:2e:a1:de:f2:b7:fb:
ba:ce:8c:ad:7c:ca:b1:6e:b1:41:3b:cb:3b:c2:82:7a:e6:ff:
05:4b:e2:df:0b:6f:d7:4d:73:b8:96:2e:d9:99:5b:64:1f:a8:
d5:2c:d2:25:5e:b3:4e:6b:65:7c:70:7e:1b:ba:8a:14:8a:53:
35:0b:e6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:04 2025 by rpki-client