Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
File: 4sP8GYx3L1m47eUphWtS6heaTjg.mft (raw, json)
Hash identifier: PxomhVWZlmeF2DvQGf68tMfzu9EGRu/ibjLfKHkYJDc=
Subject key identifier: 54:56:74:AB:3F:43:AC:E5:AD:2F:D7:CD:F4:2E:38:9B:1B:FC:C4:C5
Authority key identifier: E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
Certificate issuer: /CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Certificate serial: 019A72265A4E3785D74434B06F5C957CDDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 09:01:47 +0000
Manifest this update: Tue 11 Nov 2025 09:01:47 +0000
Manifest next update: Wed 12 Nov 2025 09:01:47 +0000
Files and hashes: 1: 4sP8GYx3L1m47eUphWtS6heaTjg.crl (hash: VB7k9WH707n30YxPZaPlyiMX6TYHjIJMMPBpalZWYOQ=)
2: psTRvusZFk5Ps_Sd4pnp1hlanU8.roa (hash: 2FkietEjo3H8sm7po2MUV7JtW5puIthhRvn1WmaMes0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:5a:4e:37:85:d7:44:34:b0:6f:5c:95:7c:dd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c3fc198c772f59b8ede529856b52ea179a4e38
Validity
Not Before: Nov 11 09:01:47 2025 GMT
Not After : Nov 12 09:01:47 2025 GMT
Subject: CN=545674ab3f43ace5ad2fd7cdf42e389b1bfcc4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:50:b1:5b:60:66:bc:eb:13:cb:a1:b4:8b:5e:
64:61:cb:58:64:1f:f5:ee:94:1a:7b:2a:d0:00:bc:
4f:8a:fe:6b:e7:30:72:d2:2c:ac:8a:ab:2e:4f:a0:
97:59:11:e7:e8:98:c2:42:2a:cf:f0:af:df:9a:73:
cb:f1:da:7c:64:cc:b9:86:3e:df:4e:00:7b:55:01:
09:c0:f4:cd:67:ba:3d:b3:09:58:ed:ae:22:9e:bc:
55:17:df:2b:77:24:54:b9:6e:df:fd:84:91:cc:7c:
3b:ed:df:b6:1e:1f:e9:b9:a2:c7:01:01:65:fa:11:
88:a9:87:ae:dc:dd:dc:fe:50:90:b7:f3:0a:c5:58:
9c:2b:1e:82:bc:be:69:6e:39:52:2b:d9:05:2d:ae:
58:5e:3f:fb:27:2e:d3:f5:cd:c3:49:9c:b7:87:34:
29:1e:49:0c:75:11:7c:d7:9d:0c:ab:40:db:eb:60:
96:9c:23:0f:80:bb:56:3a:82:2c:f9:b5:6b:6f:63:
60:0f:78:49:09:81:94:a3:1a:ea:da:82:c7:06:17:
43:fd:c9:bf:a0:2d:24:16:30:65:20:02:cb:c8:85:
5a:12:39:1b:78:3f:98:62:73:ae:5f:ef:40:6d:c9:
03:8d:f5:f6:7c:f0:ec:4c:31:94:4e:16:09:11:aa:
3b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:56:74:AB:3F:43:AC:E5:AD:2F:D7:CD:F4:2E:38:9B:1B:FC:C4:C5
X509v3 Authority Key Identifier:
keyid:E2:C3:FC:19:8C:77:2F:59:B8:ED:E5:29:85:6B:52:EA:17:9A:4E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sP8GYx3L1m47eUphWtS6heaTjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/683ffb-65eb-4972-997a-5f29c9f549e8/1/4sP8GYx3L1m47eUphWtS6heaTjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2d:9a:e2:83:54:c8:00:76:31:c3:8b:27:1f:15:67:7f:e1:
35:94:d1:b1:b0:b2:0a:fc:fb:21:04:43:c6:46:6c:ef:69:b2:
12:78:aa:8f:18:be:5f:14:d0:b0:26:20:86:48:25:a5:c7:2a:
83:d6:11:28:a1:fc:a3:17:f2:14:9c:0f:be:a0:cb:d5:b8:60:
aa:76:dc:3d:ac:91:41:d6:2d:d9:e7:e3:87:04:ff:3d:89:6b:
08:84:08:ea:e1:c4:bb:4e:59:99:f4:a4:5e:59:03:81:b2:72:
d6:42:70:c1:82:ea:4b:9e:bd:63:30:25:b7:a4:1f:91:c1:12:
2a:ef:06:8e:51:8a:a6:ed:46:91:dc:4c:7a:bb:52:4a:34:fd:
4c:18:66:23:58:b5:4e:00:f2:cc:7a:5b:5e:9b:c0:29:44:e4:
c4:15:50:fe:d9:12:1d:25:ac:a5:56:5f:59:49:b9:2a:06:95:
c1:d2:c6:ed:50:a2:9e:2a:94:e5:14:7d:96:96:b8:5b:87:6d:
bc:10:cc:a6:f9:8b:46:e2:c7:ab:c8:40:0f:0b:80:dd:66:df:
7e:89:c1:b2:95:4b:a8:ad:6d:2c:b2:75:e0:d5:66:35:76:63:
45:50:05:33:50:32:a2:93:a3:08:15:13:66:10:90:13:37:6b:
46:9f:c9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client