Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: vb5AELSSNFz1zaSjnPb0pa7sND5INkjT1xwocsFV5us=
Subject key identifier: 02:BF:26:7E:2E:AE:FD:8B:D6:B2:7E:47:F8:F3:14:75:D2:F8:26:82
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 019A26662730C80EBF5AB6C062377023748D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 05EA
Signing time: Mon 27 Oct 2025 16:00:20 +0000
Manifest this update: Mon 27 Oct 2025 16:00:20 +0000
Manifest next update: Tue 28 Oct 2025 16:00:20 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: ViFR+xWaoH0NAPYpj+tBIoKpizsd8PnFF6wNL7TFT4Y=)
2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:66:27:30:c8:0e:bf:5a:b6:c0:62:37:70:23:74:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Oct 27 16:00:20 2025 GMT
Not After : Oct 28 16:00:20 2025 GMT
Subject: CN=02bf267e2eaefd8bd6b27e47f8f31475d2f82682
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f8:3a:a6:49:8a:ee:d2:66:07:22:9d:7c:6a:
16:54:19:f9:df:42:a6:c8:17:02:f6:d0:e9:7b:46:
b3:99:41:ed:46:7f:3e:b1:df:e3:5a:9d:28:15:19:
e9:1c:cd:d5:55:b3:4b:8b:14:2b:60:c4:99:62:df:
d9:29:d2:73:0a:62:0f:61:25:d5:17:01:fd:e9:ba:
57:94:27:9d:bc:a8:5e:02:a4:6e:46:b9:c5:d3:77:
23:27:43:89:4f:e0:5a:09:8d:cf:dd:fa:c5:a6:d1:
63:e8:24:73:70:f9:26:c2:82:07:26:72:4d:ba:12:
13:a0:25:81:3d:10:15:a0:30:64:ea:dc:c5:09:51:
cf:8d:4e:37:af:1a:be:9f:c9:90:48:f0:c0:a8:c0:
48:1b:2e:7c:e7:76:8d:40:8b:1d:de:ef:83:37:e0:
5a:73:08:f1:5f:e8:12:20:52:59:c3:6c:b6:ea:d0:
ef:1e:8d:c1:71:67:2b:38:97:87:cc:ea:ca:e7:a9:
f0:b6:06:33:28:fb:7f:02:fd:52:01:c7:8d:a9:cb:
ff:d4:5e:46:28:ea:be:53:a6:1a:49:72:d8:c1:55:
bd:a0:e8:00:15:60:1f:49:bb:de:82:e8:b4:05:c4:
46:1a:29:ee:86:1c:99:41:a2:0e:98:c3:4e:98:5f:
df:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:BF:26:7E:2E:AE:FD:8B:D6:B2:7E:47:F8:F3:14:75:D2:F8:26:82
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d0:d7:44:58:89:c7:d3:11:7b:ed:42:c2:9a:db:8e:f0:42:
fb:01:3c:c6:99:b4:b4:92:8d:56:1b:c9:19:87:63:07:39:93:
aa:57:8e:69:8e:50:80:70:aa:c2:cb:0a:39:67:43:9c:51:a2:
76:47:b6:1f:be:89:10:ba:bb:a4:a5:43:5a:f9:1c:ef:81:d8:
09:61:9a:44:32:c6:83:c3:a1:06:76:7c:80:2c:91:76:7d:9b:
f8:35:f4:47:a5:4b:ff:2e:3e:95:76:61:61:63:3e:7f:a7:88:
28:3c:70:85:c8:4c:01:6b:70:cf:29:cd:06:f1:67:4a:5a:28:
de:c6:a4:c6:52:44:5f:bf:8d:10:a6:14:90:45:2d:e5:81:25:
d0:d6:29:0b:bf:4e:22:f4:e5:b1:a4:15:d3:06:36:6e:bd:7d:
2e:73:ad:98:bd:4d:15:e5:9a:81:85:e2:4e:fb:9c:02:6f:70:
eb:12:db:97:eb:e2:a2:5e:8d:93:ee:5c:0a:4f:e9:b2:24:00:
0f:23:a5:a6:e9:62:95:21:6d:e6:03:79:fd:7b:89:05:46:1c:
42:e8:a2:e0:61:8b:66:1b:6b:4e:23:a0:60:90:41:5d:1b:30:
15:1e:6c:6e:cd:50:af:07:5f:59:5c:20:7c:95:15:cc:26:e6:
7b:8d:ac:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 21:08:50 2025 by rpki-client