Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
File: 4RlTX6w_pId5V5vOj8O0At7yy0Q.mft (raw, json)
Hash identifier: x/YI7A8JVSky4uZN5NWa7p/XVqA2W63nWEWEXBeEoho=
Subject key identifier: E2:CF:E1:44:E2:E8:AA:00:AF:A7:CE:7A:DA:D8:1F:D9:7B:2B:EA:43
Authority key identifier: E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
Certificate issuer: /CN=e119535fac3fa48779579bce8fc3b402def2cb44
Certificate serial: 019A71B7AF2F8FD62610E17746FCF5E5E582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
Manifest number: 06F6
Signing time: Tue 11 Nov 2025 07:00:54 +0000
Manifest this update: Tue 11 Nov 2025 07:00:54 +0000
Manifest next update: Wed 12 Nov 2025 07:00:54 +0000
Files and hashes: 1: 4RlTX6w_pId5V5vOj8O0At7yy0Q.crl (hash: kvmN2eWCUNCCb+RW5fTP1wRzz6zUZEIhx/YVxmW7jRw=)
2: soe--L3Zv3Ab_c4ax7SKPcclEEk.roa (hash: EM4MaU25MU3aJWehslBE3y3dfKuyrb7A7eUnc8kofN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:af:2f:8f:d6:26:10:e1:77:46:fc:f5:e5:e5:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e119535fac3fa48779579bce8fc3b402def2cb44
Validity
Not Before: Nov 11 07:00:54 2025 GMT
Not After : Nov 12 07:00:54 2025 GMT
Subject: CN=e2cfe144e2e8aa00afa7ce7adad81fd97b2bea43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e0:2a:c3:2e:4b:f1:7d:cb:fb:cb:cd:01:54:
86:ab:a8:b8:00:2a:6a:fc:93:6c:1e:98:a9:a7:39:
d4:02:35:2c:e9:f2:7a:33:09:a4:e5:a2:28:36:41:
6c:61:c9:04:c4:e2:36:06:80:bc:03:d7:97:af:40:
c3:91:29:24:e6:e4:0d:ad:a6:09:27:b5:4f:65:8e:
03:ed:1a:1e:b1:51:31:29:34:ad:0a:03:11:63:12:
64:74:3d:b6:eb:e6:dd:7f:59:3d:01:b3:7b:1e:e3:
c6:a0:45:e8:fb:ad:bc:cf:69:99:5f:cc:63:ec:40:
fa:85:f8:db:cf:d8:3c:64:87:a3:e4:60:06:d3:27:
8c:76:76:f1:de:50:26:b3:59:56:19:c4:e7:1d:a0:
e1:fe:da:01:1f:49:66:9b:cd:7b:76:70:6c:a8:34:
5f:1e:d3:55:75:ac:5f:61:38:0e:35:9b:3e:a9:2b:
f3:60:f5:d1:fc:90:34:4d:40:0c:8d:b7:27:7e:bd:
5e:c1:0c:41:49:0a:4c:ac:58:17:03:13:d5:c4:71:
f0:82:8b:6f:75:e5:28:ef:74:e3:cf:3d:00:e4:c0:
6a:ce:4a:b0:6a:68:49:e7:ed:82:97:35:1e:bf:98:
fc:2d:6b:0e:80:b9:4b:d6:76:2e:6d:a8:85:d5:58:
e7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:CF:E1:44:E2:E8:AA:00:AF:A7:CE:7A:DA:D8:1F:D9:7B:2B:EA:43
X509v3 Authority Key Identifier:
keyid:E1:19:53:5F:AC:3F:A4:87:79:57:9B:CE:8F:C3:B4:02:DE:F2:CB:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RlTX6w_pId5V5vOj8O0At7yy0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9b87d4-e0f9-423d-af9d-de9e27ebb25d/1/4RlTX6w_pId5V5vOj8O0At7yy0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:4a:24:da:8d:6a:21:c5:9b:33:ee:71:bc:10:ec:60:72:87:
d4:5a:2f:be:bb:d2:8d:7c:bf:4f:c8:7c:4b:b1:91:63:41:92:
9e:6f:7e:05:59:1a:3d:0f:74:2e:b2:bb:a8:86:ec:04:27:66:
04:c2:f0:7d:c3:9a:53:b4:80:a5:6c:7a:f9:22:79:9a:57:75:
eb:90:9e:04:2d:15:93:93:33:34:74:a4:99:d2:bf:2a:52:ba:
8d:ea:60:b5:71:cf:7e:8b:5e:89:4d:0d:d5:2c:af:4f:9a:11:
ca:03:35:e2:fb:1c:16:5c:cf:7c:43:59:74:82:4e:f1:4b:71:
ba:d2:96:f5:f6:f7:ab:21:e8:c8:2e:0b:61:0e:6e:bc:0c:2e:
8b:e4:2e:35:81:4f:29:fb:db:5c:e1:ce:62:f3:a3:73:48:bf:
5b:33:55:d9:8a:93:39:22:f2:34:8b:ac:88:a5:a3:18:23:e4:
d7:f9:43:d1:2f:a7:29:82:0a:7a:31:8c:08:56:60:d0:dc:54:
70:96:b0:fe:40:31:09:c9:bd:a1:d3:26:3d:b6:ee:5f:39:74:
f6:55:34:96:aa:3e:38:be:0e:84:ed:ee:7f:05:e7:0b:bb:ff:
18:6b:d4:f1:6f:02:0b:95:7f:b2:0d:87:ce:23:ed:b2:c0:e8:
f1:15:ba:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:46:55 2025 by rpki-client