Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
File: 4kycUM9OLawF4fBDKCJOIKRgXXc.mft (raw, json)
Hash identifier: 4etr7PvrgqliVPmgHepLTbrEG4IYQhNPFt7k1rEhlvI=
Subject key identifier: 09:29:79:4D:92:91:C0:FC:2A:BE:82:A5:E3:44:12:3B:12:90:D7:78
Authority key identifier: E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
Certificate issuer: /CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Certificate serial: 019A7338530A5CFE4484F491F02E929AA0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
Manifest number: 0E08
Signing time: Tue 11 Nov 2025 14:01:02 +0000
Manifest this update: Tue 11 Nov 2025 14:01:02 +0000
Manifest next update: Wed 12 Nov 2025 14:01:02 +0000
Files and hashes: 1: 4kycUM9OLawF4fBDKCJOIKRgXXc.crl (hash: D9zT7WhhYrWeC9lUKqiMxbOowkQSqHEi5ZDeggXOkj4=)
2: nmDQ5sn6P7ecn55KSWAGIphgo6U.roa (hash: fC95GsgDpVAuW+5RC4Zgw8UvFD2E/5JtR14wL2gAYEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:53:0a:5c:fe:44:84:f4:91:f0:2e:92:9a:a0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24c9c50cf4e2dac05e1f04328224e20a4605d77
Validity
Not Before: Nov 11 14:01:02 2025 GMT
Not After : Nov 12 14:01:02 2025 GMT
Subject: CN=0929794d9291c0fc2abe82a5e344123b1290d778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:8d:92:98:a6:09:d8:11:c4:44:e7:41:50:5c:
1d:fc:28:c3:9d:97:21:1a:a8:9f:47:1e:3d:23:ac:
c0:78:c7:64:28:64:ea:38:39:17:6f:b6:3a:d3:8a:
da:24:b7:e9:62:15:8c:f2:a7:4d:28:33:2a:8a:17:
55:de:31:88:20:ec:86:3c:46:94:8f:f2:48:87:dc:
74:c6:2a:51:10:ed:75:da:a0:fb:4c:32:e3:dd:8e:
5f:e2:2b:03:6f:e0:6e:c5:1d:97:f6:03:43:0a:20:
5a:95:26:a2:88:05:10:92:b5:59:d2:dd:34:71:b0:
e7:5b:fa:a2:46:44:89:b2:d8:c8:09:3a:1a:82:a4:
ff:2f:67:d1:83:3d:2d:75:99:15:af:76:f4:0e:1e:
39:27:85:d6:83:b2:7d:e2:39:e0:b7:6f:02:0f:e8:
90:92:9f:6b:37:cc:d8:80:69:01:0c:b1:fa:26:bc:
ec:a7:66:29:f8:33:ae:f0:06:c1:13:51:e6:b7:20:
d8:c0:d9:50:3e:5d:de:92:69:73:00:c1:aa:f7:5d:
d7:7e:a8:63:0a:4f:17:f8:25:9e:a5:ed:d3:90:13:
48:27:ad:31:db:5f:d8:d6:5e:64:2f:67:5b:dc:c4:
fb:5a:32:97:08:a0:65:72:ea:b0:05:50:a5:14:20:
78:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:29:79:4D:92:91:C0:FC:2A:BE:82:A5:E3:44:12:3B:12:90:D7:78
X509v3 Authority Key Identifier:
keyid:E2:4C:9C:50:CF:4E:2D:AC:05:E1:F0:43:28:22:4E:20:A4:60:5D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kycUM9OLawF4fBDKCJOIKRgXXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/317cc1-64c2-472e-914b-0bfb86884404/1/4kycUM9OLawF4fBDKCJOIKRgXXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:e6:a4:9a:bc:a9:b3:80:47:aa:0c:14:8b:6f:16:ad:e3:a9:
14:41:a5:d7:9f:e6:d1:35:c6:2b:b5:74:fe:0a:08:65:45:67:
5e:7b:ca:62:c9:90:1e:fa:88:4a:76:0f:e2:34:2e:29:1f:50:
77:76:1a:df:51:d9:55:8b:73:cb:f9:6b:40:d2:20:a2:7e:4a:
80:4b:86:4b:16:c8:8f:9c:ff:7b:52:13:e0:fa:92:59:d6:c5:
12:26:87:21:e2:40:f2:ef:06:35:ad:0a:64:5d:22:5e:bf:d0:
67:c7:43:96:05:5a:cb:7e:f3:08:31:2b:63:dc:f2:5a:b8:af:
a4:1c:3e:43:45:2d:66:53:99:f9:e2:5a:e4:19:da:99:87:72:
c4:42:60:4f:88:6d:cc:88:7b:ae:b7:34:36:6b:44:9a:1f:e9:
81:d2:f5:b4:53:c4:83:d9:47:3b:9c:7f:b4:46:d9:8c:5f:6e:
b1:51:a7:b3:9c:3b:ac:f2:a4:7d:68:8d:9d:62:23:c2:cb:ce:
5d:44:c6:75:26:74:23:c7:bc:e8:45:72:66:eb:d2:73:a1:cd:
7b:22:f2:8c:da:ab:79:ff:c6:c3:3f:32:b0:8b:eb:95:5c:fe:
2e:7a:15:49:53:b9:dd:4d:f7:21:2e:6a:f8:85:de:d4:30:ce:
fa:75:67:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:16:41 2025 by rpki-client