Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: PnvN+0jNWdBsG/dUOmTIlHHN9LOz4IEYpk7Nb6t2y18=
Subject key identifier: 8E:E8:FA:39:DD:90:07:8C:CB:55:E5:D3:DE:09:DE:54:6C:F9:AE:6C
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 019A0AEF20284FC9BCAB6D0B4DC138FC4878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 0FFA
Signing time: Wed 22 Oct 2025 08:00:34 +0000
Manifest this update: Wed 22 Oct 2025 08:00:34 +0000
Manifest next update: Thu 23 Oct 2025 08:00:34 +0000
Files and hashes: 1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: QgpN/9Z/DxxkcCXgNYPYFiVZ9/wJd68nnmx5dyUXbYE=)
2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0a:ef:20:28:4f:c9:bc:ab:6d:0b:4d:c1:38:fc:48:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Oct 22 08:00:34 2025 GMT
Not After : Oct 23 08:00:34 2025 GMT
Subject: CN=8ee8fa39dd90078ccb55e5d3de09de546cf9ae6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:55:14:af:0e:57:76:ef:3f:de:f3:b9:4c:0c:
89:84:7e:f2:f5:77:1c:59:18:17:41:5b:ed:1c:1c:
7f:ff:8a:8a:72:59:6c:57:9e:5f:51:39:a2:b2:79:
d3:5f:2b:63:02:96:aa:40:21:c8:be:46:00:68:a1:
ac:b1:1c:2a:1a:9e:fa:28:1d:d2:0a:1b:93:e3:73:
45:bd:f0:93:1b:92:99:d0:3c:8c:a4:25:41:3d:44:
f3:1c:24:f5:6c:4b:b6:b4:c5:72:23:7e:45:97:f7:
b3:a5:36:23:59:8b:09:28:a1:9b:2a:c8:26:6b:63:
be:5f:7d:00:7d:56:8c:0a:8c:c5:e4:66:ec:82:44:
d2:35:b7:d8:82:55:fe:5b:1c:5e:1a:5d:a1:00:7a:
b3:82:ab:dd:90:cc:b7:61:9d:dd:46:1c:db:5a:02:
85:2a:49:ad:10:a0:f6:a7:02:3a:d2:bf:54:dd:f3:
a6:01:12:54:1c:4a:ac:db:cd:90:46:64:2c:0c:92:
64:d9:4e:a8:a3:ff:de:2d:37:cd:f6:8a:82:f7:6a:
a0:0c:ef:a7:66:3e:47:35:94:6d:b7:cf:b0:b8:4e:
62:19:1d:a0:a9:2a:57:e5:c2:19:a4:e1:5d:ab:22:
e6:ce:78:53:eb:e3:2e:9a:ac:bc:2a:c9:29:84:52:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E8:FA:39:DD:90:07:8C:CB:55:E5:D3:DE:09:DE:54:6C:F9:AE:6C
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:91:9a:22:ae:55:d9:bb:a8:a3:be:22:ac:3b:7b:0b:cd:6f:
86:9c:16:4e:3c:53:98:2e:b5:47:fa:2c:ec:a2:63:ec:f3:0b:
c6:33:85:15:06:bd:20:75:96:ed:04:12:e1:93:18:c8:0d:41:
da:58:5f:cc:26:f0:4a:07:9d:79:ed:07:7b:27:cb:9f:43:f7:
70:1a:55:e2:e9:16:dd:5d:ed:c7:ed:65:f1:7d:f4:c9:2a:a6:
1d:03:91:11:02:b2:bb:95:05:a8:b9:09:1c:59:3e:13:ea:9d:
f6:a7:12:f3:72:eb:ed:df:e0:4b:3e:57:fa:40:88:77:24:1b:
12:3d:47:9c:7e:37:d2:16:25:92:08:c5:36:31:6f:79:bf:89:
2e:38:93:5e:b9:e4:cf:b8:ea:8f:42:13:7b:8d:10:35:5a:0f:
8a:55:5a:3a:7a:e4:bc:2f:a4:46:67:8e:35:4c:10:fc:44:2d:
e9:64:1e:a7:20:9d:5d:1b:35:7d:e7:ff:f7:7c:68:1b:77:ba:
55:84:84:78:1c:d1:27:81:d8:2f:d3:4c:9a:40:dd:54:b8:e7:
9b:01:05:bd:5b:6f:f1:98:a6:51:9e:3d:bf:bb:dd:e4:87:83:
dc:d8:10:59:ce:eb:3b:50:8f:62:30:75:96:c7:31:01:5f:54:
c7:a7:d8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 15:11:26 2025 by rpki-client