Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
File: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft (raw, json)
Hash identifier: yzp73mc1i5Yy8SOStzawnScR6SVxk8a2jNti5BLATME=
Subject key identifier: 0B:01:8E:61:13:A2:69:FD:E7:4B:2E:6A:C4:88:47:85:E7:F3:B5:6B
Authority key identifier: E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
Certificate issuer: /CN=e214eb35a35fd488860703b7990b8170af17912f
Certificate serial: 0199FB7CAFD7B74DD1AD41ADB9B4EDD4F702
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
Manifest number: 0920
Signing time: Sun 19 Oct 2025 08:01:16 +0000
Manifest this update: Sun 19 Oct 2025 08:01:16 +0000
Manifest next update: Mon 20 Oct 2025 08:01:16 +0000
Files and hashes: 1: 4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl (hash: AJW5JbC9fiAtKbo6b3UYFm/5PCqNT7gt/pvILQCuu9E=)
2: wxwsQanfQy5790A813fRANF-qCc.roa (hash: bJCA9RXeZ9EZ2+fSpx3hkdts4SbbKPXcBRLWj1SMUSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:af:d7:b7:4d:d1:ad:41:ad:b9:b4:ed:d4:f7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e214eb35a35fd488860703b7990b8170af17912f
Validity
Not Before: Oct 19 08:01:16 2025 GMT
Not After : Oct 20 08:01:16 2025 GMT
Subject: CN=0b018e6113a269fde74b2e6ac4884785e7f3b56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e1:50:21:f9:d2:14:c6:1c:8c:0b:03:64:61:
bf:fe:a7:ff:70:a6:b5:fb:ee:ee:6c:f0:d4:d7:ff:
85:43:e5:b7:2c:5c:3f:b5:cc:23:6c:0b:fc:e1:14:
1b:71:d9:7a:c3:2f:1d:b3:95:48:fc:95:49:3e:a2:
f2:22:16:f8:44:f8:7e:26:65:a7:8a:6c:0f:b7:35:
ee:07:17:0a:e4:9a:bb:8f:c2:d4:c9:e1:ed:6c:be:
61:6b:73:66:67:8c:b3:02:a3:b7:bb:1e:6a:cd:cd:
09:b9:28:92:05:4a:d9:2a:31:88:24:d9:70:6e:b6:
3e:af:b0:c2:45:12:c2:11:2b:81:f9:ac:13:c5:e4:
b2:75:b8:d4:0a:35:be:90:af:9c:b0:96:fb:a0:b1:
14:eb:bf:c8:9f:90:74:2b:6d:31:9f:d8:2f:76:2e:
1e:6f:f9:85:55:58:f9:0a:21:0c:f6:ac:62:1c:87:
b7:51:8b:16:22:0e:41:5d:55:79:59:f8:dd:3c:ce:
48:a4:fe:a2:71:8b:c0:29:e9:7f:a1:88:e3:5a:e5:
d6:31:a7:da:90:9f:e2:17:a7:fd:12:d4:26:32:00:
7f:68:a7:6b:be:0e:23:97:80:bb:ec:1d:d3:c2:53:
a6:0f:5f:74:9a:ab:bf:61:2a:05:79:60:c6:d4:6f:
9c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:01:8E:61:13:A2:69:FD:E7:4B:2E:6A:C4:88:47:85:E7:F3:B5:6B
X509v3 Authority Key Identifier:
keyid:E2:14:EB:35:A3:5F:D4:88:86:07:03:B7:99:0B:81:70:AF:17:91:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hTrNaNf1IiGBwO3mQuBcK8XkS8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/54be58-4175-407a-bc37-cc26d4316142/1/4hTrNaNf1IiGBwO3mQuBcK8XkS8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:ad:38:4a:9c:8c:06:60:56:50:e6:a8:b7:3f:33:2a:7e:0f:
3e:6f:bd:76:9d:c7:b3:3e:80:54:79:e1:63:9f:0a:b9:dd:d8:
dd:d1:79:3b:cc:8c:1c:63:99:1b:bb:45:71:31:65:ed:93:3e:
49:30:7b:c8:a9:72:c1:24:f9:8c:38:5e:08:41:05:12:03:4c:
35:13:06:fd:73:e8:2f:8b:02:56:f2:0d:e0:68:54:b0:ce:51:
83:86:a1:50:87:db:37:e1:5b:29:30:cb:01:82:ff:b1:7c:ca:
71:11:9f:1f:a5:d8:48:1c:55:9f:1f:b0:61:75:e2:0e:ac:08:
c3:c4:10:34:e0:44:c2:b7:d6:b0:20:d1:4a:cd:c1:87:ae:da:
74:0c:1f:0f:dc:7b:e3:30:ce:cf:5a:a4:89:e0:59:44:8a:d8:
8b:93:3b:17:a0:dd:e2:85:3c:3e:4e:1d:b0:6d:82:04:b4:1a:
b5:94:9f:78:99:41:5b:1b:2d:93:83:97:aa:28:16:5c:9a:f0:
36:7e:d4:66:da:cf:19:b0:2e:3b:c6:0f:65:c5:80:bb:56:57:
d3:17:2e:ce:76:c0:f8:c7:61:41:73:a2:79:8a:08:38:89:37:
9f:e9:70:91:f6:42:d8:62:fc:48:4d:23:0f:c8:5b:9b:90:0b:
52:19:00:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:49 2025 by rpki-client