Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
File: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft (raw, json)
Hash identifier: dcweEcUTDfyM936lklCSV2olFudPCyrWDPI1atVPEus=
Subject key identifier: EE:35:60:C6:AB:DE:F3:8F:C6:04:F0:82:EB:FA:47:6B:3C:45:7F:3F
Authority key identifier: E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
Certificate issuer: /CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Certificate serial: 0199FE46E5BBF40B8A530B8D50A0642AF7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
Manifest number: 06C5
Signing time: Sun 19 Oct 2025 21:01:23 +0000
Manifest this update: Sun 19 Oct 2025 21:01:23 +0000
Manifest next update: Mon 20 Oct 2025 21:01:23 +0000
Files and hashes: 1: 4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl (hash: B1MqYOBFk7ZGeZMMQAJMPOEZjjT8mjxUJXMLXeVqZyc=)
2: L4hlYKajNqyPnVVv7AIxEY7dFGs.roa (hash: dC2HFDiddhP1IjnshflG9aATVdgRr01kQzAT+rfJKcU=)
3: RLzTzgtpUaEv3Hac48DwnQ6OKRA.roa (hash: U62vygXnMfJooP0R/d4gF/Enn1AJ0PueFVZ40dCASXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:e5:bb:f4:0b:8a:53:0b:8d:50:a0:64:2a:f7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31f3656c6ed9a3f9a42c678a78a2e374f8e57d3
Validity
Not Before: Oct 19 21:01:23 2025 GMT
Not After : Oct 20 21:01:23 2025 GMT
Subject: CN=ee3560c6abdef38fc604f082ebfa476b3c457f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:c7:db:df:0c:dd:d6:4f:6c:02:72:66:41:
00:50:68:0e:68:31:28:ce:26:ff:53:77:03:48:57:
7d:0a:41:d9:89:cd:6e:ff:da:44:c8:9d:13:d9:88:
64:99:17:01:22:78:b2:84:d0:db:69:db:5a:a7:ad:
7b:80:4d:82:a3:52:2d:97:1e:8c:19:d5:2f:a8:51:
dc:c5:fd:40:b8:0c:ce:02:a1:19:24:0e:09:d0:37:
7c:8d:d9:99:f5:65:9c:fa:5e:88:9e:93:0f:d2:82:
c0:cb:3e:ab:a9:e5:55:a5:3e:92:dc:a5:a7:b6:10:
4d:19:8a:0a:5f:6f:35:1b:17:10:ef:f6:be:75:bc:
40:e6:7e:b6:1e:e9:51:49:aa:26:e2:f9:ae:83:ce:
0d:e3:d8:4e:14:cb:13:d4:55:4f:fb:20:37:60:38:
92:18:38:11:90:20:d3:d8:3e:5d:71:22:87:6d:64:
9d:93:1b:fd:65:24:67:2a:8c:af:f9:2b:88:40:5d:
e1:b6:5e:ad:ab:95:74:21:1c:71:9a:84:9a:95:2c:
5c:63:90:88:a0:9c:40:1a:20:3a:96:d5:82:c5:51:
7a:f7:54:08:0c:d4:8c:b8:2c:3c:95:c7:8c:33:4d:
0b:10:41:fb:fb:3a:9a:af:de:74:3b:ed:95:57:2f:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:35:60:C6:AB:DE:F3:8F:C6:04:F0:82:EB:FA:47:6B:3C:45:7F:3F
X509v3 Authority Key Identifier:
keyid:E3:1F:36:56:C6:ED:9A:3F:9A:42:C6:78:A7:8A:2E:37:4F:8E:57:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/02f8a1-3383-4d21-aa25-e733c262a382/1/4x82Vsbtmj-aQsZ4p4ouN0-OV9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:12:00:7b:1d:72:39:5a:82:69:80:7d:06:36:1c:0b:d8:1e:
a1:4b:a6:25:11:ae:dd:c3:3a:66:83:31:df:6d:ae:e1:ff:86:
45:c3:f0:3b:a0:6e:fd:cd:36:2f:78:5d:6d:16:d3:e8:8b:7d:
0d:e9:5f:ff:fe:0c:cd:38:77:b9:56:7c:69:ee:57:12:c0:09:
65:48:d4:76:36:e7:31:15:87:52:87:a7:01:d3:4d:e8:f2:11:
ad:5c:73:50:cd:e9:d9:f5:0b:ac:a0:f7:42:95:20:13:85:f1:
b9:0d:5f:59:b0:82:72:72:f9:b7:e8:d9:6d:3d:46:5b:c2:b2:
a2:e5:d7:45:ec:db:21:b4:fc:8b:40:3a:fc:9c:88:fe:6f:bb:
6d:85:95:af:94:25:6b:b3:18:8d:ed:07:07:4f:72:d2:61:24:
78:bc:80:42:7c:df:8a:00:c0:a6:60:d8:75:b0:51:90:de:47:
e8:75:2e:e4:5d:c5:2a:a4:4a:0f:f9:ee:75:42:c9:a3:6c:99:
b3:09:2d:31:76:44:de:4e:a6:10:fa:65:e8:20:0a:d6:0f:c4:
d5:2c:fe:a1:d1:7c:f8:5f:ca:ac:00:5a:b3:f3:c1:a6:91:3b:
10:dc:b5:25:97:ab:c4:32:84:37:a3:36:83:9a:e3:90:fa:87:
58:dc:a6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:10:39 2025 by rpki-client