Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: 8k3druQ5CK+h3TKTOknFfFG/GLErJqx97LbXRDzLj9Y=
Subject key identifier: D0:2F:35:9A:32:BD:F4:B8:CE:92:42:23:88:D8:31:57:68:6E:63:D1
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 0199FB7C7765C19F9B7D7F98D6D1D9508B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0A3B
Signing time: Sun 19 Oct 2025 08:01:02 +0000
Manifest this update: Sun 19 Oct 2025 08:01:02 +0000
Manifest next update: Mon 20 Oct 2025 08:01:02 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: /ywFe4HstLDXt/snGjTyzBEEG8J/uMq7FJC3OenwJ1A=)
2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:77:65:c1:9f:9b:7d:7f:98:d6:d1:d9:50:8b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Oct 19 08:01:02 2025 GMT
Not After : Oct 20 08:01:02 2025 GMT
Subject: CN=d02f359a32bdf4b8ce92422388d83157686e63d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:89:42:08:4e:3f:f3:e3:58:b6:94:ad:81:47:
13:33:ca:de:ba:6c:16:4e:cd:91:78:21:2c:25:22:
37:bd:34:f9:39:f5:fe:5d:de:7a:79:5d:6e:06:2f:
3e:c4:ea:8e:1c:64:30:08:90:a8:f2:b7:f2:b7:31:
19:3f:9e:e4:0e:f5:3e:23:da:d1:8f:d9:e9:7c:78:
7c:b7:fa:a1:03:17:37:77:c2:d3:37:96:0d:d7:44:
65:9b:b8:ae:04:73:00:14:ae:56:ce:e1:70:62:56:
74:91:26:c5:34:1f:2a:b6:a2:15:6b:a8:44:76:d4:
49:ae:92:d4:a2:f9:71:ce:d4:ac:d7:b9:fa:4f:f5:
3b:f9:b7:8f:b3:0d:2d:68:58:31:0c:23:48:7e:5f:
06:b1:40:49:d2:7a:5e:bd:78:38:a0:55:fa:bc:f3:
41:c3:4f:43:14:0b:ab:3f:aa:50:f5:3a:94:d5:6f:
60:99:f3:80:ac:40:bd:42:bd:01:45:2b:4b:33:03:
cc:17:b3:39:c9:80:fd:b4:48:85:e3:9e:41:8d:b4:
3d:b7:f5:53:5a:9d:05:20:b1:ac:39:3e:ed:6f:7d:
da:a0:0c:c1:9c:92:f4:11:a9:50:20:38:8c:bc:af:
67:7b:c0:74:30:77:6d:f3:41:95:c2:73:9d:82:3c:
39:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:35:9A:32:BD:F4:B8:CE:92:42:23:88:D8:31:57:68:6E:63:D1
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ce:bc:a0:6b:aa:ec:d1:64:48:34:54:ce:49:26:9e:e8:7e:
ce:25:99:45:3e:23:de:9a:6c:04:d3:c5:02:7d:c1:78:69:28:
25:93:fa:33:2d:2a:9e:02:91:26:95:57:fc:78:59:f8:1f:c5:
d1:76:27:9b:23:24:e1:00:e1:8b:7a:3b:78:63:7e:7e:99:a2:
21:d1:8c:1a:f7:03:4a:46:a8:69:89:b5:24:b5:81:e2:8b:a7:
4a:cc:5c:ff:b3:bd:8e:68:54:66:b4:42:b1:60:5b:ab:85:90:
2d:8a:9a:b1:2a:42:1c:43:b3:40:61:14:c9:ae:2c:f0:ae:2f:
ab:dc:23:5c:cb:ee:fc:c2:0e:4d:b0:ca:07:9f:14:af:51:bb:
4f:17:2f:a9:a6:22:f6:d9:45:0e:8f:29:38:60:63:13:f1:63:
c1:40:ef:13:3a:ed:95:28:6a:ec:ee:93:b9:a4:e1:95:7e:47:
a8:0d:9d:37:3c:f5:f3:6d:bb:9a:09:54:1c:07:13:47:f7:6d:
78:c1:75:a5:e6:6c:97:db:bd:66:2e:9d:c6:15:9e:db:d3:ba:
54:4b:17:80:f0:21:6e:ac:0d:9d:2e:5c:02:23:89:7d:69:0b:
7e:42:3a:a2:97:ab:9d:aa:ab:c3:d4:95:9e:03:fb:a4:a9:99:
05:a4:2b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:55 2025 by rpki-client