Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: IO7qWoHvn5HD6i5oIg+JNUR+hf0VfnK8TBKCv93ONCQ=
Subject key identifier: 62:C6:24:FD:78:FF:71:E0:7A:DF:9F:B4:D6:0A:40:39:C4:EA:1A:62
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 0199FF229855EE051CE28E0B3EACE5CCC3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 0F9E
Signing time: Mon 20 Oct 2025 01:01:21 +0000
Manifest this update: Mon 20 Oct 2025 01:01:21 +0000
Manifest next update: Tue 21 Oct 2025 01:01:21 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: hDXDqYr9hIaqHb/le9Ppcln7KHVt+la9sV7m4BG2OlI=)
2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:98:55:ee:05:1c:e2:8e:0b:3e:ac:e5:cc:c3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Oct 20 01:01:21 2025 GMT
Not After : Oct 21 01:01:21 2025 GMT
Subject: CN=62c624fd78ff71e07adf9fb4d60a4039c4ea1a62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:39:15:40:bb:94:18:c2:4f:c2:4a:86:8d:
86:a8:2c:18:e4:55:75:98:e6:5a:90:7b:67:65:67:
1f:e3:a3:c4:a9:40:8e:55:05:ab:0a:75:cc:b9:7b:
81:e6:39:a0:7a:87:00:7a:98:e8:c6:a9:58:be:a5:
7a:ce:b2:a3:66:6f:62:ca:47:3e:3d:70:da:9a:1a:
dd:e5:58:60:78:04:43:e8:1c:cf:8c:c9:83:42:f8:
b3:aa:99:16:f4:f0:f6:c4:06:e9:5b:5c:75:bd:f1:
4a:4a:f2:c6:e8:d3:5e:00:df:40:b1:67:45:e7:a7:
04:d5:64:be:29:b5:ce:a1:81:24:d0:1b:0f:f0:a3:
09:90:00:94:ab:33:9a:0f:1c:89:91:56:fb:94:70:
dc:80:8d:7f:72:18:ce:89:0f:a7:a6:75:e1:ca:80:
ed:f3:8a:a3:b1:1e:3f:a1:0d:49:55:39:8d:b5:05:
a4:44:0a:ee:9c:2c:4e:ad:70:dd:77:df:1e:fb:8c:
c4:6f:73:8e:4e:99:98:2a:b9:1c:4c:54:0f:83:b6:
50:51:55:dc:c6:92:8e:17:38:f9:e8:87:c8:57:82:
13:02:9e:8a:cc:da:29:68:d7:d1:f3:15:ff:f9:5a:
15:f7:08:b8:01:29:a9:0f:9c:ab:cd:7f:fa:52:d9:
8e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C6:24:FD:78:FF:71:E0:7A:DF:9F:B4:D6:0A:40:39:C4:EA:1A:62
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:34:3a:1a:7c:b4:40:74:32:e7:4c:f4:c2:58:0e:f3:43:eb:
11:ad:80:af:3f:35:f3:5f:d1:e1:3a:37:b6:20:6e:cc:2f:6d:
5e:47:76:84:84:9a:7f:69:de:4b:42:a8:60:3d:0f:f4:c9:40:
8c:ce:7d:cc:97:53:f0:7e:89:7d:ac:30:30:3c:f4:6c:e8:1c:
0e:46:3d:9d:df:94:0f:04:e9:60:3b:4b:71:ed:1e:0b:48:26:
07:a0:52:8f:76:3b:e4:0e:86:eb:b6:49:7b:07:5c:8b:13:e7:
5a:c4:de:bc:1a:d9:50:86:0b:65:0f:a5:10:78:61:59:d9:ec:
84:44:ec:01:99:49:ee:16:5d:c2:b4:82:29:de:2d:b2:4a:e8:
51:c8:e0:e6:b0:15:08:9e:55:0f:38:3c:51:4f:d3:68:89:79:
b9:cf:a2:9a:01:6b:b8:12:7c:47:9a:6b:f4:95:48:29:6f:c5:
40:6a:2a:e7:a4:1b:c6:6e:4e:9f:6a:1c:e7:79:0b:66:ee:04:
a5:78:2e:27:0a:60:23:7b:97:d4:4b:c0:a4:68:f4:25:24:c6:
e1:29:4d:02:1d:f1:bd:3c:2d:ac:06:f7:b7:b3:54:e6:c2:8c:
ce:ec:2a:10:1c:d5:0c:cc:47:a2:d3:f4:1d:a0:bf:7c:a2:a9:
6b:69:d2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:22:40 2025 by rpki-client