
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
File: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json)
Hash identifier: yT41gR0LkzVBYr0yw+pxaKTtiRhO0eZVjxz1RcWnZX4=
Subject key identifier: 45:62:9E:68:A4:08:65:B5:AF:40:A1:A5:FC:3D:7B:B3:BA:F6:5D:D6
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Certificate issuer: /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial: 019A00DA332DCE34F697634E01341E4E352A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
Manifest number: 141F
Signing time: Mon 20 Oct 2025 09:01:31 +0000
Manifest this update: Mon 20 Oct 2025 09:01:31 +0000
Manifest next update: Tue 21 Oct 2025 09:01:31 +0000
Files and hashes: 1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: 1nWWHKC2DxXxUZ1A7MJZPtJcdhqmadi2eNgChNIWSzA=)
2: yfb_qPLjpTR6E53AWD8zAEu3mD8.roa (hash: ewXjqJ1u8QGc/DB2xhFt7iKmK54tjMWGPVl8lml9NyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:33:2d:ce:34:f6:97:63:4e:01:34:1e:4e:35:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Validity
Not Before: Oct 20 09:01:31 2025 GMT
Not After : Oct 21 09:01:31 2025 GMT
Subject: CN=45629e68a40865b5af40a1a5fc3d7bb3baf65dd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:74:04:15:31:ac:0d:03:2f:19:fa:64:be:d7:
ca:56:12:64:6b:22:c1:f2:b8:0f:a1:be:5f:76:7b:
45:fd:bb:f4:e9:19:78:9c:c1:b0:27:7c:6e:23:80:
7f:b7:d5:a8:37:a5:b9:e9:90:ff:c5:02:a6:bb:71:
66:6c:a1:43:17:ac:d6:f7:37:8f:71:75:52:93:67:
08:39:79:fe:43:4f:7c:8a:05:f6:86:00:06:ed:46:
c2:7f:46:bc:c6:da:b9:e0:4f:d1:e8:22:55:9d:9a:
5a:93:d0:9e:b9:18:ef:50:1c:a6:8c:cf:8c:28:00:
ca:81:66:79:0c:81:11:76:e7:7e:ff:f2:59:f3:1c:
eb:5f:b9:0a:9a:8d:da:a4:4d:ea:6a:e7:ce:0e:04:
45:6d:ed:b0:af:07:fb:8a:fc:4a:7a:1a:60:df:ba:
70:8b:d6:e2:7e:31:c6:a7:05:fc:c0:90:29:b1:92:
1b:e8:7b:49:83:f8:a0:ed:da:cc:16:8d:d9:b3:15:
a8:53:34:41:a9:a1:e5:da:7f:41:f4:00:ec:e0:64:
ae:fe:c6:d7:02:65:46:67:f3:3f:30:d6:6a:ab:99:
3c:7d:74:0f:0d:e6:5b:86:6b:cb:4c:45:68:5f:9f:
80:61:1b:e5:a5:a8:c2:1a:eb:28:b2:19:c4:5c:fb:
21:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:62:9E:68:A4:08:65:B5:AF:40:A1:A5:FC:3D:7B:B3:BA:F6:5D:D6
X509v3 Authority Key Identifier:
keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4b:84:55:6f:88:a6:14:06:6e:51:7b:ec:d8:b9:05:65:10:
8f:65:60:c4:93:e4:e6:71:4e:c4:fb:8b:73:57:f8:c3:cb:26:
f5:2d:fd:36:6d:c0:da:b8:a2:77:0f:1c:61:12:44:a2:16:b2:
eb:2a:e9:29:4d:2c:1e:55:b6:43:11:cd:df:75:d7:2d:25:17:
2a:b7:bd:3d:35:d5:a3:27:51:58:e7:6a:fe:66:1c:85:01:ae:
6e:cc:e4:53:88:5a:db:be:46:24:71:9f:6b:9f:cb:6f:09:c5:
c8:db:73:31:0a:08:86:3b:ae:11:2c:e3:28:70:2e:1f:39:9a:
fa:1c:02:da:9f:02:ef:4e:e4:44:aa:af:60:89:e2:ce:0d:f7:
69:e2:da:e0:f9:a2:8e:f2:14:15:a9:32:2c:20:48:50:29:21:
16:64:51:b9:52:50:d8:a4:aa:eb:62:a8:9a:40:68:2d:6e:29:
32:da:6c:ad:a9:3e:a8:4d:4d:88:e4:51:de:7b:be:e2:77:c2:
bc:ae:ee:1d:9b:a7:c9:23:47:9d:07:9e:ea:89:5a:54:ee:6a:
43:9f:09:5d:ee:d0:c2:58:7e:57:5c:fd:d6:a0:88:72:09:34:
67:a7:54:5f:a0:2a:82:ff:34:55:97:97:27:f1:71:fa:d2:8a:
bf:3d:b7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:43:56 2025 by rpki-client