
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
File: 4I4Xp4G2QRmjpjVwACVPW3lbDag.mft (raw, json)
Hash identifier: Gp7Qh1vZnEwTJXEYl4mSJXg3AwDt+xr1GG2UVAS29Pw=
Subject key identifier: D1:F9:94:97:4E:AE:CE:7B:03:67:BF:A0:32:E2:82:BD:6B:2F:BD:29
Authority key identifier: E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
Certificate issuer: /CN=e08e17a781b64119a3a6357000254f5b795b0da8
Certificate serial: 0199FCC60F827991000DC13D40FACC0BE7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 14:01:02 +0000
Manifest this update: Sun 19 Oct 2025 14:01:02 +0000
Manifest next update: Mon 20 Oct 2025 14:01:02 +0000
Files and hashes: 1: 4I4Xp4G2QRmjpjVwACVPW3lbDag.crl (hash: g3tHk1A88e4tOxCipUGaPDrtcq+PwmQLgXPNFWpuUu8=)
2: pJOGzrT_mgxPYsaglIaSM0kIw4Y.roa (hash: Ut0Tk0l/Yu9pyhP6CIl9TJN11JVJBhwd7Wz1zOCHBnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0f:82:79:91:00:0d:c1:3d:40:fa:cc:0b:e7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e17a781b64119a3a6357000254f5b795b0da8
Validity
Not Before: Oct 19 14:01:02 2025 GMT
Not After : Oct 20 14:01:02 2025 GMT
Subject: CN=d1f994974eaece7b0367bfa032e282bd6b2fbd29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:a9:13:9a:4d:fb:67:cc:2c:ff:f0:2a:87:
db:17:6e:7a:be:42:ca:b3:96:08:67:87:4e:3d:03:
6a:30:48:aa:4e:ff:77:98:1b:96:13:26:d5:81:35:
81:47:e1:1a:46:28:fb:cd:83:34:11:3a:85:22:ea:
63:bc:bc:83:5b:89:0c:a9:0c:f0:90:7c:d5:d7:27:
2b:4a:fc:19:71:9b:17:ea:2f:7d:8e:25:fc:41:c9:
8e:9b:d7:ca:41:05:45:ab:8f:9a:e7:1b:99:fb:72:
32:57:1c:7b:20:75:0d:58:fa:dc:9b:61:57:6a:88:
39:f0:2b:a3:b4:03:d2:e9:cc:10:46:79:b4:5e:6d:
12:56:f1:97:1e:ea:a3:ca:cc:ae:1a:a1:37:98:17:
25:8e:5c:22:d3:11:a8:00:c0:b2:99:66:4f:1d:ff:
eb:17:5a:7b:8a:eb:99:98:ce:79:fd:f6:06:98:89:
07:6d:94:98:f2:e0:22:f0:1d:f0:04:a4:4c:a9:d5:
08:eb:68:c6:89:8f:18:56:ed:8a:18:4d:a2:3f:4f:
9e:18:32:cf:15:e8:57:4c:d4:bd:99:f1:29:e9:92:
36:aa:ef:ef:2b:d1:bd:ad:66:9c:63:c6:41:c9:a8:
f9:f3:d1:93:86:b4:28:44:bd:b0:99:01:13:e8:2c:
62:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F9:94:97:4E:AE:CE:7B:03:67:BF:A0:32:E2:82:BD:6B:2F:BD:29
X509v3 Authority Key Identifier:
keyid:E0:8E:17:A7:81:B6:41:19:A3:A6:35:70:00:25:4F:5B:79:5B:0D:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I4Xp4G2QRmjpjVwACVPW3lbDag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a14020-1bfb-4133-afce-d5e45f2ca879/1/4I4Xp4G2QRmjpjVwACVPW3lbDag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:fc:7d:8e:09:d1:05:f6:b0:87:a2:e7:c8:b7:a9:8f:8f:70:
45:f6:4b:b7:57:da:3c:0b:56:a6:1a:9a:e2:30:81:6b:2e:b1:
ce:5a:9b:b2:66:6e:cf:d4:b7:df:42:a6:19:0e:f4:53:bf:2e:
2b:53:8e:b1:49:13:57:76:19:05:ee:73:d6:9a:1b:53:f7:53:
32:49:c6:a2:37:2e:9e:45:31:ec:88:6a:dc:04:5f:9b:7f:08:
8c:11:be:ea:92:53:ff:b2:4c:1b:1c:f8:1c:95:ed:b8:d2:33:
80:3e:21:0a:7c:36:21:37:91:94:31:7f:c7:7e:f2:1c:38:5e:
9a:09:19:e6:db:7e:8a:e0:b4:1c:56:78:fb:be:d0:42:8d:e8:
3f:02:d8:3c:12:c6:53:5e:db:0c:dc:29:43:f1:72:05:45:9b:
c6:2f:db:c1:44:9b:5f:6a:35:15:5a:37:8b:5a:4e:11:87:0f:
93:74:e6:b6:5c:9a:58:dc:9f:b5:2c:23:4c:b6:82:e6:18:92:
c9:48:59:db:0d:a2:24:66:b2:83:61:92:6b:63:08:c6:33:92:
df:ec:f2:26:20:df:e0:77:c3:d1:1e:e1:b9:0a:5e:71:11:d1:
97:b0:11:37:42:ae:1a:5c:1f:af:57:87:09:c4:96:97:5b:91:
6b:ae:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:49:27 2025 by rpki-client