Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
File: 4GK7krvun23ndX0lbUj2biB_RK8.mft (raw, json)
Hash identifier: 6E8NamffO3stmNQ5zn13PffsJBpTkLy6ma/3YjjwhXE=
Subject key identifier: C6:2F:7C:03:F4:B0:A7:56:1E:7C:FD:DF:48:10:B7:17:D0:EA:27:D7
Authority key identifier: E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
Certificate issuer: /CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Certificate serial: 0199FC2156E8C127756B5F522D7C475619B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
Manifest number: 0608
Signing time: Sun 19 Oct 2025 11:01:07 +0000
Manifest this update: Sun 19 Oct 2025 11:01:07 +0000
Manifest next update: Mon 20 Oct 2025 11:01:07 +0000
Files and hashes: 1: 4GK7krvun23ndX0lbUj2biB_RK8.crl (hash: FeYTYt9RiP5Dbj587pC5taosXnsK1f8Er3kQlh2ODFY=)
2: _tveWUzwl0rRBJDPM4rGk0Xjwr0.roa (hash: mX1Yyf8Gy2RZPiTSQJGBLTKD4Y7jjrTNhKRYdcriw7s=)
3: mB8BgJX73rlkXVf4rQjQxZFmQ74.roa (hash: QKAp2j6WZ6bfCIMjIxWmPLwb9wQaET9IBZN0Uj+49mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:56:e8:c1:27:75:6b:5f:52:2d:7c:47:56:19:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e062bb92bbee9f6de7757d256d48f66e207f44af
Validity
Not Before: Oct 19 11:01:07 2025 GMT
Not After : Oct 20 11:01:07 2025 GMT
Subject: CN=c62f7c03f4b0a7561e7cfddf4810b717d0ea27d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:be:a9:1a:ab:2e:36:6d:86:7f:2d:8e:3b:15:
9c:4f:3a:3c:24:e2:4e:5f:9b:03:c0:5a:9f:b9:1b:
39:b0:89:b8:f1:4e:2f:cb:b7:76:48:df:49:5a:34:
18:82:f3:98:66:3f:53:38:b9:d2:75:35:6d:5a:19:
49:a5:2a:2a:12:01:92:5c:b5:24:bd:5a:31:91:0d:
6f:ba:da:c4:62:7c:b8:f2:24:04:54:7e:b1:3c:44:
0a:d4:ef:a3:ec:38:2b:ca:46:19:24:71:dc:b5:25:
48:ad:6c:af:e1:7e:a2:06:6b:58:af:fc:60:1d:38:
da:96:1e:52:54:97:31:6c:07:ca:74:c1:c6:58:8c:
e2:75:02:84:c8:f0:ad:ab:0c:fa:90:10:71:b2:03:
a6:12:d2:8b:02:42:5b:24:84:12:59:36:b1:8a:09:
59:d1:ba:b4:a4:35:73:11:e7:62:3a:85:01:6e:66:
12:7d:1d:c8:59:b3:50:74:98:b4:b4:54:b0:7d:68:
ad:46:c6:70:6c:d0:00:1a:17:e2:be:f0:7d:b7:fb:
5b:01:d1:0f:9b:0e:b6:69:84:57:04:eb:be:75:7f:
21:b3:6e:83:45:af:dc:8f:67:9e:96:f2:1d:bb:96:
1e:41:80:72:87:40:12:92:b6:5c:f6:aa:d4:6c:e3:
c9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2F:7C:03:F4:B0:A7:56:1E:7C:FD:DF:48:10:B7:17:D0:EA:27:D7
X509v3 Authority Key Identifier:
keyid:E0:62:BB:92:BB:EE:9F:6D:E7:75:7D:25:6D:48:F6:6E:20:7F:44:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GK7krvun23ndX0lbUj2biB_RK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8af518-1566-4a6b-804b-1ab5d6209f57/1/4GK7krvun23ndX0lbUj2biB_RK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:62:9e:b1:30:fc:1b:93:30:9b:95:f7:62:85:0e:a5:a5:4b:
ee:49:38:34:a7:83:51:38:1d:f0:b4:67:a8:2c:07:d2:4d:3c:
10:93:be:78:1a:06:6e:f7:44:ce:21:b1:26:30:4d:d7:54:86:
54:b3:9d:80:85:2c:b8:7f:59:86:0f:2b:8e:3d:9f:6c:57:53:
01:a3:37:5e:03:8e:fc:97:4e:d7:e9:3c:19:c2:a7:78:64:d5:
f3:73:4b:73:f5:4a:f6:8e:89:53:3e:de:ca:4c:2d:3d:b4:39:
f0:e5:68:1d:3a:4c:a1:a6:db:2c:c5:61:e4:68:0d:e4:25:3b:
7d:64:0f:9c:a4:14:8a:a5:f7:ad:1c:d9:ee:2f:f3:a5:eb:5f:
f2:33:d8:1e:aa:61:33:c9:fb:5a:d8:e9:75:e6:3f:16:47:ef:
91:3f:30:e3:bc:fd:37:e6:0f:f1:af:ad:fd:5b:a4:f1:eb:80:
b1:fe:25:0b:c6:09:c5:70:cb:50:51:63:ee:d7:56:57:8f:7c:
5e:2b:6b:27:b7:2e:4a:9b:c4:8f:8a:42:5f:9f:15:56:40:75:
73:de:72:a7:07:90:ec:2f:af:cb:cb:78:ff:89:9a:03:58:b0:
45:91:12:b4:5e:82:89:7e:fe:10:1e:b7:b1:02:30:1f:b4:88:
4a:03:8f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:23 2025 by rpki-client