Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
File: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft (raw, json)
Hash identifier: UrOEPz7zRdV34GEgucFIt/7wWseGwvfPAve9FOux02E=
Subject key identifier: 25:FB:1F:61:DE:96:F6:35:17:05:4C:47:73:64:6A:8C:EE:DD:EF:AA
Authority key identifier: E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
Certificate issuer: /CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Certificate serial: 0199FC8F8F46E44A5E9E94700FB4EC1BC703
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
Manifest number: 0A58
Signing time: Sun 19 Oct 2025 13:01:30 +0000
Manifest this update: Sun 19 Oct 2025 13:01:30 +0000
Manifest next update: Mon 20 Oct 2025 13:01:30 +0000
Files and hashes: 1: 26-qfn9ODUHJpEH89Qt0MRaUhuA.roa (hash: 2YdYGfBZn6lY/AbZT0o2XAew8LsHFvDqQ6x2hV85Y5I=)
2: 4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl (hash: UpqyBZHrh8WsDSAPoBWxTJiyfBxNgyURfk9oaY9UTvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8f:46:e4:4a:5e:9e:94:70:0f:b4:ec:1b:c7:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316c03cfaffe134c7beda4886ab8b09cf45fbc4
Validity
Not Before: Oct 19 13:01:30 2025 GMT
Not After : Oct 20 13:01:30 2025 GMT
Subject: CN=25fb1f61de96f63517054c4773646a8ceeddefaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:50:84:25:28:8c:58:f1:26:bb:9b:9e:6e:fb:
e3:e5:22:6d:6c:70:93:1a:ef:01:09:69:4c:02:13:
98:08:e0:f8:ce:a7:82:f1:9a:f7:ab:5d:15:0c:35:
9c:83:fa:2e:3f:54:2b:09:f7:48:2b:1c:18:74:8a:
73:a6:70:ec:0c:a8:6a:01:88:c0:ac:c3:e3:34:c4:
32:23:cf:19:fd:18:2c:a3:e7:b6:b2:47:96:1b:4e:
60:44:ae:b2:20:5f:28:d4:37:a1:b8:ca:fe:d2:3b:
02:31:c7:b9:74:19:83:14:e2:a5:21:b0:a2:2a:2a:
f0:a8:b2:6a:6b:da:6c:21:55:5b:d0:57:1b:94:13:
b6:e2:0a:f1:1f:be:23:b2:88:1d:28:a0:71:1e:e8:
21:82:e2:b2:af:9c:a7:92:a0:94:3b:95:8d:0b:68:
12:72:34:6e:ae:11:72:27:e4:3f:c8:96:7e:b0:65:
f6:ac:a5:6a:1f:a5:86:05:6c:ab:76:eb:28:e2:e3:
7d:94:71:28:8d:8a:8b:59:e0:87:28:34:05:a5:70:
92:02:de:89:d1:4b:8d:f1:5f:56:e7:2d:34:3d:4e:
9b:7a:bf:6b:dd:1b:ff:c2:2e:65:c5:8f:77:cd:bd:
d2:68:b9:2f:3b:1d:2b:71:5d:61:fa:5b:20:17:68:
fc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:FB:1F:61:DE:96:F6:35:17:05:4C:47:73:64:6A:8C:EE:DD:EF:AA
X509v3 Authority Key Identifier:
keyid:E3:16:C0:3C:FA:FF:E1:34:C7:BE:DA:48:86:AB:8B:09:CF:45:FB:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xbAPPr_4TTHvtpIhquLCc9F-8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/91402e-ed28-4a21-84e2-e4d64dca67ac/1/4xbAPPr_4TTHvtpIhquLCc9F-8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:2f:ce:dd:15:4a:d9:05:25:72:13:44:0a:9d:31:80:d3:59:
09:62:4c:76:dd:d1:f2:2a:19:08:f7:2e:b0:f8:f1:8b:23:5f:
6f:bf:9f:55:3f:64:ff:72:a0:a0:9e:c1:81:36:cb:d1:0a:70:
44:74:09:60:bf:f5:6f:40:87:7f:00:a3:e8:08:a7:f9:2a:50:
c1:2b:43:cd:fe:f7:b8:85:2a:88:3e:8c:d6:1c:43:2b:e8:95:
bd:53:4b:a1:bf:3d:fd:b6:cb:2e:c9:15:98:1e:d9:ab:76:61:
c6:0f:b9:59:9f:8c:1f:9c:cb:13:39:d5:07:88:cd:62:86:cc:
2c:b9:bd:4e:a5:bc:43:f9:d1:23:6b:90:a8:19:9c:01:8c:9b:
57:9c:93:b0:e3:4d:48:9a:0e:ec:08:db:1c:49:ae:12:ad:7e:
e3:3c:53:61:57:72:c8:b2:03:8e:e6:a1:04:4d:5c:2b:cb:48:
a6:17:06:6f:e1:e0:39:ca:9f:93:2e:b1:f8:45:87:22:dc:42:
ec:4e:39:32:31:b1:00:e0:d7:c1:b2:ae:23:13:bd:e2:cd:98:
a4:3e:26:8a:53:38:e4:8c:46:bc:47:b1:36:f3:7d:ae:86:47:
ed:70:bc:0e:b3:4a:fb:52:41:81:ae:1b:2f:5d:a5:74:f6:91:
1e:83:31:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:18 2025 by rpki-client