
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
File: 4K-xYKlzOKshEUhArdxhgKW6QrE.mft (raw, json)
Hash identifier: 84+jazgjYktLAHuzO7Df3WkZ//gjkd/PKdWbdapivVE=
Subject key identifier: 4A:62:FE:B9:E6:07:5D:B9:28:ED:86:37:AD:66:F0:8A:72:4B:B3:5D
Authority key identifier: E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
Certificate issuer: /CN=e0afb160a97338ab21114840addc6180a5ba42b1
Certificate serial: 0199FEEBA632048512652F61F3138A271B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
Manifest number: 13B8
Signing time: Mon 20 Oct 2025 00:01:20 +0000
Manifest this update: Mon 20 Oct 2025 00:01:20 +0000
Manifest next update: Tue 21 Oct 2025 00:01:20 +0000
Files and hashes: 1: 4K-xYKlzOKshEUhArdxhgKW6QrE.crl (hash: WUxIU6xtVTFZ1ray9cBoKmNjsTHqVj6n+GcOTZytXCw=)
2: Gwy6_uUvgZKl_FsgbK0SBR2765s.roa (hash: e+42Dv5ZMct1RmCP3DiJKtyiBUgVYfDjN9qagjZj7ck=)
3: RoGLSCET83zk1v-3GNDAGUmNCf4.roa (hash: TK8/4ls6e1537IxcrmPC8DEH8k32Or5yu+pxFNpz4Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:a6:32:04:85:12:65:2f:61:f3:13:8a:27:1b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0afb160a97338ab21114840addc6180a5ba42b1
Validity
Not Before: Oct 20 00:01:20 2025 GMT
Not After : Oct 21 00:01:20 2025 GMT
Subject: CN=4a62feb9e6075db928ed8637ad66f08a724bb35d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:c4:d4:bf:b2:67:fe:67:32:78:96:e9:49:19:
96:2d:5f:0a:3e:96:8c:1e:71:b0:92:ea:ee:8b:aa:
ea:5d:51:69:0b:71:a9:83:d6:78:88:79:2d:65:d9:
a6:62:9e:72:f6:5d:75:84:d6:3a:5c:1e:aa:2c:0e:
e9:bd:a0:b2:7a:e8:27:25:d0:77:1e:04:27:12:f0:
a9:cd:bc:85:bb:55:dd:50:d3:b4:eb:75:8b:e5:6b:
86:17:2b:fd:ec:df:7d:6e:f3:ef:b1:e5:a7:1c:37:
f9:3a:1e:1f:d1:bf:06:7a:57:aa:e9:4c:57:f1:ac:
dc:96:ba:a5:71:7a:1c:c0:f6:47:31:49:a6:15:71:
a3:c6:f6:b5:f8:01:6e:03:c6:b3:01:69:13:d4:5b:
55:40:a3:a9:97:86:fc:1f:ee:85:65:46:cc:4b:21:
4b:bb:3f:29:58:3d:47:58:a7:98:85:a2:3f:f5:01:
2d:09:6e:5a:ca:20:b3:ee:3f:41:4f:b0:09:f5:ff:
d2:6f:77:3e:ad:af:ea:8e:8d:ce:ef:27:e7:9d:7b:
0a:11:e7:e9:ad:3d:71:77:66:09:e4:bf:cb:d6:8e:
e1:69:48:6d:f8:b0:a5:0f:49:02:76:d2:61:a9:e0:
10:5b:73:6c:61:6f:b0:05:8c:c8:e6:99:b5:ee:17:
0e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:62:FE:B9:E6:07:5D:B9:28:ED:86:37:AD:66:F0:8A:72:4B:B3:5D
X509v3 Authority Key Identifier:
keyid:E0:AF:B1:60:A9:73:38:AB:21:11:48:40:AD:DC:61:80:A5:BA:42:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K-xYKlzOKshEUhArdxhgKW6QrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/466119-873f-4cfd-91a6-b1e313d79893/1/4K-xYKlzOKshEUhArdxhgKW6QrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:78:94:20:b5:79:5a:53:aa:2a:15:da:33:26:ee:de:10:9f:
fa:99:44:c9:ed:5b:f9:66:2f:48:5d:4a:24:d0:00:fb:39:38:
f8:d2:b1:8e:1e:11:d5:bd:c3:69:ea:77:98:df:ef:77:75:b0:
74:b8:aa:0f:a9:80:f0:a3:1f:f7:4e:90:72:9b:57:ad:29:77:
91:53:fc:63:03:5b:10:83:fc:16:1f:2b:ed:72:12:72:11:a8:
11:52:5c:82:6a:85:93:df:c8:88:82:ce:19:ba:ff:ab:46:8f:
90:9b:cf:39:07:ae:74:67:ff:82:f5:c1:fc:c9:a8:f7:30:8f:
10:da:b0:34:93:a2:55:e0:47:35:5a:94:45:18:71:d1:3c:e1:
67:67:74:bd:42:15:e3:0d:43:ba:b4:a9:4c:63:48:0a:11:9d:
06:65:ad:bb:a6:2a:5f:c6:70:d8:49:d4:04:35:07:7e:9d:9c:
1a:a9:98:b3:2d:5d:68:1e:85:25:6b:a7:52:41:e5:0b:e0:80:
cf:eb:4c:29:75:ec:91:bb:5a:40:28:80:17:d2:0b:cd:96:38:
f8:7b:35:b5:13:a4:93:d2:7c:8a:98:6b:7a:53:43:61:ae:63:
5b:08:e8:78:89:ad:9d:40:a1:2f:49:cf:7d:e0:34:2f:d9:ce:
e1:95:12:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:00:44 2025 by rpki-client