
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier: 4BQxV8tSW79Xy15W4NP9sbjOxEkM9R336gyYxjd2Njs=
Subject key identifier: 3B:A2:E7:83:50:ED:5E:A2:64:A1:ED:7F:7D:7F:CD:D4:F7:74:0A:7D
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 0199FC583D1E8AB217A6917DBF8BDF16C676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number: 1674
Signing time: Sun 19 Oct 2025 12:01:05 +0000
Manifest this update: Sun 19 Oct 2025 12:01:05 +0000
Manifest next update: Mon 20 Oct 2025 12:01:05 +0000
Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: LabMgplf4noyc55Wieq6Tdzmv6l3HguiwhK4jJCCl8Q=)
2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:3d:1e:8a:b2:17:a6:91:7d:bf:8b:df:16:c6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: Oct 19 12:01:05 2025 GMT
Not After : Oct 20 12:01:05 2025 GMT
Subject: CN=3ba2e78350ed5ea264a1ed7f7d7fcdd4f7740a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:5b:1c:27:4f:83:d2:70:fc:af:dd:e6:2d:81:
35:8d:5e:b2:6a:d5:d4:0f:e9:b5:cb:f3:fd:d9:c5:
a9:3f:99:92:c5:99:16:90:b5:ab:60:4a:e2:f9:eb:
74:56:93:cd:fd:ba:51:b3:29:8c:0b:03:d4:6b:b9:
2a:eb:b0:7d:d2:b5:e0:3c:90:74:a5:89:0a:ea:66:
6a:76:0e:9b:d1:0e:8e:e8:a9:a3:86:ef:5d:75:cd:
ec:71:32:4d:70:95:24:10:84:4f:46:ab:3d:ec:5e:
5d:0a:24:7c:db:df:f1:01:ae:f1:7e:b3:07:0b:c3:
df:09:f3:4d:d8:81:2e:b3:60:c9:aa:be:ff:04:6e:
c5:8c:0b:a1:55:3f:77:d8:a5:52:24:d2:c4:64:8a:
f6:9c:f4:18:6d:a2:e3:5a:ec:e7:3b:19:c6:8a:2f:
b9:4b:41:de:a7:3a:61:c0:bd:8b:09:c7:14:69:15:
63:b1:9b:da:c7:95:ba:64:e2:7c:6e:64:3e:e1:de:
ea:25:1a:4c:7e:eb:d7:53:b0:22:b9:2c:87:90:5b:
47:3b:49:98:8b:f2:68:cf:c3:ff:8b:73:8b:41:2c:
aa:ca:b7:20:02:8d:1d:d2:f0:ec:18:df:af:a7:ea:
d2:f7:f9:c6:e8:e7:c8:48:48:5d:99:61:e4:a5:39:
18:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:E7:83:50:ED:5E:A2:64:A1:ED:7F:7D:7F:CD:D4:F7:74:0A:7D
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5e:61:36:69:4d:27:06:ec:3d:21:11:5f:bd:0c:cf:67:b7:
9f:29:00:ec:ee:89:b6:17:68:b7:a8:83:9c:32:9f:b8:0b:12:
7d:22:98:9e:de:10:30:ce:1f:5b:b3:69:b8:74:05:50:20:0b:
a1:4a:da:55:68:7b:ce:69:d7:48:a8:3c:d7:8c:30:92:70:0c:
da:e3:39:48:ac:f5:20:10:89:bb:e1:8f:db:68:ed:39:88:ae:
9f:6c:3b:f3:2c:0b:93:3e:16:32:0c:87:97:94:9c:22:d4:bc:
f4:cb:eb:ee:5d:cb:6a:33:1b:20:74:64:8a:75:ef:c2:12:21:
3e:45:68:95:b7:98:13:f4:be:ec:bd:a0:30:b1:65:39:e8:56:
5d:89:ed:94:70:2f:e6:53:d7:b8:05:bb:83:05:03:54:10:99:
fb:15:61:6b:b0:79:21:53:54:8d:1e:2f:61:79:11:fd:38:8e:
82:87:ef:06:3a:d4:3f:b3:2f:03:36:ea:66:a3:68:54:16:e3:
f7:68:f6:ba:f9:b8:5f:cf:91:4d:bf:42:a4:47:b0:4c:c7:97:
73:96:8a:aa:cb:65:41:82:da:79:64:75:03:1a:1e:77:b6:80:
14:bc:12:58:19:b9:9d:aa:02:6d:9d:65:79:30:31:14:6e:64:
8e:02:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:51:13 2025 by rpki-client