Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
File: 4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft (raw, json)
Hash identifier: U1yRtR/fo2/iIOnhQ9i5CnsOLDwl+ycRG3CjkSHJSXo=
Subject key identifier: 29:E3:03:E0:56:C9:E7:66:27:C5:3E:CB:1A:2D:0A:F1:E5:A7:BD:A2
Authority key identifier: E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
Certificate issuer: /CN=e2636e02f1554f70d971a656849c01bdff138ce8
Certificate serial: 019A01EC13C3B954F6337D0EBB5AE00838B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
Manifest number: 08D2
Signing time: Mon 20 Oct 2025 14:00:39 +0000
Manifest this update: Mon 20 Oct 2025 14:00:39 +0000
Manifest next update: Tue 21 Oct 2025 14:00:39 +0000
Files and hashes: 1: 4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl (hash: Fgh5dGGjyr3KbYlKppuwjSd9jWYBLnJucqK9sZwEYvk=)
2: 8ledFww48tlGlLdCdc6wJh5gkIA.roa (hash: Tmx1stFU3W6NXlv6YnpijkUZCwIIoq5vNpNXxvyHtoo=)
3: kNp_3YkCixoFt65dB3MqrcA0XPo.roa (hash: yKQUvFhZ+Z1swcvVEnDhUbffbwLlIa/3aCYRRPNo5TY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:13:c3:b9:54:f6:33:7d:0e:bb:5a:e0:08:38:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2636e02f1554f70d971a656849c01bdff138ce8
Validity
Not Before: Oct 20 14:00:39 2025 GMT
Not After : Oct 21 14:00:39 2025 GMT
Subject: CN=29e303e056c9e76627c53ecb1a2d0af1e5a7bda2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:58:42:b4:26:fc:f9:df:fb:e4:30:c7:16:60:
1d:7a:95:ef:e6:cc:95:71:a8:30:60:f8:0d:99:d0:
53:06:e7:13:8d:54:cb:c6:a4:95:66:4e:19:4d:32:
83:9c:7b:f7:14:e6:42:5f:ef:8f:12:be:93:74:35:
a4:7b:a8:a6:05:53:24:52:88:8c:5e:d6:88:a2:2d:
97:d4:68:48:2e:21:8e:1a:a6:aa:c9:9a:8e:aa:b9:
2f:92:f8:fa:dd:24:a4:28:3f:4f:d2:47:1f:e9:b5:
cc:b8:d2:a1:c2:92:02:8f:b3:d6:ef:bc:8b:2f:43:
ad:7d:7c:50:9a:03:37:77:bd:43:09:85:3b:af:78:
23:77:ba:a4:63:2b:2d:2a:7f:af:40:04:ab:c5:93:
8a:4e:59:9f:44:8c:97:e5:ae:e3:9c:89:a6:7c:31:
6e:c2:e5:3a:0f:d1:3e:8f:f3:41:7e:cc:5f:a4:fe:
31:da:e1:33:dd:6b:e6:66:51:cd:45:24:ee:b5:4d:
99:4a:66:26:e7:1d:dc:bf:cf:7d:4b:b4:90:d4:3c:
61:6d:d8:e7:37:81:67:8a:69:18:c3:be:27:6d:ba:
fc:60:cf:63:64:23:66:d5:a5:34:37:93:18:8c:19:
e0:e1:f9:2c:4e:24:f6:f1:77:19:3e:68:d2:b3:79:
c0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:E3:03:E0:56:C9:E7:66:27:C5:3E:CB:1A:2D:0A:F1:E5:A7:BD:A2
X509v3 Authority Key Identifier:
keyid:E2:63:6E:02:F1:55:4F:70:D9:71:A6:56:84:9C:01:BD:FF:13:8C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4mNuAvFVT3DZcaZWhJwBvf8TjOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b35513-ebdb-4550-a7d4-12f9f733dc4f/1/4mNuAvFVT3DZcaZWhJwBvf8TjOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9e:bd:0b:54:f6:aa:63:42:44:0e:53:a3:c9:56:30:a9:99:
9a:24:fd:31:29:d9:0b:76:86:09:51:83:4f:89:9c:4b:79:da:
97:a1:f5:b7:46:92:d4:16:f6:05:7d:7d:5f:b9:26:79:42:9d:
38:1b:3f:77:92:95:4a:ed:9d:13:1e:f0:60:f4:09:cd:d8:48:
c4:ef:2d:9a:09:4d:91:9b:79:ef:89:f6:00:9b:bb:53:19:a8:
93:02:c5:2b:c5:0f:2c:18:8d:6b:b4:10:94:14:7e:a1:e6:bf:
ad:70:7b:70:81:56:08:7a:0d:a7:c5:d0:33:b2:17:7f:5f:33:
7f:39:b7:47:aa:9d:55:09:b0:7b:cf:ea:05:48:5f:a5:b8:cc:
3a:c5:43:b2:9b:6c:54:65:d9:51:58:13:31:e9:d6:5d:45:a1:
41:7d:21:e0:c1:f2:37:4c:ef:6e:33:e9:bd:d1:db:cb:cd:6f:
1d:c4:5c:92:b9:47:c4:af:34:26:8f:76:d6:db:e7:06:81:9f:
38:11:eb:a8:9e:e7:99:13:5e:33:89:3b:d7:b5:92:d4:65:93:
00:c7:05:ac:d0:77:b1:a1:fd:74:93:b0:7f:fb:54:6b:6b:90:
c9:d1:8a:27:fb:69:0c:05:67:59:6c:3a:0d:c0:d2:74:a0:ee:
4e:94:2f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:18:28 2025 by rpki-client