Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: jWDSzrFLB4DKc1fUOHGwsD5AvqOGmSBsSqRuUi9p4JM=
Subject key identifier: 7C:19:62:1A:A7:CE:9E:63:F1:37:9A:F1:F3:5F:1D:9C:52:ED:84:4E
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 0199FE7DEEB7FD671D2DB1970222862370DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 0BF6
Signing time: Sun 19 Oct 2025 22:01:29 +0000
Manifest this update: Sun 19 Oct 2025 22:01:29 +0000
Manifest next update: Mon 20 Oct 2025 22:01:29 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: pwm/mF7f05k4e7GR7NNcyw/TtCmUMleRuvjseFjK0BU=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:ee:b7:fd:67:1d:2d:b1:97:02:22:86:23:70:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Oct 19 22:01:29 2025 GMT
Not After : Oct 20 22:01:29 2025 GMT
Subject: CN=7c19621aa7ce9e63f1379af1f35f1d9c52ed844e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:ff:c8:de:91:27:60:0e:f6:10:3a:83:b5:
69:93:cb:e8:36:40:d3:04:f6:1f:c5:e1:85:a2:08:
61:5c:be:ff:6a:a2:cb:c5:cf:97:3f:db:66:23:f0:
95:50:a7:86:0b:50:96:34:14:5f:a0:37:6c:e0:f3:
08:bb:d6:84:42:23:c4:b8:1d:4d:92:9c:ab:43:d9:
6e:0a:05:05:c3:b5:9a:e5:07:53:e8:02:ab:ab:46:
0c:04:25:47:29:57:f1:ca:73:70:8f:f6:87:27:de:
3d:e9:f5:a8:d6:a1:4f:11:f8:3c:43:10:de:d2:c4:
c5:1f:8b:5e:a4:75:08:ff:34:df:4d:ff:72:22:6e:
93:b0:0a:dc:c5:36:07:0e:84:22:f7:10:10:55:9f:
86:5c:2d:8e:ba:bc:c2:e8:a6:3b:76:26:31:91:ca:
8a:e8:84:41:43:a4:0a:1d:6f:10:40:25:9d:46:b0:
f3:3c:1a:3b:2f:ce:41:9c:c3:f6:77:d6:ea:18:e0:
ba:34:e0:61:e9:f1:ca:de:65:c1:ae:7a:85:30:77:
ee:f2:92:64:78:0f:96:3b:92:f0:01:c8:bf:a4:43:
fb:16:ea:85:01:89:cf:4b:52:a1:bc:96:5c:64:63:
2f:a2:06:ee:11:69:61:5e:20:b8:6e:b0:c4:99:45:
30:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:19:62:1A:A7:CE:9E:63:F1:37:9A:F1:F3:5F:1D:9C:52:ED:84:4E
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d4:b4:5f:04:58:94:7d:5f:1b:3a:f6:92:d2:15:9c:09:eb:
e0:82:d8:72:ea:01:30:fb:f6:91:f1:fc:01:3e:e4:e4:92:12:
66:e0:c8:08:15:62:64:db:31:ca:a2:fa:5e:3c:01:15:9a:32:
eb:30:b1:b1:5b:b3:1a:06:cc:c8:9e:3c:ab:50:68:59:60:49:
90:56:e1:69:4f:b0:6c:c8:81:b3:a1:97:3a:56:54:8c:64:d5:
a0:92:6d:c1:02:76:12:03:b8:e8:cf:90:af:a4:6d:e2:d7:63:
c4:ab:4c:57:ba:ed:dc:10:a4:05:c8:04:71:00:f5:d5:a4:5e:
fd:8d:a6:9f:d1:cb:d0:27:81:c3:09:67:bb:b4:2a:82:e3:89:
bc:6e:47:4d:f3:43:78:43:46:4b:79:ef:cf:b8:ca:aa:7f:86:
ea:09:8c:b0:7a:9c:82:97:e2:23:a8:58:9f:b7:52:72:81:af:
79:4e:a3:cb:9e:14:1b:f8:70:11:6c:16:17:70:37:0c:e0:e5:
ca:06:38:f1:e0:9e:c1:3b:4d:47:9e:22:f9:21:24:f7:ac:ff:
48:38:7c:39:56:33:cc:82:06:e6:c2:0f:90:15:df:6d:b4:11:
7e:5c:53:2c:47:38:61:8f:b7:a0:76:b1:92:bc:8b:c8:84:79:
06:96:e9:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:56:10 2025 by rpki-client