Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: oWWiP07PpRItWrvnNq3ftkYBRRwf1bI3Qpxi6xVNjvc=
Subject key identifier: 8D:A4:BC:ED:31:D8:DA:66:D8:36:79:2A:9F:94:68:57:6F:F2:E6:50
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 0199FE47052F75D3EF813A42727C1A710A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 12CA
Signing time: Sun 19 Oct 2025 21:01:31 +0000
Manifest this update: Sun 19 Oct 2025 21:01:31 +0000
Manifest next update: Mon 20 Oct 2025 21:01:31 +0000
Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: 70CKtaFbmoMPRjwYl9SprnK17fYa0J31SkKqCyPcGqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:05:2f:75:d3:ef:81:3a:42:72:7c:1a:71:0a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Oct 19 21:01:31 2025 GMT
Not After : Oct 20 21:01:31 2025 GMT
Subject: CN=8da4bced31d8da66d836792a9f9468576ff2e650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:c1:bb:eb:2e:2c:8d:cb:c2:2a:7f:ab:32:
7b:23:5c:00:4b:da:c0:6e:e0:d7:0f:10:a9:4b:55:
96:3d:83:f6:04:ef:ea:db:88:5b:a9:de:9f:4b:27:
d7:67:52:69:28:d7:17:8c:7c:44:0b:d6:5f:ec:cf:
72:58:ce:cc:0d:52:29:c0:70:fb:da:28:90:d3:8c:
a1:3f:ba:a7:80:5f:fd:d3:dc:0f:07:65:a1:a1:16:
38:1e:64:b2:a7:c1:0b:0b:66:db:78:74:59:7b:2e:
d3:af:58:28:44:00:72:16:b6:87:ae:60:0e:d5:12:
d2:f5:94:51:3a:eb:83:68:91:93:ac:42:0b:84:d7:
2c:f5:8f:20:8f:c7:7e:6b:5c:1b:05:f4:e1:ea:e4:
8a:10:cd:6d:d4:e6:ad:98:1d:f9:62:34:fd:7d:b4:
7b:79:21:8a:7b:b6:c2:dc:44:ad:08:89:6a:1e:37:
8c:43:6a:79:26:ee:bc:0c:39:7e:00:51:b6:77:d9:
82:e7:ff:6b:74:d6:39:e8:a9:92:34:e5:e0:ae:08:
f9:bc:96:9e:5d:3e:76:3f:f6:e6:76:88:f5:02:a2:
8c:01:15:da:5e:ba:6e:3c:11:38:5f:7f:82:8e:e2:
0f:fa:9f:82:ea:49:39:a4:e1:59:56:a4:3f:7f:36:
f5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A4:BC:ED:31:D8:DA:66:D8:36:79:2A:9F:94:68:57:6F:F2:E6:50
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:64:20:35:0b:65:6f:52:6b:d7:48:30:11:c2:8c:55:66:
e2:b6:73:a8:c2:a0:c2:44:f2:29:5f:fe:7c:94:79:49:8a:47:
ff:00:e0:12:ce:da:42:5c:d6:3c:f7:ff:24:8e:1c:5c:60:0a:
58:5f:93:b5:f1:6c:71:b5:ca:ba:01:3b:d5:e0:c2:3b:cd:cb:
8b:ae:0d:78:ab:b3:bb:be:da:f4:40:18:32:c5:50:e2:05:14:
61:0b:cf:85:a6:58:5b:e8:7f:ae:40:f9:5c:65:8c:ca:7a:21:
d0:8c:80:70:fc:e6:11:ed:84:ea:55:60:10:96:ef:89:d2:af:
9e:5a:be:60:cd:9f:0c:a3:4f:82:26:42:66:ef:59:1f:61:96:
ce:91:b9:ca:19:cb:b3:8e:7d:98:ff:03:27:42:d6:fb:54:ef:
87:ce:2d:7e:66:7b:9e:6f:f9:a7:c0:f4:fc:8d:97:0c:cf:59:
f5:b6:bf:d3:d5:71:6c:cd:d8:e1:87:3c:80:27:0c:f0:fc:6f:
d1:ff:8b:92:99:20:ed:68:46:cf:6f:cf:cd:e5:67:ef:96:87:
5c:14:59:ef:cf:8e:ef:90:b4:fa:c4:6d:a9:e4:75:ae:e2:34:
a2:db:76:d1:80:00:f9:eb:5f:c0:17:aa:ec:53:4e:f8:d4:2b:
62:a4:18:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:03:44 2025 by rpki-client