
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
File: 4jRLpjQJYdpe60riOemgYmd5Pi4.mft (raw, json)
Hash identifier: 4QTt7E6OICrTqSsteakPUKHvkgaT67mlcx7aV8Ddl7g=
Subject key identifier: 47:B8:EC:F0:C5:D2:D7:89:90:25:18:F7:EE:AE:7D:97:DB:D4:B2:ED
Authority key identifier: E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
Certificate issuer: /CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Certificate serial: 019A0147E77DE49AF494525A19461B7C40C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
Manifest number: 0D38
Signing time: Mon 20 Oct 2025 11:01:20 +0000
Manifest this update: Mon 20 Oct 2025 11:01:20 +0000
Manifest next update: Tue 21 Oct 2025 11:01:20 +0000
Files and hashes: 1: 4jRLpjQJYdpe60riOemgYmd5Pi4.crl (hash: Gzt/gM41x5WiB5KwMXsRHjykD6yvV34YpoXM/N/jtsY=)
2: WpIYL0DvGR69MNqQHSOeKTTXrTw.roa (hash: SM3OGEHCPKRu3sADiQcW/ukfL9VQE5Fwf5KPU4G5dDQ=)
3: kxBC-y0IllTJVS30L0NxSPbYl5k.roa (hash: URvxTuHHPgKr+L+8uNywgEsk29rIbLnVfs2KTbEBNVw=)
4: pOMTJTMzSvxdTwpBEEiCIJOdgS4.roa (hash: N66sR+vsnvfn2vQyEXUghMnGW+xEPargkQo2ZBulpiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:47:e7:7d:e4:9a:f4:94:52:5a:19:46:1b:7c:40:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2344ba6340961da5eeb4ae239e9a06267793e2e
Validity
Not Before: Oct 20 11:01:20 2025 GMT
Not After : Oct 21 11:01:20 2025 GMT
Subject: CN=47b8ecf0c5d2d789902518f7eeae7d97dbd4b2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:57:5c:d2:15:65:35:97:83:53:49:2a:5e:cf:
c3:6b:7a:64:76:52:ca:ba:43:b1:0f:5c:1b:5b:81:
fb:b2:e1:60:de:ac:f8:a4:06:d6:c3:ae:30:78:09:
c1:25:07:16:f4:96:3a:b9:f6:3c:1f:45:ef:f9:ad:
44:d1:03:01:d9:76:40:5a:80:98:ef:eb:6c:7e:35:
92:b2:c0:42:4f:85:d6:0a:ca:78:a1:97:d8:e1:ab:
d9:bc:6f:ff:3a:1f:20:3c:e4:e0:36:c5:26:b2:a2:
d7:cb:13:39:8c:ed:91:15:da:8b:f3:aa:a9:a7:dd:
02:df:79:15:06:c1:67:98:91:ed:1b:a5:24:bf:1b:
58:5b:26:ac:24:c1:ab:83:15:7b:fa:cc:70:1c:bf:
5b:d7:7b:0b:eb:0b:45:e2:4e:66:1c:15:d1:73:95:
47:5d:5d:c6:48:26:48:a7:b2:c0:e1:b4:46:66:c9:
6f:9e:cf:1e:2c:43:aa:68:d3:2a:b4:8f:ef:74:64:
58:75:36:a6:b8:db:bb:cc:9e:25:c7:14:2b:fa:f2:
e5:f9:92:e2:4f:b9:22:0d:ce:bf:cf:05:63:92:76:
b1:c8:d8:12:cd:22:44:0b:f2:a2:ef:f1:bc:ad:b0:
81:50:7a:ba:63:87:3f:ff:0d:3b:df:68:ae:e4:4e:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B8:EC:F0:C5:D2:D7:89:90:25:18:F7:EE:AE:7D:97:DB:D4:B2:ED
X509v3 Authority Key Identifier:
keyid:E2:34:4B:A6:34:09:61:DA:5E:EB:4A:E2:39:E9:A0:62:67:79:3E:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jRLpjQJYdpe60riOemgYmd5Pi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/44ec43-5935-4ab2-b13d-02eb9a412637/1/4jRLpjQJYdpe60riOemgYmd5Pi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:8c:01:4c:24:b9:90:65:3d:1f:ab:59:21:de:fa:5f:e6:5b:
db:d7:12:2e:0c:86:49:be:44:6a:67:e2:cb:0c:b5:ef:7c:cf:
86:24:34:a2:39:6d:66:26:92:5a:be:2e:59:5a:40:ff:41:f6:
42:ea:eb:dc:c9:24:a6:d8:8b:a2:90:81:f7:44:31:b5:57:3d:
28:d6:94:61:02:f9:3e:84:ad:84:10:13:4b:cb:73:e7:0a:99:
4f:2e:19:64:a8:16:d3:6d:92:94:06:15:3d:c3:1f:20:60:48:
ca:7d:89:7a:7a:c0:86:55:ff:70:92:e3:d5:19:ba:e9:32:c1:
73:2c:ad:31:9c:e0:30:e7:cd:71:ed:1f:e2:2a:48:b5:27:0b:
0e:b6:41:be:8e:3f:e4:89:df:bd:8b:6f:9f:20:36:4b:27:4a:
56:7f:43:1a:f0:8e:fd:f5:6e:69:2a:2a:0d:07:76:41:c6:c6:
e3:1a:a5:cc:c6:97:2b:ac:90:8c:52:1d:88:fc:be:8d:a4:8d:
56:e3:cc:72:2f:68:65:ca:10:a8:20:16:f0:44:f2:fe:28:31:
f5:1c:0e:2b:f4:e9:ad:45:d4:b5:ed:35:87:6f:e1:1f:7d:ac:
a7:be:f9:f2:be:3c:4a:96:f3:9c:63:81:ee:14:b8:aa:4f:95:
9a:36:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:05:48 2025 by rpki-client