
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
File: 4uevc8B6V4KvJINOvdt0qciXxP8.mft (raw, json)
Hash identifier: pSFoWpO+mjHSZ/x2w4xBfE9DELmar+xSr6L3ezvSE8E=
Subject key identifier: 28:C2:04:C0:9F:25:DC:E6:E7:B8:EC:23:93:83:46:E2:E5:D2:A1:D4
Authority key identifier: E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
Certificate issuer: /CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Certificate serial: 0199FC8F718514A997B0285E89D4D0B612F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
Manifest number: 033D
Signing time: Sun 19 Oct 2025 13:01:23 +0000
Manifest this update: Sun 19 Oct 2025 13:01:23 +0000
Manifest next update: Mon 20 Oct 2025 13:01:23 +0000
Files and hashes: 1: 4uevc8B6V4KvJINOvdt0qciXxP8.crl (hash: Biue0E4+JwAuJLA809Cyu3mJw+kaobCCLm9vP7E2ILM=)
2: k33f_PMIoHn5FXjWs9o_hAagQPU.roa (hash: CQN6YPAgrfc6UnCswx4tiN7JfnanWIcuyP1dM7rzekg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:71:85:14:a9:97:b0:28:5e:89:d4:d0:b6:12:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e7af73c07a5782af24834ebddb74a9c897c4ff
Validity
Not Before: Oct 19 13:01:23 2025 GMT
Not After : Oct 20 13:01:23 2025 GMT
Subject: CN=28c204c09f25dce6e7b8ec23938346e2e5d2a1d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6f:35:6a:13:8b:6e:1e:d5:2a:b5:16:c1:3b:
82:ee:c8:66:2d:f8:8b:d8:8d:6b:a6:c0:61:c6:dc:
b7:12:55:94:d2:6c:02:fc:3d:8f:50:c0:c3:0d:98:
41:fc:c3:91:a4:6e:b2:33:ba:3d:9a:f0:15:17:c8:
68:f1:16:fb:99:62:12:f1:05:aa:15:73:93:49:5b:
60:ec:9f:44:3d:c1:a9:47:9a:81:b8:64:9e:dd:93:
9b:1a:e8:ed:2e:e6:2c:68:bd:f7:f9:65:56:39:41:
ce:49:5b:9c:c7:1f:7e:6a:88:46:e8:7f:45:1f:ba:
32:ba:6b:ea:7e:a0:c7:3d:f6:fc:bc:54:e5:00:46:
bd:a6:53:74:0b:11:4f:f8:2f:ee:d6:51:be:89:a1:
44:2b:6d:a2:f6:a7:1e:44:59:e0:5f:a9:ec:5e:5c:
29:31:ac:e1:75:63:dd:d4:f0:68:43:d7:fc:78:cb:
5c:7b:2c:74:99:06:56:e1:4b:78:09:88:36:40:4e:
d5:da:52:8d:78:31:8d:86:2e:aa:ab:2d:81:17:4b:
95:4c:9c:2c:74:34:be:6f:6b:97:c4:f5:b0:a8:86:
b3:c3:e4:79:a1:b4:90:62:d4:41:27:64:10:78:cf:
8b:fe:6f:5f:35:3c:84:69:13:35:f0:90:b6:7c:6f:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:04:C0:9F:25:DC:E6:E7:B8:EC:23:93:83:46:E2:E5:D2:A1:D4
X509v3 Authority Key Identifier:
keyid:E2:E7:AF:73:C0:7A:57:82:AF:24:83:4E:BD:DB:74:A9:C8:97:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uevc8B6V4KvJINOvdt0qciXxP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/65398a-0faa-4b64-bd09-09886c0c46a0/1/4uevc8B6V4KvJINOvdt0qciXxP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:d0:f5:c7:54:fc:f1:42:e6:45:8f:35:77:a0:0a:27:b4:9e:
f8:9b:e4:8c:a8:3c:a6:c5:ca:d0:7b:ce:f7:c6:9e:19:97:e7:
32:67:15:95:59:98:34:e7:ca:05:ab:f2:0f:3f:8b:f8:70:13:
62:14:b5:20:31:f2:1c:c0:0b:61:cf:4b:75:10:18:dc:d6:bc:
da:d3:87:a1:e7:2b:4c:7b:85:8f:99:11:85:92:79:96:88:7e:
9f:bc:2e:8a:47:56:29:6c:63:4d:0b:05:7e:24:db:28:da:ee:
00:f9:0d:48:09:be:25:84:84:88:ad:6c:3f:99:bb:7b:89:97:
78:ac:97:f9:6e:8d:51:08:31:85:b7:ba:0e:49:fb:5b:12:e6:
4f:64:37:db:f6:dd:26:60:f4:a1:6c:b6:72:af:8f:1e:cc:9e:
d7:17:5f:4f:bb:90:60:93:19:b7:c3:b7:f4:74:30:80:2a:00:
94:a7:9d:84:79:8a:28:9e:54:e4:b1:7c:33:f0:4c:80:e8:69:
4d:2f:52:08:5b:f8:f5:5a:e3:aa:0d:9b:21:f4:2c:f2:24:92:
4f:e1:6e:96:a2:14:80:d0:f0:83:ec:bb:b5:74:29:12:62:2e:
a6:6a:64:a4:74:dc:37:1d:c7:f9:90:e3:26:c1:f0:d7:c0:e6:
23:15:c4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:05 2025 by rpki-client