Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
File: 4zgHQmp0h6CET99NelLw-5C9t9M.mft (raw, json)
Hash identifier: dqzFJ0UsdgY7kc0/oVXWbJWgxVqNwWQf5NmSo20UYBI=
Subject key identifier: 17:35:40:AE:20:CE:6E:52:22:B7:E6:32:B4:C8:82:25:AF:19:F0:B7
Authority key identifier: E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
Certificate issuer: /CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Certificate serial: 0199FD34080BFEB750893121A912BE1E1DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
Manifest number: 15B4
Signing time: Sun 19 Oct 2025 16:01:09 +0000
Manifest this update: Sun 19 Oct 2025 16:01:09 +0000
Manifest next update: Mon 20 Oct 2025 16:01:09 +0000
Files and hashes: 1: 4zgHQmp0h6CET99NelLw-5C9t9M.crl (hash: jl3e4bubn010hGENIln5RGE6dN0raRNmhPatgIralRE=)
2: M8fpAx6jpgG6MlSmE255nM2U54s.roa (hash: RD69vCeynoVt4KuZOJLoQcLLqCnDtkjvXD3NKIK92bk=)
3: mv_a-WXN9u1j2MpwExlmXt_l8JA.roa (hash: rF/9pNd0YOCzH1ms4AnrOsMwkemWNqGPF+0nwHKpIf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:08:0b:fe:b7:50:89:31:21:a9:12:be:1e:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33807426a7487a0844fdf4d7a52f0fb90bdb7d3
Validity
Not Before: Oct 19 16:01:09 2025 GMT
Not After : Oct 20 16:01:09 2025 GMT
Subject: CN=173540ae20ce6e5222b7e632b4c88225af19f0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:22:87:42:51:ee:6d:d0:36:a5:52:ad:7b:b6:
b8:30:6e:f4:ba:47:c0:21:d6:2f:32:3a:48:1e:13:
37:ef:b7:ed:ce:43:33:04:1c:5c:a4:bd:5b:5e:ec:
6b:b4:d6:eb:a7:23:2a:03:de:d1:6d:f2:43:bb:fa:
9b:91:e3:b6:45:10:3b:73:2f:28:be:cb:db:24:8e:
3e:32:fd:48:60:ca:be:07:1f:34:54:b0:7d:a3:64:
94:0b:ec:92:5e:9f:c8:93:54:6a:8c:66:56:87:6c:
1c:db:43:b4:a7:9d:8f:b7:2d:8b:04:dc:0d:36:62:
9d:6e:60:98:76:fe:6a:06:35:04:b9:2f:5f:64:97:
b3:55:f5:76:d2:db:3f:83:66:f6:90:27:6e:4b:7a:
2c:67:d4:c7:6f:72:4b:b1:54:92:c4:ec:8e:bf:ab:
60:14:91:58:aa:5c:69:21:a2:d8:38:28:48:f1:d5:
f6:ae:7d:22:cc:f0:52:4c:e6:7d:46:43:4c:93:6d:
c6:54:09:3b:34:5a:b8:58:1a:31:8b:20:8f:bd:21:
cb:86:bf:c4:50:26:8b:38:8e:eb:ac:0e:57:d8:4c:
a5:49:8b:d1:bd:c4:3d:e6:83:f9:3d:b6:dc:85:61:
ea:b5:bd:f2:08:54:30:50:27:fa:3d:09:0b:da:f4:
94:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:35:40:AE:20:CE:6E:52:22:B7:E6:32:B4:C8:82:25:AF:19:F0:B7
X509v3 Authority Key Identifier:
keyid:E3:38:07:42:6A:74:87:A0:84:4F:DF:4D:7A:52:F0:FB:90:BD:B7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zgHQmp0h6CET99NelLw-5C9t9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/1750bd-47d6-4505-ab05-828197634976/1/4zgHQmp0h6CET99NelLw-5C9t9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:62:26:9c:16:6c:f0:0d:74:86:32:77:30:e4:f2:80:ab:61:
d4:4b:49:e0:cb:cc:d5:00:b7:7e:db:4d:76:27:a5:05:9c:77:
9a:88:40:04:6e:87:1d:52:3f:27:96:f1:59:e0:c0:34:f3:22:
6f:98:92:bb:ff:92:c0:e3:ef:86:18:81:e6:2c:d1:9e:50:a1:
05:e9:b6:13:b1:96:40:79:14:ff:f2:22:77:e0:51:37:c1:94:
eb:d0:1e:df:68:80:a1:cb:ef:38:fa:99:d3:ed:be:f3:40:ef:
14:e2:c7:22:a3:a4:4e:1f:84:2d:b7:c1:1f:86:27:32:34:41:
24:d4:a1:af:8b:f8:61:13:0a:42:58:c4:ce:68:90:f0:2f:06:
3c:a7:9f:68:ea:39:4c:7a:46:84:5c:00:f5:02:63:8d:6b:eb:
c3:a2:f2:af:4d:9b:71:8a:e5:06:94:ba:21:a3:d7:da:1f:c3:
10:11:1f:11:80:87:d3:8b:e3:20:44:f8:12:f2:68:29:79:fd:
3f:b8:37:6a:d9:f3:2c:4e:42:0b:c0:85:6f:fb:b2:03:39:99:
67:7a:7b:6d:b4:bf:cf:f8:82:dc:18:dd:46:5f:22:1f:58:98:
c8:31:fb:f6:bf:47:c3:c4:84:c0:bd:51:18:6e:11:ea:4f:90:
e0:5d:85:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:44:37 2025 by rpki-client