Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
File: 4_NSlr0mUtdWucSi8KzS_dp5CXw.mft (raw, json)
Hash identifier: 3sz/fFIOnr4yyJLwb3XtPbYNjb6f6aJjfG5tevqxKCg=
Subject key identifier: 24:36:C4:A2:30:01:F2:E1:C8:E9:F3:2E:1B:24:E8:70:CE:09:09:5A
Authority key identifier: E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
Certificate issuer: /CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Certificate serial: 0199FBEABBEE9D86B220C110B99F0C2C7634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
Manifest number: 05D4
Signing time: Sun 19 Oct 2025 10:01:28 +0000
Manifest this update: Sun 19 Oct 2025 10:01:28 +0000
Manifest next update: Mon 20 Oct 2025 10:01:28 +0000
Files and hashes: 1: 4_NSlr0mUtdWucSi8KzS_dp5CXw.crl (hash: q4fQvgyWmUWeOIJKE4dFkI57/k5yGQIoFE1BTC7wuWg=)
2: F1IHbwYI_Vw2biKY9qAxXXgkI1s.roa (hash: x6r7SsZ8T6EvaiAfOOYnrFS57CvR635mJl2CHWctk7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:bb:ee:9d:86:b2:20:c1:10:b9:9f:0c:2c:76:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3f35296bd2652d756b9c4a2f0acd2fdda79097c
Validity
Not Before: Oct 19 10:01:28 2025 GMT
Not After : Oct 20 10:01:28 2025 GMT
Subject: CN=2436c4a23001f2e1c8e9f32e1b24e870ce09095a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f4:81:10:83:d3:36:8d:7a:6a:dd:1a:b1:0d:
63:8e:6f:a7:0d:67:ea:cc:32:c3:12:fc:ea:9e:bf:
be:de:7d:5a:25:13:df:ae:14:d5:82:a2:14:53:90:
39:22:85:a9:de:f0:e5:33:b4:78:a6:2c:1b:75:18:
49:bb:f0:bc:79:25:8c:a5:9a:9d:df:56:9e:d2:63:
22:23:7c:b7:8f:9d:d4:92:ad:63:a5:91:1c:e6:2f:
f0:63:8c:7c:6f:2e:fe:4b:6c:f8:2c:fe:c8:58:15:
3b:cb:19:64:84:b5:1e:3e:0d:46:8a:69:63:4a:da:
18:0c:29:c5:5f:89:36:fb:af:fb:25:79:25:0e:a4:
63:99:29:7b:83:37:af:87:f7:55:9d:36:d4:b1:82:
00:0d:65:32:2f:01:74:c9:9c:ba:48:db:a5:b7:f9:
44:d4:97:a9:cc:34:96:7f:00:3b:34:34:bf:03:b1:
0a:28:cb:93:8e:ac:3f:5a:fa:b4:0a:e1:c1:5c:45:
d6:a5:5f:74:b7:c6:1d:ca:14:a6:9b:b4:72:fe:52:
b8:a2:00:c9:c5:16:b7:be:e1:b9:98:be:e7:1b:2b:
38:92:e2:b7:18:ed:b0:87:90:cb:d2:30:93:7e:23:
52:cc:57:fe:b3:9f:40:b5:bb:a5:92:06:4a:04:75:
7e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:36:C4:A2:30:01:F2:E1:C8:E9:F3:2E:1B:24:E8:70:CE:09:09:5A
X509v3 Authority Key Identifier:
keyid:E3:F3:52:96:BD:26:52:D7:56:B9:C4:A2:F0:AC:D2:FD:DA:79:09:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_NSlr0mUtdWucSi8KzS_dp5CXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/574960-d68d-4069-956d-05908c63b45a/1/4_NSlr0mUtdWucSi8KzS_dp5CXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ab:b4:86:ee:77:63:70:06:4d:4d:f3:f0:19:6f:07:c7:02:
8d:e0:89:ac:50:2d:0a:b8:fb:e0:6b:a0:e7:f0:92:c9:83:dc:
c4:85:bf:01:7e:e9:e7:79:8e:de:d0:d2:af:dd:2d:80:8f:47:
b2:c3:db:de:ea:f6:8e:2b:b3:24:37:ce:82:5b:d9:cd:46:fd:
0e:2b:54:03:a8:04:0b:f6:cf:38:7a:b7:b7:22:58:1c:a5:c0:
85:a8:25:a0:d4:7f:2f:01:8c:12:c9:3f:8c:49:4b:31:2a:62:
13:e4:ec:42:e9:ac:cc:b1:8d:aa:2f:23:19:c8:29:1e:9c:90:
19:01:16:af:03:f5:58:13:6f:4e:cc:4d:b6:94:d8:94:54:e7:
73:f5:32:20:34:14:d7:87:8a:ff:5b:7e:b8:d6:a1:86:15:79:
80:83:19:d2:e4:ac:b0:9f:26:74:4a:26:9a:ca:e2:f8:34:36:
31:29:ba:03:e8:49:76:ef:0b:32:03:d3:ae:72:de:9a:ea:d8:
6b:e2:be:3d:c0:0e:9b:55:10:66:bd:c2:14:f4:f4:5f:38:a1:
b9:72:9d:6e:ca:6b:a5:89:4a:7f:f6:6e:f5:07:6b:d2:fd:bb:
ef:23:8e:34:7c:7c:2f:fd:1e:03:7c:31:fa:6f:ba:06:58:c1:
05:6a:94:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:38:35 2025 by rpki-client