Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
File: 4BtODyogHPQwBI4kgWSzLt30Pa4.mft (raw, json)
Hash identifier: PQYs2TBp8tgCTLg1tQAS+I5bAjcpJdWUlQr3lBGwK8k=
Subject key identifier: B8:08:BD:F7:D9:4C:AC:2E:02:58:F1:BD:5C:BD:70:E3:C1:70:B6:8A
Authority key identifier: E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
Certificate issuer: /CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Certificate serial: 0199FA69E67795C0C9FD3017DD6B3DC71664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
Manifest number: 0186
Signing time: Sun 19 Oct 2025 03:01:08 +0000
Manifest this update: Sun 19 Oct 2025 03:01:08 +0000
Manifest next update: Mon 20 Oct 2025 03:01:08 +0000
Files and hashes: 1: 4BtODyogHPQwBI4kgWSzLt30Pa4.crl (hash: Q+I6LjewQukMJM2+LR06y+uRM6JJXIMQOKhfIrfS8DY=)
2: KJS8V64pslKuMWFI7cvlulnThJM.roa (hash: TuhgricsSHQzRyANiX5wlopuZuXjn8vfdfEA+WHjVoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:69:e6:77:95:c0:c9:fd:30:17:dd:6b:3d:c7:16:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01b4e0f2a201cf430048e248164b32eddf43dae
Validity
Not Before: Oct 19 03:01:08 2025 GMT
Not After : Oct 20 03:01:08 2025 GMT
Subject: CN=b808bdf7d94cac2e0258f1bd5cbd70e3c170b68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:86:14:2b:0e:90:94:37:da:3a:25:c3:b4:
30:44:e5:13:ce:1b:6e:e2:21:23:00:a1:69:2e:74:
75:9b:a3:5b:6a:54:f6:46:14:ef:88:e0:2c:a0:e7:
08:d1:f8:71:d6:e7:29:3f:10:41:c8:0d:e4:14:4a:
d3:32:c5:9e:74:a6:93:b0:ec:fa:10:75:40:73:ae:
25:37:ad:1a:c3:8b:cf:52:4d:40:8a:e0:ac:a7:c4:
37:4e:49:41:95:42:44:5c:90:00:7c:d5:cc:ae:10:
58:df:98:fb:76:d6:31:29:01:32:e2:f3:5b:06:9f:
f9:d0:be:2a:3b:45:6e:bc:15:47:d9:91:8d:ec:8b:
00:0a:b4:5c:40:40:23:a0:90:7d:66:72:f9:38:b4:
87:13:9f:c1:5f:21:ad:84:ac:ae:3c:23:dd:f5:d0:
48:25:83:72:a5:30:d5:22:92:0c:73:cc:e5:86:aa:
6e:c7:0b:d8:06:33:0a:b8:33:49:e6:61:d4:77:04:
42:8f:31:3c:69:98:24:e0:79:44:37:f2:32:9c:52:
7e:08:bb:10:b1:6c:0e:cc:8d:b6:d5:90:b4:0a:65:
de:bc:dd:9a:0c:2d:34:38:92:15:59:5a:e1:6e:72:
c6:15:fc:02:0c:a9:84:57:44:e2:73:55:e0:d1:bc:
cd:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:08:BD:F7:D9:4C:AC:2E:02:58:F1:BD:5C:BD:70:E3:C1:70:B6:8A
X509v3 Authority Key Identifier:
keyid:E0:1B:4E:0F:2A:20:1C:F4:30:04:8E:24:81:64:B3:2E:DD:F4:3D:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BtODyogHPQwBI4kgWSzLt30Pa4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ec2ccc-8cbd-4bef-941d-c615f9910ffc/1/4BtODyogHPQwBI4kgWSzLt30Pa4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:be:df:cb:d0:b5:9a:13:89:aa:34:6a:40:38:3b:37:48:4b:
9d:a0:35:6f:5c:72:3a:44:31:50:30:49:97:c1:c9:e0:23:dc:
16:54:b0:f6:d7:79:55:39:a3:fb:c6:82:46:66:b7:14:7e:08:
c4:93:a0:7b:6b:c7:70:bb:5b:61:23:33:c2:c8:44:4a:bd:1b:
30:33:97:16:fe:27:02:1b:77:3f:8b:3e:fa:5e:e9:94:72:74:
c5:b9:a1:ee:48:73:72:3c:f5:cf:d6:ae:01:48:d1:33:cd:ff:
55:68:df:d3:1b:3d:9f:e5:89:a4:70:2d:3f:91:90:70:45:72:
04:bf:fb:f0:a3:b2:84:fb:f0:37:11:59:aa:f0:da:f9:57:c0:
4c:cd:48:19:cf:83:1d:f8:e9:e3:68:22:e1:d9:11:41:97:f8:
5c:1b:71:ab:5d:d0:bf:b3:7a:a6:04:2a:62:9c:08:6c:b8:e5:
52:f9:be:b2:df:9a:73:21:98:38:2e:5d:d1:5c:1b:47:aa:80:
da:9a:5b:44:ad:dc:b4:50:22:5e:b3:14:2d:4f:df:27:ce:dc:
e1:bf:13:95:61:df:e3:58:8b:b6:35:04:ee:db:db:e0:d1:c7:
de:13:8f:24:31:d9:60:0b:de:af:05:ba:e3:6b:e2:ba:5e:08:
d5:1b:87:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:14 2025 by rpki-client