Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: 9aTlxtOnJaPV6ECxP/AZBdDSr94tuECnVYRYdcUI0xs=
Subject key identifier: 0F:79:6C:05:E6:13:72:59:0B:E0:EF:B9:6B:F3:AA:65:36:14:F1:E7
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 019A71135AA505D6F5B020A6F8D3F8D5D75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 07B0
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: 7v2TxMbN2k5aHt9bv7/BHr4HQpNTJIpE31Kw4TGIQgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:5a:a5:05:d6:f5:b0:20:a6:f8:d3:f8:d5:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=0f796c05e61372590be0efb96bf3aa653614f1e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5b:bc:3f:db:b9:ac:6a:13:a6:54:d9:26:bb:
6a:fe:1c:35:a0:1e:eb:a8:d1:88:8f:a0:80:c6:51:
1d:1b:77:e5:40:2d:30:c7:51:fd:01:45:85:b1:eb:
4b:9a:a9:02:a5:5a:bb:d0:ce:13:1b:97:69:82:f1:
0d:ea:90:13:7a:92:96:13:c0:47:ec:6b:0f:f8:97:
b8:3c:bf:65:47:22:ad:c9:07:7e:cb:10:ec:ae:9a:
25:d4:04:a4:d7:90:75:93:dc:c7:94:e7:f9:69:83:
c8:74:c4:76:ff:49:c4:8a:81:cd:ef:f8:5f:f9:f7:
69:09:c1:2b:99:af:72:7f:4f:63:76:e6:1c:a6:a1:
59:2c:91:52:41:f2:a5:45:db:22:57:8a:9f:31:73:
70:d7:7b:20:ea:7b:9a:83:c1:d9:05:24:05:79:8a:
44:5e:ca:b7:63:2a:9e:d3:d1:b3:23:89:be:5d:42:
26:3d:10:20:fb:9a:32:70:f8:de:70:99:76:29:18:
de:09:73:fe:8d:16:64:b5:87:70:f0:16:30:3a:3a:
76:53:13:2d:b2:1e:87:31:12:1b:fb:fb:5b:48:23:
ff:5d:d6:23:83:15:68:9b:7d:98:49:7f:88:70:cb:
a5:6b:70:a4:d4:a3:7d:ee:07:b4:b2:e3:ad:d4:d7:
d9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:79:6C:05:E6:13:72:59:0B:E0:EF:B9:6B:F3:AA:65:36:14:F1:E7
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ec:75:3a:99:eb:2d:a7:ff:f8:d7:11:4d:7b:2b:db:96:eb:
c2:a8:61:48:f9:7f:3d:c7:93:73:7e:1b:4b:1d:22:91:fa:a6:
b7:97:3c:d5:f7:29:3e:dc:7b:06:4b:0b:f9:75:d2:f6:25:d4:
94:68:ec:0c:1c:19:a4:10:29:01:64:27:c2:3b:e0:0b:ce:43:
bb:63:0b:8f:81:a6:d7:26:4e:ae:9c:39:cb:21:cf:2f:fb:ef:
27:35:3a:30:53:72:8f:1e:59:37:4b:19:c6:30:bf:c4:3e:88:
39:65:42:b7:bd:90:ce:df:64:c2:9b:e9:08:b7:a7:4a:36:01:
b5:66:cc:1b:f9:b7:9f:e4:af:7f:c5:19:84:31:80:2f:12:a9:
d9:fe:bb:5e:67:ef:64:d0:e4:61:97:22:7c:64:f1:fd:66:b8:
32:2d:c2:d2:a1:bf:c9:ac:ac:8f:1f:c2:9d:3b:9b:89:ec:00:
fa:5d:c2:df:81:4e:30:7f:39:8b:aa:45:56:d5:74:06:4a:e2:
2a:82:5c:63:9f:90:1c:1d:1f:e3:e6:15:41:46:77:ca:a3:29:
95:ab:7a:66:e0:b8:80:a4:0a:47:7c:fa:04:34:0d:9c:ee:1b:
e7:3e:97:b8:c3:3f:e8:16:61:a1:69:75:78:e8:05:78:99:52:
4f:d6:6f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:02 2025 by rpki-client