Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
File: 4xw9EfQ8dCp9AIVC3079O7ANLXc.mft (raw, json)
Hash identifier: Jvru7lFV8W5cI2QXBzHVdx++wClAsqWl4K/2sJys+L8=
Subject key identifier: F2:DA:CE:73:D0:56:6E:D9:35:5D:1E:D5:52:39:B3:76:FA:78:39:49
Authority key identifier: E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77
Certificate issuer: /CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77
Certificate serial: 019A7226077E2B916087F12D8F03073F4C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
Manifest number: 0F
Signing time: Tue 11 Nov 2025 09:01:26 +0000
Manifest this update: Tue 11 Nov 2025 09:01:26 +0000
Manifest next update: Wed 12 Nov 2025 09:01:26 +0000
Files and hashes: 1: 4xw9EfQ8dCp9AIVC3079O7ANLXc.crl (hash: kBwQHIbZCeV33yUcTBiKFOEWdIcyB7ppw4uSmER1Vb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:07:7e:2b:91:60:87:f1:2d:8f:03:07:3f:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e31c3d11f43c742a7d008542df4efd3bb00d2d77
Validity
Not Before: Nov 11 09:01:26 2025 GMT
Not After : Nov 12 09:01:26 2025 GMT
Subject: CN=f2dace73d0566ed9355d1ed55239b376fa783949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:62:fb:57:71:56:b4:d7:51:f8:59:df:3a:62:
a4:39:e0:a7:83:10:bf:b6:76:04:2a:8b:30:8b:65:
0f:d4:fb:5a:29:f0:a5:09:a1:5c:50:e2:b3:70:2c:
51:a1:1c:07:d0:cf:00:7c:b7:23:24:a7:d8:1c:9f:
48:50:59:d5:bb:25:43:d3:6a:78:a2:58:60:7a:35:
54:96:ff:30:3f:1f:fa:0a:9b:c0:b8:ed:b5:db:66:
d4:e7:31:af:25:f2:17:b0:09:48:b7:6e:fb:9b:f0:
77:22:ec:9f:50:a8:15:f4:31:48:b4:dc:e0:c5:00:
e4:0f:60:29:4f:2d:79:09:e7:d5:39:ad:f5:9c:28:
2f:85:81:65:51:6f:bc:5a:92:7c:02:fa:39:9f:97:
a0:7b:26:a7:06:1d:6e:ac:86:13:90:d9:b7:7d:91:
77:5a:0c:f4:d1:08:7d:e4:cb:2b:cf:83:1c:6a:22:
ec:77:5b:da:57:fb:c2:e1:10:9e:3a:6a:77:13:ab:
d1:ef:c2:3f:ed:04:38:37:a8:63:94:68:68:a6:44:
fe:12:b7:7b:9d:f6:9f:08:33:1c:3d:b6:46:ed:16:
6a:65:a2:c6:2f:f4:5e:3f:cf:ba:39:a2:6e:d8:2c:
dd:61:69:4f:7d:20:ec:13:2d:8f:91:a7:39:e7:39:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DA:CE:73:D0:56:6E:D9:35:5D:1E:D5:52:39:B3:76:FA:78:39:49
X509v3 Authority Key Identifier:
keyid:E3:1C:3D:11:F4:3C:74:2A:7D:00:85:42:DF:4E:FD:3B:B0:0D:2D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xw9EfQ8dCp9AIVC3079O7ANLXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6492b2-5acc-4a90-b533-6e0f6d39fffd/1/4xw9EfQ8dCp9AIVC3079O7ANLXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:97:7f:9e:2d:4f:7f:a0:a5:5a:72:57:aa:a6:8f:e0:38:b1:
1e:8b:1c:cc:80:d5:33:db:f0:7d:da:11:13:9e:71:e2:af:50:
b8:41:6a:5e:e7:2a:95:c7:e1:0f:18:f6:62:94:0c:18:b4:b1:
d7:75:10:6c:87:8c:d6:e3:90:a8:2c:4c:ad:c2:53:5f:df:70:
68:79:6d:cc:14:ea:48:14:c6:00:2e:4c:51:a3:7c:d6:fb:69:
b4:79:93:bd:64:a7:b4:e7:8a:68:e7:b3:78:7d:a9:47:3f:8d:
12:bf:87:83:1b:4a:cb:0a:de:f7:a2:10:29:a0:f2:02:6b:b3:
2f:68:aa:45:1f:9f:26:7b:fc:cc:77:04:b9:dd:fb:5b:42:1a:
ca:6f:10:3e:88:d1:63:f7:bd:e6:df:12:9e:ef:7a:0c:06:19:
2a:f8:d9:ec:c5:d2:5b:48:82:b9:9f:b6:91:10:66:7f:15:ae:
b6:b2:a2:f5:76:0e:1b:d4:e1:69:81:46:f9:55:95:a9:ae:88:
2e:68:6b:7b:9e:c7:b4:b4:20:a5:4b:f9:40:bc:a7:ab:88:73:
3b:5c:7d:9e:b7:c5:55:8b:23:5c:a6:f2:37:af:c3:e7:f4:05:
ef:d5:64:8d:63:25:6d:b4:f2:b3:cb:38:de:96:bf:0b:61:60:
73:50:c2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:14 2025 by rpki-client