Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: iVyxuNx8BU17yZO0AGJFgM1ppJg8i6SJCh5N52ylv4I=
Subject key identifier: C5:0C:D6:DD:30:F7:12:1A:97:7C:B3:80:23:7A:AD:7F:B0:59:04:1B
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 019A72CA4543E9B4BB2B7CB022017D84D16E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 1048
Signing time: Tue 11 Nov 2025 12:00:49 +0000
Manifest this update: Tue 11 Nov 2025 12:00:49 +0000
Manifest next update: Wed 12 Nov 2025 12:00:49 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: ID3m2RlUcyzbBtIK06yayDnomHp2VWJ7fmBy4TAPFg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:45:43:e9:b4:bb:2b:7c:b0:22:01:7d:84:d1:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Nov 11 12:00:49 2025 GMT
Not After : Nov 12 12:00:49 2025 GMT
Subject: CN=c50cd6dd30f7121a977cb380237aad7fb059041b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:f3:f9:a3:1b:75:24:7c:85:cc:a1:1d:ad:
21:c8:8e:3a:03:b3:1c:07:59:e3:2b:71:08:d2:8b:
f0:f6:cd:cf:1e:b8:cc:08:5f:90:a0:c2:b7:b7:72:
e8:f8:2b:37:ac:c2:a8:17:19:25:b3:df:5f:f8:77:
f8:0f:89:a4:7f:96:5e:35:7d:70:3c:ea:32:d0:ab:
0a:8b:96:c8:a0:e7:76:7e:f2:61:83:99:a2:57:46:
7a:8d:bc:be:19:a3:a1:d8:7d:ca:5d:79:ac:47:7c:
47:79:1f:3a:38:33:5b:a8:19:d7:9b:ac:7e:47:aa:
c7:06:f9:2a:da:5d:48:e4:b6:30:24:03:5f:63:3d:
fc:85:52:e1:3f:6e:82:79:47:67:36:ce:e1:1a:4c:
73:8d:ec:84:78:49:5c:1d:5e:db:d7:06:15:65:5a:
c5:b0:a7:82:1d:bf:8e:a8:5b:fd:50:25:21:34:3f:
f8:d6:61:a8:f2:e1:f0:f8:e3:93:4d:bd:08:f7:3a:
b0:3a:40:85:bd:dc:1d:bb:12:9c:1c:b0:39:2e:25:
00:31:51:32:f9:9d:cf:47:f7:6b:1e:56:4b:0e:20:
4f:57:e7:7a:04:7c:18:c4:be:f8:68:ef:c8:e2:29:
7c:da:f7:a9:5e:ee:41:d5:30:7f:dc:4e:cb:c5:20:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:0C:D6:DD:30:F7:12:1A:97:7C:B3:80:23:7A:AD:7F:B0:59:04:1B
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:db:39:6f:67:36:ab:ff:4c:67:49:20:d4:df:c6:ef:dc:2e:
69:28:a8:48:92:7d:e4:27:a5:34:06:fa:52:18:1a:1b:fa:12:
e9:3c:80:be:0c:e1:9f:ef:cd:67:f7:0b:87:d4:6e:68:b2:ca:
bb:09:c1:6b:7c:22:8d:03:51:c0:87:7c:90:21:32:ee:e7:49:
9b:50:1e:ef:69:4f:e5:b9:dc:fb:d3:2e:30:54:97:4f:07:51:
1e:3c:11:f7:3e:23:85:61:c8:28:98:86:39:9a:00:8e:9c:13:
97:5c:22:76:59:d5:64:c3:f8:38:d9:a0:a0:b5:ff:9d:8b:97:
34:a8:f3:69:93:7d:9f:12:09:b4:ab:3c:30:c4:d1:b5:6b:ab:
f3:dc:75:7f:db:b3:c7:3f:4e:f2:56:45:02:62:b4:c7:39:89:
09:12:03:42:87:97:2a:30:57:72:c0:c3:f3:fd:2b:9a:d6:98:
25:06:b8:cc:b0:a2:f2:34:77:44:35:25:4b:06:b9:07:91:63:
8a:4c:09:31:c7:e0:a4:c9:31:7a:cf:97:83:53:75:60:58:d5:
39:e4:8b:25:be:33:0a:52:fd:9d:81:03:72:0d:13:61:52:e6:
a1:c9:6c:59:a7:84:54:56:68:90:b0:7d:d3:6b:0f:8b:6b:7e:
89:6e:b3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:17:28 2025 by rpki-client