Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: 8vSevQK9/I412Rxt+tvuzJYiMpYPXPQyQnAzKKOpjQA=
Subject key identifier: FD:12:9C:CF:7D:A9:9C:A9:59:64:2A:A0:DE:02:EC:7B:1E:8E:4B:4E
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 019A71B8CDF4EC4D4593B2869D263B7218FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0B2B
Signing time: Tue 11 Nov 2025 07:02:08 +0000
Manifest this update: Tue 11 Nov 2025 07:02:08 +0000
Manifest next update: Wed 12 Nov 2025 07:02:08 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: BMCjtEbuM4/8Jmfjl/r6V/wqwKoDBdLwiNEPh0Xuvqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:cd:f4:ec:4d:45:93:b2:86:9d:26:3b:72:18:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Nov 11 07:02:08 2025 GMT
Not After : Nov 12 07:02:08 2025 GMT
Subject: CN=fd129ccf7da99ca959642aa0de02ec7b1e8e4b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:03:35:cf:ce:d0:b3:14:63:d6:d1:7a:2d:50:
8a:e9:c6:f2:f4:d2:cb:7e:3e:22:46:5e:d7:30:a9:
4c:9a:4a:18:b0:98:7c:83:7d:38:30:3a:a7:da:99:
b5:bb:48:f7:38:23:08:87:b2:fd:7e:20:cb:d7:66:
fc:95:df:07:21:46:17:7e:cc:d8:84:d4:81:be:31:
35:73:6a:b8:b2:fe:91:4b:07:06:b5:cc:ea:0a:79:
7b:84:0d:61:fe:ca:b3:d8:4e:3f:0f:ce:72:01:c2:
8d:7b:b8:22:ce:99:9a:54:3e:9d:28:22:b1:3a:58:
cd:82:29:df:76:01:89:08:c2:90:73:7c:d8:25:aa:
a1:de:f1:e2:5b:2a:a4:70:98:b5:62:99:a1:af:0a:
44:cc:99:77:38:59:7c:1c:90:95:27:c4:55:9f:1a:
ce:42:c3:f1:cc:e2:c6:26:04:a5:ab:33:cc:46:b3:
af:ea:d6:32:68:d1:97:74:7d:04:69:99:dc:04:19:
cc:03:d6:8a:cf:5b:a4:bd:11:d4:05:4f:65:ae:1b:
e8:9f:af:a9:ef:de:63:73:41:cc:1d:71:3e:3c:44:
58:21:52:63:d0:5d:f9:2f:28:2f:eb:59:37:30:93:
43:59:ad:6f:ae:fb:68:c4:9e:30:da:a7:ea:08:48:
d3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:12:9C:CF:7D:A9:9C:A9:59:64:2A:A0:DE:02:EC:7B:1E:8E:4B:4E
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1c:4a:db:4d:1c:09:df:c5:1f:e1:d2:96:68:d2:2f:95:5d:
ec:df:0a:da:63:73:a9:78:74:4d:a7:52:fa:e2:26:38:df:ca:
d0:a3:2c:34:6f:e3:45:52:69:c5:3a:61:af:91:75:97:cc:2e:
6b:c0:86:9a:5b:d8:3f:13:10:2d:4a:98:3c:a6:d3:f6:1a:69:
d8:60:3c:ba:e3:3b:51:12:a2:60:41:68:15:e2:de:e0:a0:21:
66:8e:f0:cb:3b:8a:5b:b7:96:4e:48:c9:7e:f8:f5:5e:13:3b:
24:f2:8b:1a:6a:f7:65:ea:ab:38:eb:87:c1:61:8f:90:f2:2a:
25:cb:2c:4a:4e:2e:ed:57:d1:b4:db:75:cf:ca:54:d6:26:fc:
40:13:13:52:a6:51:37:fb:f4:44:18:ac:f6:e1:a4:ed:f8:55:
52:37:48:bf:2c:2c:1e:11:f5:60:94:68:66:70:69:fd:ba:81:
7c:40:64:de:0f:7f:df:2a:d4:ec:26:da:47:e5:3e:7e:a9:ec:
29:91:0c:24:ae:df:43:b4:b4:24:4c:30:97:6b:7f:c0:10:e1:
c4:64:b1:fe:6e:4f:42:14:64:2b:0a:b5:3b:35:b3:b1:0d:d3:
61:c0:2d:ed:c6:2e:ba:2e:ee:2b:a9:de:b7:93:4e:c6:58:97:
e2:9c:0b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:17 2025 by rpki-client