Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
File: 4rVv8vrl9iGUksEtg-EjnWrW4S8.mft (raw, json)
Hash identifier: D3q/IuNH2WQ/9fLFgwV1MybQvwoEFWw5n4BoLCA6AoQ=
Subject key identifier: A7:C8:21:AF:A8:60:E6:25:0F:62:EC:66:2F:49:39:A2:7F:72:45:3D
Authority key identifier: E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
Certificate issuer: /CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Certificate serial: 019A72940D51B003F6DC3A3DE06407CE4EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
Manifest number: 16AE
Signing time: Tue 11 Nov 2025 11:01:36 +0000
Manifest this update: Tue 11 Nov 2025 11:01:36 +0000
Manifest next update: Wed 12 Nov 2025 11:01:36 +0000
Files and hashes: 1: 4rVv8vrl9iGUksEtg-EjnWrW4S8.crl (hash: ZfYQyaYnDlJg4qp0LlW3639H9GRywupCpcdP6a2Gpj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:94:0d:51:b0:03:f6:dc:3a:3d:e0:64:07:ce:4e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b56ff2fae5f6219492c12d83e1239d6ad6e12f
Validity
Not Before: Nov 11 11:01:36 2025 GMT
Not After : Nov 12 11:01:36 2025 GMT
Subject: CN=a7c821afa860e6250f62ec662f4939a27f72453d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bf:55:f4:f0:8e:76:16:eb:ae:9a:82:c2:d0:
e4:af:8f:3a:8d:7f:b1:79:ce:3c:9e:03:04:7b:79:
ba:8a:58:8e:ec:b1:58:b1:a5:d2:4c:ee:f6:a1:7a:
46:58:b1:4b:e8:ab:d9:6c:ce:59:6e:5d:8d:35:a2:
ad:0b:a5:a8:0b:df:fa:7c:04:0b:38:14:eb:a4:34:
c8:2f:f3:05:91:7d:18:a9:ea:71:91:bf:0a:90:49:
11:b0:e7:f9:ed:58:81:3a:5e:ec:55:8d:b3:57:99:
61:77:75:80:6f:a1:fb:bc:4c:42:2c:36:e6:fa:7b:
0c:4f:ff:51:22:20:63:1a:8d:a3:f5:cb:1e:8a:14:
cc:94:68:3b:4b:67:4a:c0:74:9c:3d:34:da:dd:25:
58:c1:c9:87:b5:55:f9:16:7c:38:e1:24:cf:4c:81:
4c:10:b2:c6:df:82:fc:5a:37:a1:4c:d2:91:9e:a2:
5e:f4:c9:15:12:87:d6:34:67:32:65:82:9a:f5:29:
bc:24:58:50:56:c7:e2:8d:45:8c:32:4b:e9:fd:a4:
ae:1e:bc:79:29:3a:ad:14:3f:11:27:8d:fb:79:7b:
7f:c2:5e:a0:54:c0:bd:f4:6a:3f:c3:cf:4d:3c:42:
44:d6:9d:1c:94:30:f4:06:90:3b:2f:9b:4f:de:dc:
91:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C8:21:AF:A8:60:E6:25:0F:62:EC:66:2F:49:39:A2:7F:72:45:3D
X509v3 Authority Key Identifier:
keyid:E2:B5:6F:F2:FA:E5:F6:21:94:92:C1:2D:83:E1:23:9D:6A:D6:E1:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rVv8vrl9iGUksEtg-EjnWrW4S8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/108bff-6e70-43d2-ad89-4f67ff581141/1/4rVv8vrl9iGUksEtg-EjnWrW4S8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:57:b5:9f:b5:d0:ca:72:96:6e:72:89:58:3f:df:68:4c:9d:
2c:06:b4:79:14:9e:0e:23:c5:e6:76:42:e9:46:8b:a9:3f:a2:
0d:a1:79:d0:75:4d:b4:b2:d6:b7:e8:6d:e4:5e:4f:85:6d:3b:
3e:fa:2a:b6:12:f8:8d:d4:b1:1c:b0:1a:a7:c9:53:fe:47:30:
2f:29:01:aa:dc:b3:b6:7f:66:2b:ef:6b:26:15:fa:bd:4d:f4:
13:10:fe:d0:a6:36:7d:86:6e:7b:f9:49:3b:76:07:b4:1b:9f:
1b:5f:43:ee:a2:bf:26:64:c4:ba:11:b1:64:57:38:a1:f7:e0:
10:69:a9:aa:b3:33:c7:87:16:79:86:18:b0:da:26:2f:39:04:
13:29:99:06:16:54:e5:ff:dc:63:3c:88:6a:4c:1e:aa:ce:de:
34:43:66:ec:32:df:14:73:a9:67:85:67:8c:64:b3:ef:5f:72:
55:71:07:ce:aa:f0:3f:4e:29:7f:f3:c8:75:44:00:bd:e6:d5:
8b:a1:8e:38:e6:bb:d3:a8:58:7b:37:43:d6:16:8f:42:dc:18:
41:a9:84:78:ef:32:41:7b:d7:e3:30:5c:9d:a0:0a:d8:35:58:
f9:8e:63:20:4a:81:66:70:e0:f2:44:6e:be:de:98:68:a4:6f:
b3:90:75:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:26 2025 by rpki-client