Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
File: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft (raw, json)
Hash identifier: XlLVEcf9M7wEe+VmfJq6gGoYC0IsX0wVYo1HSQE6C5w=
Subject key identifier: 07:AA:D3:E8:9F:A5:6B:83:19:A6:1B:81:7D:80:93:8C:72:3D:50:F8
Authority key identifier: E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
Certificate issuer: /CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Certificate serial: 019A725C7E00721C3664FC8219399A067875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
Manifest number: 01BE
Signing time: Tue 11 Nov 2025 10:00:55 +0000
Manifest this update: Tue 11 Nov 2025 10:00:55 +0000
Manifest next update: Wed 12 Nov 2025 10:00:55 +0000
Files and hashes: 1: 4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl (hash: T9eM4jQJ0qpU6PQmG2EOXYzIvVvRqkraqEualA0BzIk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:7e:00:72:1c:36:64:fc:82:19:39:9a:06:78:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01bc874afc299cf10e5b17dc8a43a24fb9c4ae6
Validity
Not Before: Nov 11 10:00:55 2025 GMT
Not After : Nov 12 10:00:55 2025 GMT
Subject: CN=07aad3e89fa56b8319a61b817d80938c723d50f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:da:40:bb:d7:b4:a3:98:ba:86:a6:d9:73:7d:
64:29:22:a9:76:c3:c7:0c:66:c8:31:b8:b9:97:cb:
08:af:f5:b5:d2:df:16:ff:96:f9:45:1f:e8:f4:64:
e3:75:b0:7b:4d:53:20:33:28:e2:3c:c5:e1:ca:dc:
26:de:38:f5:ab:34:af:e5:be:2b:93:31:9c:f7:9e:
13:71:b5:f0:dd:9a:5c:7b:07:8d:dd:12:6d:23:de:
ae:34:fe:fc:e1:79:85:fc:18:4b:b8:b5:5d:a6:dd:
36:d8:07:94:0d:03:ba:2d:f6:6c:c6:ac:7e:f0:03:
23:0a:58:35:ea:c2:c0:ee:50:36:c9:c9:f5:4a:73:
bc:ac:9b:c7:13:30:48:c0:52:09:95:b3:d7:f1:bd:
04:3b:fd:ed:88:39:79:cb:17:50:77:66:88:ab:04:
fc:11:db:6e:e2:e4:a0:e0:0e:1e:ec:d4:ff:da:fd:
45:db:45:3c:8d:5a:f8:65:6a:54:6e:49:f6:1d:8a:
f4:5a:81:7d:2e:c7:25:0b:09:11:3a:51:76:72:32:
81:fb:43:48:3f:de:fb:a5:d1:e4:8d:a6:6b:dd:72:
fa:78:7e:70:69:ae:8a:ac:80:9a:42:9f:f9:06:e0:
3e:b6:cd:cb:87:76:1d:53:f7:b4:bc:f1:f0:9a:3b:
49:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:AA:D3:E8:9F:A5:6B:83:19:A6:1B:81:7D:80:93:8C:72:3D:50:F8
X509v3 Authority Key Identifier:
keyid:E0:1B:C8:74:AF:C2:99:CF:10:E5:B1:7D:C8:A4:3A:24:FB:9C:4A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/474059-adb8-4e69-9180-5c857af19188/1/4BvIdK_Cmc8Q5bF9yKQ6JPucSuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:a5:94:1c:15:1b:89:b3:a4:da:18:d3:ab:59:7b:58:4c:a2:
8b:4e:5a:6c:30:40:5a:55:bb:66:31:d0:8b:42:af:94:18:78:
14:74:05:a2:f4:d5:f2:34:82:6c:aa:1b:e3:d9:e4:50:95:87:
b9:89:8e:08:ae:2a:a0:69:09:7c:24:82:ce:7c:83:e7:fa:fd:
8e:92:b3:80:90:89:1b:82:4f:55:bd:77:16:eb:d8:dd:ca:4e:
1d:1c:7f:67:8f:ab:60:ec:83:62:78:5b:95:f5:a2:05:24:82:
72:a8:c8:56:32:8e:38:22:ca:a6:b6:df:69:3f:9a:0a:76:bb:
1c:28:d0:24:55:dc:78:f3:5f:f0:eb:43:5e:c2:0d:5b:8a:d7:
8f:25:62:04:ec:e8:be:6f:47:2b:b7:47:8f:30:cd:88:1e:4a:
24:12:76:70:76:7c:7f:ac:13:e9:5e:32:d1:3d:78:41:17:89:
0d:c7:28:0d:6c:e3:37:86:cb:6a:81:1d:e8:8b:3a:94:3f:97:
9a:75:31:68:9c:9a:87:f4:71:8d:7d:ef:e5:61:d2:ee:96:92:
ba:10:34:92:6c:4d:4f:cc:c6:33:23:21:0f:7c:65:21:3a:b1:
9b:a0:73:97:24:99:81:3a:49:13:33:0e:c8:ce:df:0d:f0:fa:
7d:ed:83:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:10 2025 by rpki-client