Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
File: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft (raw, json)
Hash identifier: NLLq1SYZc3mT1n6Fdx2HWzz941Qq5DxkzaUqoDs4cXo=
Subject key identifier: EF:37:89:93:92:53:65:6E:93:5F:67:E0:BA:B2:B0:BE:8F:42:D7:39
Authority key identifier: E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
Certificate issuer: /CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Certificate serial: 019A7149C85F87A009E5B3714A8DBA7F09DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
Manifest number: D2
Signing time: Tue 11 Nov 2025 05:00:52 +0000
Manifest this update: Tue 11 Nov 2025 05:00:52 +0000
Manifest next update: Wed 12 Nov 2025 05:00:52 +0000
Files and hashes: 1: 4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl (hash: cTFjIcV7Y3e1MVRn8tOgaHMGL49jAQxvYG3ZvDFGij8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:c8:5f:87:a0:09:e5:b3:71:4a:8d:ba:7f:09:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e015ff005aa26691c7e330ebf9c1c4c1ae5494d4
Validity
Not Before: Nov 11 05:00:52 2025 GMT
Not After : Nov 12 05:00:52 2025 GMT
Subject: CN=ef3789939253656e935f67e0bab2b0be8f42d739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f0:53:ad:8c:c1:23:e0:7e:e7:67:f2:eb:65:
96:24:54:4d:09:d9:45:a9:41:fc:5e:13:74:76:6a:
fe:95:92:ef:51:81:ce:3f:8b:aa:a8:e0:ab:43:e9:
07:04:a5:56:dd:ee:74:d1:89:17:50:82:dd:35:b7:
bc:d0:08:cd:54:d0:1d:3a:55:fb:55:13:44:18:ee:
b2:21:8a:2d:6a:9d:21:e8:c9:16:48:a8:4d:c9:4b:
5b:fe:f1:48:3f:c0:5b:7f:b4:b5:1b:fc:2d:eb:ff:
2e:7a:3a:6d:e0:99:07:ba:1e:c5:62:d7:6b:3b:fe:
3c:e8:0f:e6:ad:9d:06:28:cb:60:47:b0:2f:a8:d3:
7c:16:eb:ac:69:f9:b6:db:41:54:8c:e9:b6:71:79:
e5:07:42:42:9a:89:5e:1d:c6:36:be:6d:0f:d9:68:
aa:0e:13:3a:e2:74:9e:7c:17:e0:24:ba:85:29:ad:
03:68:3c:60:30:4d:20:6f:a7:90:c4:3e:45:bd:c3:
e0:c0:24:af:6f:55:c5:e7:a0:7e:5b:8a:d0:b8:a3:
1f:78:2e:50:26:f4:c1:9d:96:15:91:41:89:b8:c4:
e5:bf:63:9d:21:dd:10:4a:ff:a1:46:30:8d:9e:27:
c9:76:d9:c0:94:73:b6:0e:ac:0f:6a:ed:9a:18:69:
87:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:37:89:93:92:53:65:6E:93:5F:67:E0:BA:B2:B0:BE:8F:42:D7:39
X509v3 Authority Key Identifier:
keyid:E0:15:FF:00:5A:A2:66:91:C7:E3:30:EB:F9:C1:C4:C1:AE:54:94:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/381b9e-cb19-4088-9066-dee317eec2f7/1/4BX_AFqiZpHH4zDr-cHEwa5UlNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1a:8d:b0:ca:53:82:3a:17:e6:47:c2:e3:f1:2d:2a:1e:cb:
f1:21:d8:3a:ea:95:50:89:0f:cc:51:95:11:e5:66:47:44:65:
19:2b:88:97:23:23:ab:91:20:22:53:a1:f3:99:3b:dc:5b:91:
d0:eb:f5:71:56:bf:ad:2f:74:c3:af:88:ba:53:8c:0d:4d:eb:
2a:28:22:39:ab:db:eb:70:ae:9d:05:7e:d0:7a:46:00:f0:b2:
87:f3:3f:84:30:bf:5f:46:af:86:f0:cb:59:4b:fc:c2:d9:9c:
97:fb:30:76:a5:eb:48:1b:ad:92:88:1e:b9:5c:95:84:6e:af:
2b:16:63:25:5f:25:fa:eb:02:69:90:83:9e:22:96:6e:8d:de:
31:d6:72:25:ea:01:16:11:d9:60:48:79:95:d7:19:ca:a5:2b:
6b:32:33:21:66:b4:80:90:67:c6:b0:f4:6b:37:1b:35:0f:b4:
5f:aa:a9:fa:a1:50:91:7c:28:03:98:a0:d4:8e:91:d4:af:12:
04:a9:a5:d4:2c:42:4b:37:55:ab:8a:d4:0f:75:0f:e8:62:fd:
a2:e7:0d:d5:ce:9f:73:06:39:ba:1e:61:93:b8:23:8e:12:5b:
c2:f9:c0:5a:7c:2a:25:14:c1:d5:97:72:20:85:93:0f:d2:c5:
66:7b:b4:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:59:36 2025 by rpki-client