Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: EkrD13MOZMpyScH/4CBHJ9TiKXuTG7kh9TXptAcqIHk=
Subject key identifier: 8E:42:CC:CF:40:11:DB:7C:CB:85:1C:D9:8D:18:B3:D7:A5:14:D7:F0
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 019A71B8108E261EDA46D19009D3F71BBD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 144F
Signing time: Tue 11 Nov 2025 07:01:19 +0000
Manifest this update: Tue 11 Nov 2025 07:01:19 +0000
Manifest next update: Wed 12 Nov 2025 07:01:19 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: MibJwP1h8j9SsF7Wg7QNprI1qZu35lFitiXpuWHQt0A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:10:8e:26:1e:da:46:d1:90:09:d3:f7:1b:bd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Nov 11 07:01:19 2025 GMT
Not After : Nov 12 07:01:19 2025 GMT
Subject: CN=8e42cccf4011db7ccb851cd98d18b3d7a514d7f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:2b:a5:5f:7e:ed:3b:7d:f8:04:6a:15:67:
78:d8:58:7a:57:a4:8b:cb:f5:3a:4b:ca:9b:b8:62:
72:07:33:be:2d:9e:78:8c:d0:fb:0c:ec:3b:a6:c1:
d0:05:80:d6:3f:46:7e:63:59:e7:58:35:0a:a8:30:
92:dc:6b:59:e6:90:93:29:a0:9f:e5:79:83:aa:0b:
7e:36:0f:ba:e4:2e:73:e8:13:8e:ef:88:d9:87:94:
32:07:cf:a0:cc:35:99:10:3f:a2:7f:3a:22:4b:88:
18:5d:2c:47:89:8c:42:a4:1b:76:29:8b:ff:fd:5e:
e5:e8:f9:48:be:13:f2:3f:7e:c2:e0:02:97:c0:b5:
ad:59:98:44:6d:50:67:1e:2f:d5:8d:72:e4:56:93:
43:a0:1b:41:b8:b9:cb:92:59:23:2f:d8:6b:92:7f:
a7:32:fb:3a:67:5d:08:d1:24:c5:82:34:a3:3b:9c:
11:a8:ec:39:8a:c5:32:dc:65:68:b5:a8:0b:89:05:
1c:46:44:1e:9b:37:af:83:8e:a0:f0:2f:9b:15:8f:
67:e9:63:45:78:0a:c3:3b:69:9b:f2:c6:bb:9d:74:
f7:df:71:a0:06:7f:ad:38:5c:d8:63:2f:f6:32:76:
39:a7:1b:81:25:f3:ac:cc:2c:94:56:ad:dc:1d:9c:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:42:CC:CF:40:11:DB:7C:CB:85:1C:D9:8D:18:B3:D7:A5:14:D7:F0
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:88:79:21:c4:b2:c4:28:0a:e5:b9:5d:3b:f6:e2:05:33:80:
e2:fc:cb:32:25:81:db:b8:e7:cf:ca:3f:c5:8a:30:a1:0a:b3:
67:9c:30:ee:f3:9e:51:21:b6:32:c5:1b:11:85:b7:35:88:40:
ca:99:a2:a3:70:8e:0e:8d:3a:04:79:2e:a0:b9:0f:04:1e:8b:
92:9e:b8:32:d4:4f:08:25:24:87:15:6f:fc:64:3c:01:2a:f4:
b8:47:32:09:51:4c:7c:20:fe:64:aa:bd:c6:dc:60:52:10:ac:
66:8a:73:7c:49:d6:64:f8:a2:4b:50:c8:41:7a:96:6e:ad:d1:
54:a6:1e:e0:71:e4:d4:35:1b:c9:6a:87:95:c6:e7:04:a5:3d:
7d:e7:2d:f7:18:54:a4:5d:fe:ed:27:f0:71:03:25:19:96:75:
5f:0d:77:7b:c2:8e:09:15:db:d7:3a:f7:c9:65:d7:8f:2f:ed:
e3:08:bd:bf:aa:b2:cb:01:32:82:d0:f8:f8:05:73:99:88:88:
e0:27:6b:c4:07:c5:9f:4a:f5:a7:e5:76:a6:8b:b9:f4:3f:d6:
4c:15:f9:a2:18:d8:72:d0:a0:b5:ea:40:3f:60:dd:93:bc:83:
a5:26:b9:15:71:5e:5b:be:57:2b:9e:a0:23:40:25:b1:a2:4b:
22:4b:4d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:39 2025 by rpki-client