Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
File: 4UYAGfiAaeNhThUQkhzH5E0cq-I.mft (raw, json)
Hash identifier: YpcyhzDxSTlvEshYifD6O94ZoGgV8/BQ68BWM68AuJw=
Subject key identifier: 24:D8:24:7D:C4:B6:40:11:C4:EA:3D:07:03:3C:9E:3D:B4:69:2B:F9
Authority key identifier: E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
Certificate issuer: /CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Certificate serial: 019A213FD1EBA4546D2C933E547C80C7528D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
Manifest number: 16F3
Signing time: Sun 26 Oct 2025 16:00:21 +0000
Manifest this update: Sun 26 Oct 2025 16:00:21 +0000
Manifest next update: Mon 27 Oct 2025 16:00:21 +0000
Files and hashes: 1: 4UYAGfiAaeNhThUQkhzH5E0cq-I.crl (hash: sj/vkfcNb95GTFLQD3j+v3yw/Y04unl0d5nrehA5ntc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:3f:d1:eb:a4:54:6d:2c:93:3e:54:7c:80:c7:52:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1460019f88069e3614e1510921cc7e44d1cabe2
Validity
Not Before: Oct 26 16:00:21 2025 GMT
Not After : Oct 27 16:00:21 2025 GMT
Subject: CN=24d8247dc4b64011c4ea3d07033c9e3db4692bf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:00:ac:33:19:1f:4b:80:c7:4b:1a:2a:28:
cd:70:ce:43:f3:34:73:26:8a:77:45:ce:66:08:85:
9f:a7:4e:d3:b3:1b:57:b8:33:3f:85:50:2f:55:fa:
31:c0:f5:65:e8:7b:0d:e3:02:35:24:d1:d4:cf:19:
9e:52:2b:56:87:dc:a0:da:c6:5e:16:36:9b:8e:95:
df:d2:4a:d9:0a:b1:2c:54:75:f6:46:11:39:b5:b1:
fa:d5:57:33:be:62:9a:83:0f:09:1e:74:b3:d4:27:
a1:c3:4f:56:66:16:6f:0e:9f:ae:67:89:81:02:49:
8e:b2:9e:d3:d2:6a:cf:a9:b2:6d:0a:81:98:d8:5a:
c1:6f:7d:05:b3:6d:ec:69:62:6d:d4:8c:8f:6f:d8:
af:06:59:92:38:96:27:25:07:11:b7:65:07:04:8f:
1d:e2:9c:de:b2:5c:b3:b0:76:cc:8c:1c:3f:bb:b6:
48:e7:b3:92:5f:0f:1f:43:6a:a4:73:03:48:e5:70:
33:27:d1:69:74:2d:29:05:01:f9:1d:a9:95:90:e9:
01:34:2e:02:31:d5:d0:46:44:33:b9:15:3b:15:28:
ce:36:45:02:1f:c0:53:dd:fc:4a:7c:c4:d3:37:61:
d9:24:5e:74:ff:99:08:0e:38:91:6d:10:2a:f5:31:
cb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D8:24:7D:C4:B6:40:11:C4:EA:3D:07:03:3C:9E:3D:B4:69:2B:F9
X509v3 Authority Key Identifier:
keyid:E1:46:00:19:F8:80:69:E3:61:4E:15:10:92:1C:C7:E4:4D:1C:AB:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UYAGfiAaeNhThUQkhzH5E0cq-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e444d-6720-444a-ae54-fcd1a63c5c45/1/4UYAGfiAaeNhThUQkhzH5E0cq-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:84:2f:93:41:6a:38:0f:cf:d3:53:e4:f2:c8:60:bd:3b:4c:
c7:15:3d:a8:05:44:f6:b5:7d:3e:ba:05:dd:55:fa:c0:ec:d7:
70:d3:11:15:6e:9b:1d:9f:b7:e8:fa:7e:3b:ab:12:97:56:9e:
27:0d:7a:f0:55:10:5e:e8:53:8f:78:b6:1d:5f:ff:44:76:4f:
01:2b:8d:8a:10:82:80:f4:c3:6e:6e:c5:91:c6:f8:52:5f:8d:
30:19:7e:9c:f2:ce:12:3a:95:e6:9f:6d:d9:5c:dd:3e:10:25:
d0:61:d1:ca:22:86:ff:2b:72:5b:85:43:30:c4:03:34:c5:62:
a7:e7:c9:25:ad:9b:c3:21:14:60:32:39:ee:ec:5c:21:2a:a7:
a3:8c:2b:6c:50:a6:56:f9:dc:8c:7d:25:25:95:f4:09:ed:a2:
2e:96:62:f7:55:1a:0a:bd:11:50:8c:aa:6a:34:07:d8:2b:68:
5b:27:7a:5c:8c:95:e4:ed:6e:5b:ad:4f:af:43:4f:ef:bd:57:
75:f7:06:f8:f2:f5:59:42:06:cf:70:22:25:1b:12:0f:a5:70:
44:16:ca:d8:8e:f0:81:a9:26:b2:d8:a8:64:2e:c6:95:de:0d:
1d:b4:67:80:df:08:5a:13:d3:cc:98:41:8c:33:d5:74:8b:bd:
6b:16:91:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:34 2025 by rpki-client