Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
File: 4IZuWnxyXctqE4zGw0DP2tQxXT4.mft (raw, json)
Hash identifier: 7pQooLveV0qBIl5JPL6TmXmxexLyFcxOQ7iTQuBq+7U=
Subject key identifier: 8F:81:F7:4D:F3:09:73:08:AF:05:C2:D2:C4:26:43:FC:BF:0B:B1:A9
Authority key identifier: E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
Certificate issuer: /CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Certificate serial: 019A7225E633351EBD5F409AA6DF4459F7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:17 +0000
Manifest this update: Tue 11 Nov 2025 09:01:17 +0000
Manifest next update: Wed 12 Nov 2025 09:01:17 +0000
Files and hashes: 1: 4IZuWnxyXctqE4zGw0DP2tQxXT4.crl (hash: WLcv04Kt0hdDRYJmuda37az2piyesGUrA4GKDilhK/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:e6:33:35:1e:bd:5f:40:9a:a6:df:44:59:f7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0866e5a7c725dcb6a138cc6c340cfdad4315d3e
Validity
Not Before: Nov 11 09:01:17 2025 GMT
Not After : Nov 12 09:01:17 2025 GMT
Subject: CN=8f81f74df3097308af05c2d2c42643fcbf0bb1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0d:c0:68:bc:4e:95:14:58:f3:10:90:6b:57:
35:d3:ad:52:07:60:fa:13:e2:8b:2c:99:93:d9:77:
4e:23:d1:51:f6:79:06:fd:a8:3b:94:18:d8:5e:ee:
d1:04:97:3e:44:83:a3:3d:8a:cf:23:ca:eb:be:b1:
f3:09:a8:18:84:7d:87:0b:c8:b8:57:bb:ff:dd:75:
61:c1:2f:81:6e:dc:60:e1:72:77:e3:f6:68:3d:f9:
3a:78:61:da:32:5e:4e:44:c5:06:8e:8a:f5:e3:20:
f8:ad:49:8f:fe:7c:c1:1f:66:8c:1e:07:7a:b9:82:
4e:b8:bf:00:a8:e5:b7:6d:02:11:55:14:20:ca:25:
5e:0c:8d:60:99:ce:c2:ee:33:f3:59:73:8c:72:58:
f8:7e:93:22:8c:79:8a:45:02:bc:4b:2e:fb:f1:74:
69:c6:22:89:25:18:dc:b9:62:33:d5:2f:20:21:07:
73:ec:a2:3d:e5:49:3f:34:0f:9f:f3:05:99:54:28:
a5:e7:46:5a:86:08:6b:c1:c7:28:80:46:cf:46:cb:
fe:3e:15:fb:bc:4c:31:2f:8b:e7:bc:32:c7:7c:ac:
43:70:07:1b:1b:f9:b6:4a:81:9e:e3:4d:09:70:c5:
1b:14:1c:2e:a7:1d:ee:85:35:f7:a4:f0:a8:00:ab:
72:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:81:F7:4D:F3:09:73:08:AF:05:C2:D2:C4:26:43:FC:BF:0B:B1:A9
X509v3 Authority Key Identifier:
keyid:E0:86:6E:5A:7C:72:5D:CB:6A:13:8C:C6:C3:40:CF:DA:D4:31:5D:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IZuWnxyXctqE4zGw0DP2tQxXT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7ba877-4839-4717-8aa4-24419b876f08/1/4IZuWnxyXctqE4zGw0DP2tQxXT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:27:aa:fb:b7:1a:35:21:a0:69:1e:46:9a:70:57:f8:f9:0b:
2d:a3:8a:95:2f:b4:ae:e7:74:4c:01:c7:a6:02:84:6c:8e:c1:
8c:a5:11:ec:b3:1b:2b:5b:61:07:66:08:e7:4d:e1:97:2d:e1:
e6:ed:de:0a:6c:84:23:1a:a2:a0:3b:6b:c3:73:64:ad:fc:4f:
2c:eb:a6:7c:d8:95:7f:8c:e5:ac:9d:13:c1:d2:2e:b7:fd:e6:
89:f1:ba:d6:28:fd:69:ee:3c:b7:9c:75:ca:c7:da:da:4c:df:
b5:61:4d:be:84:87:64:26:a2:13:74:b9:89:fe:44:5b:1c:e4:
78:a2:5f:df:a5:21:fd:c5:23:ab:8b:82:5c:b6:39:ef:2a:a5:
d8:af:fa:af:6b:40:dd:77:fc:16:be:f1:36:5f:d7:e7:19:09:
65:07:2a:72:c9:97:54:2b:1e:64:6d:d9:54:81:45:fa:f8:49:
13:58:9f:21:6e:63:5b:ca:3a:b7:5e:0f:74:2f:02:4b:e5:0d:
79:b8:d3:7c:a5:52:94:ef:73:39:2b:79:2e:bf:75:6c:93:ea:
13:84:35:67:12:75:e7:2c:8c:35:80:ab:9f:e4:e9:fa:75:f7:
af:a8:08:5f:3d:65:8f:35:f6:00:8c:51:68:1e:6a:6c:b3:30:
09:a0:56:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:22:36 2025 by rpki-client