Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: 3qOKucG54Y0EEyRrSZlyeHxHwsuiNKnl7vK7kY9um5I=
Subject key identifier: 1E:5F:E3:58:36:92:6A:B1:F8:84:91:96:A6:0F:49:FA:D2:F2:1F:C6
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 019A71EEFB3F2C8555A36DAEB588BC16235E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 053B
Signing time: Tue 11 Nov 2025 08:01:18 +0000
Manifest this update: Tue 11 Nov 2025 08:01:18 +0000
Manifest next update: Wed 12 Nov 2025 08:01:18 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: uQClVZwf+w2L2/N9e/aQuotqZhuxsNem1a1q8JXMJMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:fb:3f:2c:85:55:a3:6d:ae:b5:88:bc:16:23:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Nov 11 08:01:18 2025 GMT
Not After : Nov 12 08:01:18 2025 GMT
Subject: CN=1e5fe35836926ab1f8849196a60f49fad2f21fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:11:02:a4:80:bf:fb:cf:c9:0f:4c:c9:75:0c:
25:0f:c8:2b:18:fc:fc:ce:48:88:b4:b3:5c:74:24:
11:6b:23:49:5e:36:1a:b9:d0:8e:96:fe:74:d3:08:
c2:52:d0:e6:b3:a8:78:6b:5a:60:0f:28:e9:f0:9a:
58:5e:d6:54:7a:9b:e6:15:ff:af:82:00:54:f1:d0:
60:79:29:7f:d4:9d:d4:f8:1a:7c:1a:12:33:db:2f:
8e:d2:e9:5e:7a:d2:b4:5b:8a:10:d2:da:e7:44:52:
23:43:1a:65:86:11:6b:90:51:38:4c:3f:ed:ab:91:
45:2c:cb:34:9e:f6:42:ab:31:22:05:a7:87:80:c2:
c1:49:8d:ac:41:df:19:e2:f7:46:43:db:f4:ea:44:
d9:6c:e7:52:a0:41:d6:cc:4a:00:d1:13:09:38:2b:
4f:be:4f:08:ce:6c:9b:a0:99:28:ef:6a:2a:1e:49:
fa:87:fd:e1:ff:42:49:04:2c:fa:90:65:fc:e4:cb:
0c:c6:66:aa:11:fe:4d:00:50:f7:ff:1e:bf:86:8e:
71:91:2c:ab:cf:59:b2:8d:eb:4f:39:8b:70:17:1e:
5f:54:8c:8d:ad:b4:39:bd:a7:60:b4:e0:4d:b4:91:
6f:03:de:c9:a2:ff:30:39:b8:27:6e:74:06:1c:8f:
f0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5F:E3:58:36:92:6A:B1:F8:84:91:96:A6:0F:49:FA:D2:F2:1F:C6
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:65:f3:2c:c7:dd:66:53:b1:0b:2e:5f:d6:4a:07:57:18:a6:
90:64:13:ed:de:11:53:ef:b0:30:77:71:b4:18:0e:d9:8f:4e:
d2:75:0a:27:c0:1e:62:c8:1c:10:fe:18:c4:c8:8d:95:74:91:
3e:09:89:f6:fa:0c:c9:2b:4f:40:7f:e9:b1:0b:15:ce:aa:cc:
ea:c1:d2:96:c7:de:8d:94:85:80:76:a1:50:97:71:4d:59:44:
44:f2:e3:0c:f1:94:72:0a:b1:e6:1d:e7:87:17:16:14:b6:0d:
28:fb:e3:52:90:a1:18:2b:7a:b4:ac:c8:62:b7:3e:f4:69:42:
8b:5a:b1:c7:3a:af:31:ec:38:53:64:05:7d:53:16:29:0f:bc:
00:9b:86:7e:c6:d1:7e:10:a4:f9:21:38:5e:78:fa:1c:ca:fa:
4a:52:bf:6f:1b:4a:73:a6:d7:0d:cf:2d:5e:03:21:f1:ee:a4:
00:76:54:4f:dc:01:72:77:ec:92:5e:4a:cd:29:32:68:b0:52:
28:75:83:cb:44:bd:72:df:94:1f:34:73:cf:4b:3e:be:b7:ac:
25:8c:4d:b0:67:85:16:94:09:95:68:bb:f4:a3:57:a4:82:b3:
ef:4d:e2:67:cd:47:3b:4f:e0:c2:29:1d:d8:d1:5a:ab:30:9f:
1d:f4:77:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:47 2025 by rpki-client