Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: chA72OQ3lS+DjWT6s14fPTHPeUjmu9XRikx6Gd3kOIE=
Subject key identifier: 44:DE:5B:67:04:DE:D4:18:C9:3C:9C:98:32:45:99:6E:0A:4B:83:38
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 019A2176B7650109FF09DF69B4A4D659D7D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 0FCE
Signing time: Sun 26 Oct 2025 17:00:19 +0000
Manifest this update: Sun 26 Oct 2025 17:00:19 +0000
Manifest next update: Mon 27 Oct 2025 17:00:19 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: 5N2jryZKuPFHjHZaIKNL3z+FWxvp11Z9BvGYh9+y2m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:b7:65:01:09:ff:09:df:69:b4:a4:d6:59:d7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: Oct 26 17:00:19 2025 GMT
Not After : Oct 27 17:00:19 2025 GMT
Subject: CN=44de5b6704ded418c93c9c983245996e0a4b8338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c0:a0:44:9d:d2:88:12:db:25:30:bf:0c:b9:
1c:a9:d8:77:8b:a8:cd:d0:72:c7:ff:ef:90:57:31:
8b:64:5e:a9:82:b5:77:20:e6:5e:21:aa:ed:69:09:
f5:b7:bc:3c:85:20:e6:30:56:1a:4a:a8:f4:d5:e7:
28:99:0e:56:be:26:67:4c:99:50:01:8d:46:2e:72:
e6:57:6c:8f:48:d1:bb:5e:2c:52:5d:62:6e:b0:f2:
6c:74:ad:08:d3:da:6f:fa:b4:cb:01:c0:58:51:56:
78:06:8d:b7:69:0c:dc:e9:bc:aa:c0:6d:81:ae:a7:
ce:6e:11:cb:de:6e:f9:6f:f5:22:74:29:77:73:4a:
4b:34:d3:34:c1:b4:28:2f:c9:5c:de:88:c7:d7:a6:
a1:29:fd:aa:e6:bb:9e:2a:eb:b4:43:00:6c:99:89:
35:4a:ec:41:99:79:06:25:b3:41:fb:a8:93:c3:ba:
9a:4f:07:cb:2f:bf:e6:bd:72:44:51:4d:cd:1a:21:
40:41:d2:8e:3e:a5:6e:30:f6:76:c6:10:4d:16:84:
bd:4a:5d:7b:53:0c:7d:09:43:90:ac:90:d4:67:57:
79:aa:5f:d3:7a:67:7e:bc:2a:b3:00:d3:4b:50:2b:
15:77:9d:b6:bd:d8:a7:44:e5:ff:7d:90:81:b7:bd:
43:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DE:5B:67:04:DE:D4:18:C9:3C:9C:98:32:45:99:6E:0A:4B:83:38
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:91:be:e6:74:eb:b4:5e:ab:11:19:be:cd:e6:d8:73:a7:40:
a1:34:9d:99:b4:0b:7c:d0:09:5b:db:1b:2f:6f:fe:be:82:69:
17:47:9e:1e:3b:dd:a9:c5:fa:d9:33:e6:3f:24:02:4a:74:f7:
e8:71:2c:9b:b2:9d:dc:f2:31:cc:15:14:98:95:d1:34:b3:02:
7f:5a:59:4a:ce:36:b8:26:bf:f8:ad:4e:3b:73:89:f0:ce:86:
e4:a4:b0:99:ed:d9:4f:66:26:77:b0:19:d8:c0:b2:74:ce:e1:
53:1f:e0:f9:f2:10:39:e5:ed:5f:44:d7:9b:49:9a:80:c6:7b:
79:8b:78:48:6c:4d:e4:49:c8:26:4e:ce:30:f7:fe:35:a2:67:
24:e1:c9:a5:09:20:ba:d6:8a:2c:ec:be:c0:eb:bf:31:dd:93:
67:98:6b:d3:d7:27:23:fa:55:a6:8a:cb:2e:c9:ab:41:07:ad:
6d:74:9b:67:69:1c:f0:c6:ff:4a:15:9a:73:cc:6f:79:e0:16:
26:26:96:d6:6d:b3:3c:b4:26:68:4d:e0:63:1e:83:9b:de:9a:
2d:08:56:9f:98:c6:dd:51:d2:28:1c:ec:7d:fd:49:7b:7e:87:
a6:77:d1:33:7f:7f:68:32:7a:00:35:76:cd:c8:df:8f:70:3e:
93:51:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:24:42 2025 by rpki-client