Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier: SOXedyjpBwX+BW75AlNd4VEbGhpHcrZwt/RYEkC9itY=
Subject key identifier: 1A:08:D4:CA:A9:7D:F4:BB:04:CF:46:0F:11:EE:F2:03:CB:84:A1:3E
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial: 019A725CC267028E2BDB67BF0D5F5ABE94A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number: 161A
Signing time: Tue 11 Nov 2025 10:01:12 +0000
Manifest this update: Tue 11 Nov 2025 10:01:12 +0000
Manifest next update: Wed 12 Nov 2025 10:01:12 +0000
Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: /kha9PqfVRhoIfACuqeECkVqRMAH4FrLRNG1m4LfzXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c2:67:02:8e:2b:db:67:bf:0d:5f:5a:be:94:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Validity
Not Before: Nov 11 10:01:12 2025 GMT
Not After : Nov 12 10:01:12 2025 GMT
Subject: CN=1a08d4caa97df4bb04cf460f11eef203cb84a13e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:63:a3:ec:e9:79:80:cb:37:43:99:33:95:
de:39:e7:39:38:ac:2c:4a:a9:87:ce:bb:1a:e1:8a:
a7:56:33:0c:cc:a4:75:9c:bc:70:48:6e:e3:1e:c7:
e5:71:1d:3c:ee:42:2b:33:22:48:9c:07:d5:76:78:
0b:4d:27:bd:dd:62:75:cb:86:d1:f4:a3:f9:c7:b9:
a0:af:90:0d:21:4f:ab:0e:77:82:8e:d4:02:85:18:
ca:36:be:0e:08:47:60:c3:73:76:9f:68:d7:14:69:
53:07:dd:57:6f:c5:c0:53:01:93:a6:21:0b:0b:35:
17:bb:45:2e:24:c5:e1:83:e6:58:17:03:7b:7a:73:
46:be:8c:d0:c7:af:64:63:3b:aa:ce:1e:6c:cf:84:
e0:c0:78:f3:a4:5e:fd:a2:5c:23:ff:91:60:a9:ca:
f2:9b:44:d3:7f:f0:fb:e3:32:88:f9:26:03:29:bc:
26:e3:2c:ba:18:0f:72:0b:72:e3:81:f5:96:96:a7:
c9:cb:ff:f6:d1:b8:61:3f:41:3e:67:e3:f3:bb:d1:
25:49:d9:85:57:29:a8:65:19:81:20:b4:c8:ef:e9:
c2:a9:4c:ee:06:d6:db:c4:84:a4:b2:dc:2e:2e:c4:
ef:58:c4:00:01:cb:a5:3c:dc:da:65:d7:4a:7e:92:
d7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:08:D4:CA:A9:7D:F4:BB:04:CF:46:0F:11:EE:F2:03:CB:84:A1:3E
X509v3 Authority Key Identifier:
keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:76:ff:12:2b:f5:7d:1b:5e:1f:e2:6a:62:fb:7e:3b:95:de:
28:8b:f8:de:cc:57:08:98:bc:f5:d9:20:a7:2f:e4:5c:ed:e4:
d6:26:b3:75:b6:7e:6e:6b:32:0f:94:cb:37:6c:24:86:7c:4d:
20:f5:5a:8f:91:2a:cb:77:bd:89:d9:bf:48:5e:f6:b9:b1:36:
44:9a:05:8c:26:fa:1f:0e:3c:fb:44:dd:6d:33:d5:2e:fc:8b:
35:23:cb:a2:17:94:a1:09:a7:4a:38:fc:f7:a7:1c:21:3f:3d:
fc:18:ea:18:eb:a6:ce:11:35:5d:e6:3b:63:14:60:24:3f:1d:
0b:48:c3:f7:9a:6f:77:d6:d9:9a:b0:42:36:93:ee:c8:20:74:
cc:19:9f:8f:eb:87:4d:91:e5:ea:05:93:2d:ea:73:fb:8b:e6:
e0:dd:cf:a0:cf:0e:0e:58:94:d7:0b:3a:fd:13:8d:8c:8f:97:
fe:9a:2a:c6:6b:5c:f5:b8:0a:45:83:52:97:96:cc:9d:85:11:
06:ef:00:df:d8:69:b3:aa:18:20:39:a4:ec:c7:62:60:eb:02:
07:af:00:01:18:7b:cc:20:36:85:32:ec:a5:70:f0:a2:24:2d:
7f:63:25:cd:69:4e:89:e9:fe:35:eb:01:53:40:53:78:ab:35:
1a:0f:8b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:41:45 2025 by rpki-client