Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
File: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft (raw, json)
Hash identifier: OE+550IVyr9vmBuXr1pvj3unXff0pRjnGMpxSD8BWXQ=
Subject key identifier: 52:5E:24:A6:FC:76:75:15:E0:55:A8:6D:4E:35:73:82:74:6C:05:CE
Authority key identifier: E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
Certificate issuer: /CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Certificate serial: 019A71B865F6772C093E5143B7505B20DEDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
Manifest number: 1139
Signing time: Tue 11 Nov 2025 07:01:41 +0000
Manifest this update: Tue 11 Nov 2025 07:01:41 +0000
Manifest next update: Wed 12 Nov 2025 07:01:41 +0000
Files and hashes: 1: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl (hash: 5nbeYgB/YaDGpW5Wk39nfp5QrWi2PJezuAGmxwjoiBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:65:f6:77:2c:09:3e:51:43:b7:50:5b:20:de:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Validity
Not Before: Nov 11 07:01:41 2025 GMT
Not After : Nov 12 07:01:41 2025 GMT
Subject: CN=525e24a6fc767515e055a86d4e357382746c05ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fe:f9:db:8b:05:da:38:00:0c:18:a6:36:82:
bc:6e:0a:fc:ac:a3:7e:1f:28:44:b4:1e:ac:70:d1:
e6:ea:68:f1:19:33:c4:22:e4:e9:fb:e8:52:af:65:
5a:f8:dd:16:97:3e:43:52:f8:3f:62:46:19:a5:46:
c6:e6:1a:c5:83:59:0c:24:8a:4b:72:1a:1d:cd:55:
c5:a3:cb:50:7d:18:64:90:2c:7a:7a:49:d0:e4:c1:
fc:e5:c7:8f:0e:ed:98:ab:65:b7:b8:e5:14:ed:a6:
ca:cf:25:39:05:61:65:59:ec:62:23:7f:6d:0c:44:
13:0c:2f:42:29:2c:2b:d9:d5:1b:e9:15:ac:27:77:
ec:70:0b:72:8c:44:f0:78:ce:98:83:8a:a2:75:b2:
e2:07:55:00:f6:09:c8:d4:e3:6f:c1:33:94:3a:5c:
54:dc:ec:e1:2d:26:6f:8f:f3:81:73:3c:35:9f:d1:
04:76:82:3b:6d:d3:eb:f6:6c:d5:74:17:81:cf:3e:
e8:57:ed:70:1e:9e:6e:ad:21:50:8d:b4:28:71:c7:
8c:b7:8a:af:bf:0d:57:76:04:0e:98:12:e1:28:dd:
fc:06:a4:ee:7d:9f:6a:13:a4:bd:d0:6f:5b:8c:e3:
85:f3:31:17:1d:8d:f5:54:58:a0:15:80:9f:9e:f1:
20:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:5E:24:A6:FC:76:75:15:E0:55:A8:6D:4E:35:73:82:74:6C:05:CE
X509v3 Authority Key Identifier:
keyid:E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:d4:1e:d4:16:8c:94:68:56:6f:7c:d6:bf:27:fe:c5:c6:d9:
96:56:c2:b0:03:87:0a:c6:c2:d4:50:32:cc:7f:ed:b7:30:01:
80:ab:18:53:00:a4:46:7a:87:8c:b1:44:f6:f6:89:3a:02:46:
78:2d:0a:cb:30:cd:23:8d:2f:38:08:e5:4f:0d:e4:31:cd:83:
26:ab:cd:32:a1:0d:49:68:d2:f6:c2:a2:59:86:d6:5e:44:fc:
42:ef:2e:af:f6:1d:e4:c9:18:9f:02:c3:8d:4f:a3:ac:87:56:
19:5a:cc:72:14:e7:06:98:7a:4b:f1:70:d7:55:5b:29:9d:3e:
ce:3a:ea:2f:c5:ec:45:68:78:9e:8e:2f:cd:6d:70:a4:3e:8b:
65:6d:66:5d:b1:14:20:7e:08:2d:87:d3:ef:60:9e:92:f6:e5:
25:38:72:6a:f3:8a:df:e9:f2:33:48:57:17:90:33:61:d6:48:
63:61:dc:60:eb:e7:62:26:6b:f4:65:f3:d1:bc:51:27:af:f5:
b6:94:bf:2a:7c:e5:be:95:13:88:8e:5c:8f:c0:b7:27:73:3a:
27:c7:fc:70:a7:6b:6c:05:bc:ed:3e:96:c3:41:ce:8e:e9:b3:
a6:ce:59:a2:a0:15:07:4d:bf:84:b5:bb:6c:71:fb:72:c4:f2:
bd:63:df:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuGX2dywJPlFDt1BbIN7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMDRkZWU5MjU1YmNjOGNhNGUwZjVhYzI5ZDA5ODI2ZTAy
M2EwZDEwHhcNMjUxMTExMDcwMTQxWhcNMjUxMTEyMDcwMTQxWjAzMTEwLwYDVQQD
Eyg1MjVlMjRhNmZjNzY3NTE1ZTA1NWE4NmQ0ZTM1NzM4Mjc0NmMwNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP7524sF2jgADBimNoK8bgr8rKN+
HyhEtB6scNHm6mjxGTPEIuTp++hSr2Va+N0Wlz5DUvg/YkYZpUbG5hrFg1kMJIpL
chodzVXFo8tQfRhkkCx6eknQ5MH85cePDu2Yq2W3uOUU7abKzyU5BWFlWexiI39t
DEQTDC9CKSwr2dUb6RWsJ3fscAtyjETweM6Yg4qidbLiB1UA9gnI1ONvwTOUOlxU
3OzhLSZvj/OBczw1n9EEdoI7bdPr9mzVdBeBzz7oV+1wHp5urSFQjbQocceMt4qv
vw1XdgQOmBLhKN38BqTufZ9qE6S90G9bjOOF8zEXHY31VFigFYCfnvEgYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJeJKb8dnUV4FWobU41c4J0bAXOMB8GA1UdIwQY
MBaAFOEE3uklW8yMpOD1rCnQmCbgI6DRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9iNjljZTktNDU3MS00OTRlLThiYjIt
NzYxYmI0NjA3N2Y3LzEvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9iNjljZTktNDU3MS00OTRlLThiYjItNzYxYmI0NjA3N2Y3
LzEvNFFUZTZTVmJ6SXlrNFBXc0tkQ1lKdUFqb05FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtdQe1BaM
lGhWb3zWvyf+xcbZllbCsAOHCsbC1FAyzH/ttzABgKsYUwCkRnqHjLFE9vaJOgJG
eC0KyzDNI40vOAjlTw3kMc2DJqvNMqENSWjS9sKiWYbWXkT8Qu8ur/Yd5MkYnwLD
jU+jrIdWGVrMchTnBph6S/Fw11VbKZ0+zjrqL8XsRWh4no4vzW1wpD6LZW1mXbEU
IH4ILYfT72CekvblJThyavOK3+nyM0hXF5AzYdZIY2HcYOvnYiZr9GXz0bxRJ6/1
tpS/KnzlvpUTiI5cj8C3J3M6J8f8cKdrbAW87T6Ww0HOjumzps5ZoqAVB02/hLW7
bHH7csTyvWPf1g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:13 2025 by rpki-client