Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: /g3ho+vzJjwyEH4OMgNSGlEjqbO1hynpw6rftishGrw=
Subject key identifier: 20:42:4E:3A:61:1F:C0:8A:E3:13:52:AE:B4:C8:A4:57:7B:7D:E4:9D
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 019A71B82C0079208E947385746DD1F78A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 092E
Signing time: Tue 11 Nov 2025 07:01:26 +0000
Manifest this update: Tue 11 Nov 2025 07:01:26 +0000
Manifest next update: Wed 12 Nov 2025 07:01:26 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: FpG5dIathDESdpqww00iaXmaYVREtWF0P2J3kuXrCBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:2c:00:79:20:8e:94:73:85:74:6d:d1:f7:8a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Nov 11 07:01:26 2025 GMT
Not After : Nov 12 07:01:26 2025 GMT
Subject: CN=20424e3a611fc08ae31352aeb4c8a4577b7de49d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cf:a4:2c:1a:eb:57:49:ee:99:af:2a:84:76:
ef:43:87:78:e3:9d:44:34:a1:a5:14:84:ab:fe:4e:
19:85:3e:30:9b:1d:d9:72:31:14:38:e6:5d:82:d3:
c5:17:d9:a2:5d:ea:38:a9:1e:1a:66:c7:f7:12:a4:
53:fa:31:86:97:63:fa:de:fd:5e:a8:47:f9:0f:76:
98:dc:dc:ba:ac:24:52:b7:ad:d9:64:01:8d:3b:6b:
72:3d:b2:fc:a0:ca:f4:3d:57:ac:b1:9f:56:53:55:
db:54:01:f8:b3:cc:e1:df:e7:41:7b:98:b7:2a:7e:
8b:ca:12:7d:6c:f4:37:a2:40:4e:db:02:2c:99:08:
ea:fa:03:58:d7:f8:9b:87:9e:93:39:9f:ce:d3:42:
b4:2e:dc:bf:82:7e:4c:fd:0d:32:32:16:65:cb:09:
75:68:e2:54:b1:45:c7:dc:05:d0:9a:5e:4e:c4:88:
8f:f9:58:19:76:af:7a:b7:0f:b2:0e:5c:dd:8c:10:
d5:06:51:5e:41:c1:c0:07:ae:71:d9:82:19:82:07:
f9:79:84:21:e1:8a:39:d9:59:98:9b:db:e9:e8:0e:
5c:fe:04:88:4c:3b:e7:5c:07:e4:4c:82:be:fe:11:
e4:08:a8:c2:68:a6:c6:18:11:19:e4:27:fb:45:ee:
91:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:42:4E:3A:61:1F:C0:8A:E3:13:52:AE:B4:C8:A4:57:7B:7D:E4:9D
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:93:99:ae:d4:c7:5d:89:b9:e5:51:3a:3a:cf:45:f3:5a:09:
48:83:92:64:75:ef:62:a6:ff:94:70:1e:7f:4a:86:7e:f8:74:
70:b9:6b:55:54:6e:68:4a:56:68:90:50:52:75:04:fc:01:f4:
f3:e5:33:08:74:c5:59:70:1d:bc:41:84:14:1f:98:9f:7a:e3:
67:e1:3d:6a:a6:13:bf:17:0a:03:74:c9:a8:bf:f2:96:75:e1:
30:eb:55:61:ba:ff:f9:24:20:ec:bb:f8:3a:01:5e:50:d3:24:
36:36:0f:06:ac:0d:dc:fe:c6:92:b8:ba:10:a0:41:37:ef:76:
80:0b:0f:1b:40:3f:f9:df:42:6f:11:50:e3:c6:32:ea:52:45:
a9:be:fc:fd:35:7f:97:bf:c1:6f:8c:56:43:7d:74:b8:38:e1:
7e:30:fd:73:93:8a:ae:60:5c:68:c3:a1:df:b6:a9:e0:40:7d:
2f:f5:6a:40:2e:b8:ff:2e:fd:eb:6d:0a:69:82:37:50:58:88:
24:ac:cb:4d:3d:58:c4:45:60:ce:e7:3e:c2:fa:ea:9e:71:79:
c1:bf:49:fc:a0:e0:1a:33:ff:ea:20:84:a0:8b:fa:0a:f9:e7:
c8:d1:0c:fb:39:99:2a:64:c8:fd:a7:69:02:bb:06:4c:46:0f:
48:e9:b9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:34 2025 by rpki-client