Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
File: 4uQkJWNHPN8ULMt8zjwsw26j1GU.mft (raw, json)
Hash identifier: +fQgR1Aj2LnHzthDDaaYCHR/nERjtZtKslJ6TZPTuyg=
Subject key identifier: 55:14:49:01:16:16:E2:C3:34:DB:60:92:0E:54:57:D1:50:BF:CB:B7
Authority key identifier: E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
Certificate issuer: /CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Certificate serial: 019A72CA6328BE9507A7E3DAABA065FA5ADF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
Manifest number: 0D1E
Signing time: Tue 11 Nov 2025 12:00:57 +0000
Manifest this update: Tue 11 Nov 2025 12:00:57 +0000
Manifest next update: Wed 12 Nov 2025 12:00:57 +0000
Files and hashes: 1: 4uQkJWNHPN8ULMt8zjwsw26j1GU.crl (hash: 3djYHq0+gkHjRpVDUguWnNoRX5wanaXrms2Bt1aqTAI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:63:28:be:95:07:a7:e3:da:ab:a0:65:fa:5a:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4242563473cdf142ccb7cce3c2cc36ea3d465
Validity
Not Before: Nov 11 12:00:57 2025 GMT
Not After : Nov 12 12:00:57 2025 GMT
Subject: CN=551449011616e2c334db60920e5457d150bfcbb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9d:ac:ae:16:46:75:43:f1:2f:7e:c1:2a:fa:
cd:00:0a:bd:6e:9a:f7:6a:11:8d:ae:bd:33:c5:46:
3b:9a:17:b2:d9:15:f4:db:9f:a6:f9:cd:ee:f6:50:
30:b8:d2:bb:54:61:f5:f1:be:b6:0a:83:ba:00:37:
b3:01:8c:ea:52:ff:52:2a:56:19:e1:ba:7f:0c:b5:
85:cb:f2:c8:13:e3:f6:47:19:74:55:1c:a6:3e:de:
3c:c8:11:15:8f:56:85:2e:4b:cf:cf:9f:d2:04:a5:
c3:07:be:ee:de:4a:f2:b4:f5:6d:87:b1:e5:83:a5:
95:77:62:67:c8:38:d8:f2:9e:6c:99:9b:7d:5f:91:
20:5a:a2:e4:e7:be:ef:49:34:a7:80:c3:df:c8:45:
91:0a:7b:40:d1:88:5c:bf:ce:dc:f0:4a:a7:68:c4:
29:89:7f:ad:82:b8:83:1e:a6:ce:88:51:54:93:d2:
7e:24:a6:01:50:89:7c:1d:99:27:54:c2:d0:21:7d:
ae:e3:49:d5:98:11:3b:a7:25:d3:02:e9:12:7e:4f:
58:fe:7a:0b:84:46:f1:b8:98:61:06:1f:1d:73:6d:
5b:78:b8:ad:0b:cd:95:3e:82:ce:c1:06:53:7c:46:
25:70:19:ee:a7:83:cf:8f:ee:91:a8:08:7a:c5:7d:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:14:49:01:16:16:E2:C3:34:DB:60:92:0E:54:57:D1:50:BF:CB:B7
X509v3 Authority Key Identifier:
keyid:E2:E4:24:25:63:47:3C:DF:14:2C:CB:7C:CE:3C:2C:C3:6E:A3:D4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uQkJWNHPN8ULMt8zjwsw26j1GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/40fb78-4189-497d-b06b-8e7b709da653/1/4uQkJWNHPN8ULMt8zjwsw26j1GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:22:a9:83:bf:64:83:1d:54:9e:fb:2e:56:e4:3e:04:a7:3d:
7f:90:63:60:7e:20:7b:33:9f:41:cd:89:00:f4:86:ca:a2:e5:
cb:39:36:de:35:e1:9b:bd:37:f1:e9:fa:70:4d:93:9d:8b:d1:
66:93:d9:85:4f:3a:29:35:e2:cb:93:94:f5:69:7e:bd:84:20:
32:b4:78:7c:3b:b3:69:3d:82:27:b8:15:44:6b:5e:8b:be:54:
a8:62:c3:91:97:76:06:f5:9a:7a:6c:12:9b:c8:d9:a9:5c:9c:
85:fb:d4:16:17:ca:46:1a:f9:c2:46:4a:87:81:1a:fc:51:d0:
2d:99:3d:db:c2:9b:8c:27:00:48:e7:86:ea:66:d7:1f:d7:f8:
a9:38:81:4a:02:d4:21:4e:ca:86:4e:b3:ea:76:30:63:56:8b:
2d:83:7a:05:09:eb:bd:44:e8:9f:de:c2:61:98:85:a2:45:1c:
06:d0:9e:7b:70:fe:7a:ba:cb:b7:25:14:fc:4e:a8:5e:17:96:
5e:a9:f5:12:5b:16:a4:a8:a3:e6:1e:a8:49:0f:19:76:e0:16:
50:d7:a7:25:99:f0:a8:90:3e:12:a2:0e:aa:ea:f4:80:8c:73:
20:ca:08:3d:2b:49:4d:7e:bd:79:36:15:be:59:c0:2f:69:ca:
e0:99:77:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 17:19:48 2025 by rpki-client