Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: gC7gPyr1cAxWYJ3oCM9Croc0y6+iAQWdG3yJ5hB7X2Y=
Subject key identifier: 1E:09:EB:BE:61:02:0F:E3:10:0B:55:41:5B:17:31:B9:3D:AC:2F:A6
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 019A72257FD0F334B1D9C24085631239429C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0E04
Signing time: Tue 11 Nov 2025 09:00:51 +0000
Manifest this update: Tue 11 Nov 2025 09:00:51 +0000
Manifest next update: Wed 12 Nov 2025 09:00:51 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: /av0szqzMpKwa0UZfOH70780UYf26dZRgIq6qdnioJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7f:d0:f3:34:b1:d9:c2:40:85:63:12:39:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Nov 11 09:00:51 2025 GMT
Not After : Nov 12 09:00:51 2025 GMT
Subject: CN=1e09ebbe61020fe3100b55415b1731b93dac2fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:12:b4:e0:bb:30:ad:0f:fc:23:b8:0a:72:99:
54:16:60:94:dc:60:9e:86:87:d4:28:5d:ae:10:08:
53:3d:4d:6e:91:bf:93:58:96:00:b9:7f:29:59:9c:
41:fd:21:da:19:97:7e:e3:fe:d3:ed:f4:ad:c4:d5:
6d:a6:a2:ce:5d:08:2d:91:ea:b2:86:1e:b4:75:31:
5c:74:32:1c:a2:b2:38:8c:36:c4:de:b2:f8:89:ac:
49:63:b0:6a:5f:79:a4:da:ad:b4:c6:bd:be:53:50:
0c:7e:ab:f4:b7:94:35:8b:25:e3:35:c1:a2:36:8d:
cb:6b:e4:8c:48:1f:37:47:7c:8d:32:5b:1b:48:05:
f2:38:28:4b:79:cf:6f:a8:86:9a:9d:46:df:fe:42:
c2:37:eb:e5:96:5a:7a:52:6d:1e:3e:48:69:b3:22:
f3:8d:d5:10:94:2a:d0:c5:23:c2:b7:2d:2d:6e:39:
7e:05:53:94:c7:e7:70:ae:5b:e3:72:b8:3b:c0:b0:
ee:2e:08:99:5a:86:84:b5:fd:19:fc:97:2c:0c:7f:
27:05:3d:6f:35:4c:42:2a:bc:38:3b:77:70:15:1e:
35:a6:d5:85:cb:a3:31:f1:3a:dc:d1:77:bf:80:76:
01:56:c0:11:0f:8d:61:2d:43:38:12:89:61:d8:61:
79:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:09:EB:BE:61:02:0F:E3:10:0B:55:41:5B:17:31:B9:3D:AC:2F:A6
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:31:68:41:b2:3c:e8:a2:7f:14:0a:2d:68:f7:39:ac:ad:
c6:19:11:49:d4:27:46:36:47:4d:fb:e4:7f:ef:b5:2d:27:11:
e3:61:c9:48:47:4b:b6:9c:b6:86:6b:7f:b3:29:12:79:fd:21:
9c:70:de:53:e7:e1:dc:b2:a3:0b:51:71:45:99:d0:a5:66:b6:
ec:5f:fd:75:27:22:cc:43:c8:60:96:16:23:f5:ca:bf:73:05:
78:a4:33:75:0e:3d:5f:54:fa:4b:08:c3:50:6b:f8:a7:0d:ad:
a4:bb:b6:7f:3b:99:b8:ca:36:98:7d:bf:b5:52:41:92:37:e6:
ad:72:57:ed:02:88:ea:7a:fa:39:4e:59:0d:de:4b:65:8f:5d:
20:49:42:94:c6:07:a4:00:43:cc:72:fc:19:d7:cd:2b:58:0d:
54:01:c9:99:22:c8:be:cd:85:1c:9c:21:d5:19:6b:e1:0d:0b:
e3:ab:37:c4:42:63:08:e6:e7:63:f8:0e:71:e6:c7:ed:43:66:
60:db:ec:12:72:ec:ea:ad:2d:dc:64:88:e0:b1:af:76:5e:65:
09:92:58:f7:70:36:11:21:fb:c9:ce:76:08:21:27:57:3a:3e:
28:48:49:70:39:1d:a4:8f:a5:64:31:60:8a:29:e9:e4:12:d0:
ed:68:6e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:31 2025 by rpki-client