Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: /EZl7p3Daa4eOIT5mBEZ55lojGiFOMjORqmBLNCHf3s=
Subject key identifier: 27:CF:B9:52:C5:46:BF:E0:CF:ED:C3:86:99:A5:52:27:68:A4:35:CA
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 019A70DBE4CB2320486E1D3AADCA24655EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: 039D
Signing time: Tue 11 Nov 2025 03:00:50 +0000
Manifest this update: Tue 11 Nov 2025 03:00:50 +0000
Manifest next update: Wed 12 Nov 2025 03:00:50 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: EdJyTwclbNWAXKxO/jBLosknLbRgk5KIhsgRqbTBFvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:db:e4:cb:23:20:48:6e:1d:3a:ad:ca:24:65:5e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: Nov 11 03:00:50 2025 GMT
Not After : Nov 12 03:00:50 2025 GMT
Subject: CN=27cfb952c546bfe0cfedc38699a5522768a435ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c2:c9:8f:bb:30:fe:cd:1a:60:06:0c:48:6b:
8f:a5:1c:b2:c9:12:8d:d3:18:ea:25:a5:b0:bf:c8:
61:55:2e:d1:9b:9e:7e:9e:89:e7:38:43:8c:90:5d:
18:a5:c9:53:9b:eb:dd:2d:06:89:aa:81:ee:f5:60:
89:d6:73:1a:c9:ab:de:cf:c2:6e:52:12:61:c3:ac:
41:d2:f3:13:47:d2:9b:b2:43:fc:7a:a4:16:06:e2:
86:ed:7a:da:fe:55:4c:04:7a:56:b8:c5:16:26:94:
3a:49:33:cc:e2:12:6f:42:b7:cc:61:d6:54:a1:0a:
8c:ea:c4:e1:64:0b:c1:5a:0b:65:43:07:b7:4d:3f:
4e:f6:47:f8:d3:02:a9:4f:b8:55:f8:78:b7:be:06:
4a:a3:af:5e:fe:99:b7:b2:60:1f:f0:aa:49:33:68:
7f:21:0b:86:2b:50:84:df:95:45:ad:b2:06:1b:5c:
25:63:a4:cc:03:08:c8:d8:ec:00:56:42:f6:85:69:
be:27:2c:2f:fb:fb:71:60:b9:86:00:df:a0:f6:ff:
13:ae:ba:f5:ce:c9:a3:51:e7:89:69:56:2d:0b:82:
c6:09:71:fe:0e:5a:d9:50:7e:01:14:d4:35:ce:1a:
db:ea:1b:4c:a0:45:72:fb:6e:86:f8:38:9c:32:71:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:CF:B9:52:C5:46:BF:E0:CF:ED:C3:86:99:A5:52:27:68:A4:35:CA
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:18:a6:c4:34:d8:b9:3b:0a:b7:b1:c7:da:db:41:ce:d9:26:
ca:67:18:73:41:35:43:95:b8:18:2d:ba:e7:87:5c:c7:c2:88:
c5:96:e5:f0:bf:6c:00:0b:94:d6:46:28:39:d1:18:df:97:47:
fc:34:e5:33:be:83:3c:c6:4f:3c:5f:75:41:23:f4:ab:fa:c9:
d3:e2:6d:4c:5d:47:d5:35:2d:c7:48:32:71:d2:48:57:13:9f:
41:fc:e2:3f:ec:2a:c0:ef:c2:46:24:89:4e:01:0f:cb:55:4d:
3e:d0:5e:81:da:b2:1a:12:73:0b:7f:8f:bf:4e:58:58:e7:9b:
a0:5e:c6:31:0a:c9:fd:d1:cc:60:1e:09:20:f7:15:08:31:f7:
85:fe:23:4c:7f:d4:30:59:43:c6:bf:a6:93:27:3e:0b:39:ce:
ed:10:f1:24:65:cb:f3:d4:38:35:f1:5d:b8:ee:f5:e3:5f:c7:
ac:cc:1a:7a:43:5c:4e:45:6b:4f:29:ee:12:0f:39:ae:39:90:
89:2d:d8:7d:b4:de:33:6e:cd:65:52:26:fd:58:91:d0:aa:12:
4f:2e:5b:c5:c8:2a:57:a2:99:15:17:3a:b8:03:9d:8a:76:73:
0a:10:ad:f4:58:8f:c7:9d:ae:f2:b2:12:ca:45:f5:a3:26:cd:
aa:c8:99:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:25 2025 by rpki-client