Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
File: C4JANE7t1v9gI0SCv8MAHW4boJk.mft (raw, json)
Hash identifier: y86sKaDpq/RD6j4VpjQuUWbbTTj9NNRCK/GxsloB900=
Subject key identifier: C2:16:7A:95:31:BC:7E:BB:07:79:14:26:58:4F:87:61:8B:FC:24:B9
Authority key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
Certificate issuer: /CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Certificate serial: 019A72CA898E88C5FF04B329D1DC17FAC882
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
Manifest number: 014E
Signing time: Tue 11 Nov 2025 12:01:07 +0000
Manifest this update: Tue 11 Nov 2025 12:01:07 +0000
Manifest next update: Wed 12 Nov 2025 12:01:07 +0000
Files and hashes: 1: C4JANE7t1v9gI0SCv8MAHW4boJk.crl (hash: eipeSmVcpBGeNIW2Ks78p0Fr7GxC/WPNV1UeBOtmDio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:89:8e:88:c5:ff:04:b3:29:d1:dc:17:fa:c8:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Validity
Not Before: Nov 11 12:01:07 2025 GMT
Not After : Nov 12 12:01:07 2025 GMT
Subject: CN=c2167a9531bc7ebb07791426584f87618bfc24b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:30:f1:53:00:6c:2e:9f:39:b6:b5:04:c7:
58:d2:85:41:b8:96:4a:6f:d8:70:dd:3c:62:7e:3e:
ac:da:01:7d:18:da:ab:5d:9d:17:3d:ef:52:b9:e4:
a0:c2:92:98:5f:28:95:87:08:8a:93:c0:72:75:da:
4e:26:0b:ae:77:73:2d:85:f3:7a:bc:32:6b:84:ec:
d5:51:ab:01:07:58:9f:08:82:3c:1f:39:45:d9:51:
c4:3c:ce:6a:5e:77:a7:aa:07:6f:11:bd:d3:7c:e7:
13:c4:c5:3f:07:d1:05:a2:3b:59:f2:46:a6:77:8c:
a7:fc:d5:6f:9e:58:96:39:51:7b:17:34:1a:7a:0d:
41:ac:d6:e0:94:59:6d:58:aa:ce:05:f5:12:e2:c6:
6b:ad:e4:63:83:83:36:06:e1:16:d2:cd:5d:e8:ae:
b3:5a:f2:a0:b1:77:c2:c0:2c:c8:b8:b1:ba:06:f0:
57:b6:ab:c6:31:43:2b:86:16:aa:17:cd:e9:b8:37:
53:73:14:5a:6c:3a:76:fb:0b:9d:88:0a:b5:96:95:
e3:b7:24:f9:6d:26:8c:68:eb:55:d2:7f:7f:fc:14:
4c:9b:70:72:1e:30:8e:9b:14:f3:85:b4:10:f1:68:
d3:2b:86:f2:4f:bc:ce:94:84:ae:40:1e:7e:83:2b:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:16:7A:95:31:BC:7E:BB:07:79:14:26:58:4F:87:61:8B:FC:24:B9
X509v3 Authority Key Identifier:
keyid:0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ff:69:ec:dc:36:23:5a:44:9f:0d:ef:30:81:04:75:1c:78:
61:b0:f7:3d:24:e5:f4:28:4e:8f:4c:f5:f0:ec:48:c4:27:aa:
0a:7f:fe:b3:06:4a:72:da:a5:76:ac:96:ef:85:24:f1:53:59:
11:f0:8f:11:8c:dc:c8:91:a7:c4:32:90:c3:20:50:40:67:52:
79:c4:e8:79:4d:31:2f:9c:c5:30:6c:82:87:37:dd:27:43:ae:
fc:3e:98:40:90:6f:d9:45:8d:39:24:27:4c:f4:33:22:29:c5:
18:cc:65:96:29:5f:43:50:ec:fa:b7:f7:07:c2:b5:34:69:17:
c0:b8:84:bc:de:cb:1a:3d:08:a5:c6:2f:f2:48:87:66:94:ba:
a4:7b:44:d0:27:15:5e:cf:3e:c5:49:2b:65:33:6c:e9:61:ec:
5b:bd:c4:bc:e3:4c:9b:70:2e:c6:d2:fd:6f:3c:f3:dd:fe:01:
85:f2:3c:4a:19:5c:e3:8d:45:7c:2d:c1:03:14:39:48:40:64:
79:60:49:1e:9a:9d:95:b8:d7:a7:11:b8:9d:9a:c0:3c:7b:f6:
b8:17:b5:ae:41:29:bf:ed:c2:26:8d:37:17:8c:06:4a:a7:e0:
34:53:16:12:f2:0e:8b:2c:48:71:90:bf:0a:b3:b3:65:fe:fa:
62:cc:2e:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:34 2025 by rpki-client