Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: kxmbzaLlV0liwlhDr9sjVgEf08NwWLcx/rHY6OhKhrA=
Subject key identifier: 3C:C0:93:78:23:9C:61:81:67:E1:10:88:4B:50:86:8A:BE:15:22:89
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 019A711357364A47A48198D0396BE196F69C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1685
Signing time: Tue 11 Nov 2025 04:01:24 +0000
Manifest this update: Tue 11 Nov 2025 04:01:24 +0000
Manifest next update: Wed 12 Nov 2025 04:01:24 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: sFm4/KQonKqTFv0U3AiWequcGOBX9+jKpVBECKSPAug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:57:36:4a:47:a4:81:98:d0:39:6b:e1:96:f6:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Nov 11 04:01:24 2025 GMT
Not After : Nov 12 04:01:24 2025 GMT
Subject: CN=3cc09378239c618167e110884b50868abe152289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cb:0e:82:33:4e:98:48:5f:71:99:dc:9f:d4:
b5:66:cd:86:be:58:84:71:de:1e:31:fe:8f:dd:c0:
8f:c9:07:f6:82:a7:49:d7:e0:b5:a9:37:22:be:d7:
fa:4c:4c:61:9d:e2:1b:9e:b8:d0:1b:94:ec:30:a9:
fb:6b:e9:24:ce:00:6c:e8:23:2e:c9:dd:dd:ce:70:
0f:3c:9c:e0:cf:fb:ea:e6:f7:3b:99:83:f2:b5:32:
7f:e2:ae:7e:e2:33:f6:f2:98:ca:a7:db:b7:94:8c:
46:63:b6:5e:70:7f:20:40:56:b4:38:06:e0:b5:df:
ae:98:07:23:4b:c0:b5:ec:6f:d9:22:35:42:cf:cd:
6c:91:54:37:29:83:88:14:8c:18:51:35:ce:68:4c:
f5:47:a2:b4:4f:86:5b:bf:3b:78:ea:3d:32:28:91:
ad:c9:6e:0c:7f:c8:69:d8:a5:9d:03:1b:08:5c:03:
a4:c7:56:29:d0:73:1e:06:4a:ca:bb:83:43:fc:39:
1c:73:e1:d8:c5:81:09:43:9c:96:81:e8:ad:6f:ef:
12:88:dc:ed:c5:26:2c:96:96:4b:7e:ef:03:fc:4c:
de:37:4c:91:22:39:f1:b0:f9:9c:0b:c6:76:33:ba:
a0:ed:77:07:69:42:45:3f:4f:ed:ed:be:3c:94:62:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C0:93:78:23:9C:61:81:67:E1:10:88:4B:50:86:8A:BE:15:22:89
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:59:68:74:72:5e:12:ab:21:10:90:3a:0c:c1:64:83:63:b7:
69:52:05:60:6d:34:fd:30:59:f2:f2:d3:45:79:a4:35:25:00:
05:c5:33:e5:b3:02:db:22:be:ad:01:c5:b2:92:b9:e5:7b:1a:
bb:4e:6f:fc:e5:1c:fb:98:bc:c3:bc:03:da:5f:6b:8d:ac:e6:
4a:81:54:af:cb:59:fa:99:c6:f7:03:5a:df:17:5c:e7:5d:a8:
7d:63:66:38:ed:e5:e4:ff:a1:f8:4f:ed:08:42:3d:ae:fb:94:
c8:f4:c2:6d:fe:c2:e3:1c:32:65:e3:13:c0:aa:b6:43:b8:12:
10:0d:5f:8d:89:d8:d4:55:3e:48:45:ff:e8:2e:16:f0:80:88:
97:31:cd:f5:c6:1b:fe:d5:a9:a4:91:7a:0a:e8:be:09:f9:d3:
e9:fa:7c:55:9f:a0:da:71:68:d4:c4:e2:28:82:28:30:9f:8c:
b2:05:40:1f:2e:7f:67:39:42:78:d9:21:32:31:b7:e1:dc:40:
5a:f1:04:43:28:50:ce:5e:97:6b:4e:b9:ef:19:00:e8:26:40:
a5:3d:70:a2:ed:d2:18:7e:15:0b:b4:65:49:33:ab:fb:46:6c:
1f:4b:65:07:42:fb:05:19:6f:4d:8d:6d:d8:61:62:60:cb:1a:
f3:fc:a6:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:44 2025 by rpki-client