Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier: 2ftBpz/E579OKcDhIG05GdLkCcqRi5TpxZO62XaKuUY=
Subject key identifier: AF:8E:60:21:1D:5D:CE:87:99:ED:27:78:37:4D:0F:AA:A9:8C:53:6C
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 019A72CAAF4B7AC64C42783D6A4E8336A979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number: 08A2
Signing time: Tue 11 Nov 2025 12:01:16 +0000
Manifest this update: Tue 11 Nov 2025 12:01:16 +0000
Manifest next update: Wed 12 Nov 2025 12:01:16 +0000
Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: 86nXJ0ioccsjnqERGC4LuRp6Hzcq7gSpTkRxqvhALOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:af:4b:7a:c6:4c:42:78:3d:6a:4e:83:36:a9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Nov 11 12:01:16 2025 GMT
Not After : Nov 12 12:01:16 2025 GMT
Subject: CN=af8e60211d5dce8799ed2778374d0faaa98c536c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3a:8a:c1:5d:01:c2:e8:d9:3e:3a:e6:60:40:
d9:7e:90:01:35:53:b7:92:d8:fd:d8:01:ab:bd:02:
d8:52:69:a2:a5:ee:c1:c5:03:14:d1:e6:3b:1b:92:
be:00:79:5f:02:23:67:f2:95:c0:c4:d8:95:e9:c6:
f3:e3:16:2e:8e:1e:38:9e:ab:5e:a5:5a:3c:24:bd:
38:40:6e:8b:00:81:3a:08:c9:d4:09:f9:08:6d:3b:
a6:31:8a:cd:6e:1d:38:4c:03:7b:c0:00:ad:18:eb:
f6:04:2b:c5:d2:a7:cb:61:e6:b8:4a:d3:ec:eb:a6:
1e:bc:1d:62:aa:05:7e:e2:d9:bb:fb:e5:23:c9:dd:
4a:1c:ac:46:72:7a:81:39:c9:8a:f2:e9:1a:26:51:
28:36:f7:ab:d7:5a:e4:e5:95:fc:a5:00:14:f8:3e:
7f:1a:e0:d9:56:ab:a0:18:1e:2e:89:9f:e3:d5:5c:
27:0a:78:42:c9:ba:a4:31:c1:c8:f7:b4:6b:ac:3e:
42:48:25:3a:1d:3d:a7:91:2d:42:ff:43:60:e2:09:
90:67:b6:04:96:11:03:65:b4:d8:8f:4e:b4:7e:18:
1c:b2:55:91:e2:26:2b:be:39:25:4f:30:fd:25:fb:
d4:b9:7f:13:42:57:c3:67:be:11:58:27:c8:73:ef:
13:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:60:21:1D:5D:CE:87:99:ED:27:78:37:4D:0F:AA:A9:8C:53:6C
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:fb:43:b6:5c:5e:3b:fa:63:f5:f1:66:b7:16:8c:6d:df:51:
13:54:7d:73:75:2b:ac:74:b1:65:b3:45:6c:e4:ac:73:0e:fd:
a0:e4:08:2f:a3:ec:01:c6:a4:a3:85:9d:81:a9:79:13:c2:47:
2a:ae:93:65:75:6f:87:93:7c:5a:93:21:6b:0f:88:13:7c:ac:
43:b6:c9:77:54:bf:7d:ae:fd:55:fc:3e:c6:1c:f5:e8:1a:36:
a3:06:a1:f7:5f:ca:93:d4:a5:bf:44:7c:08:df:09:9a:1e:c3:
0b:58:0b:71:6b:73:28:13:2d:9d:78:93:78:10:b6:0a:4f:f6:
51:67:27:b6:e4:6b:2b:bf:e2:34:be:9d:4e:33:b3:7f:0a:71:
7b:45:ab:a0:85:a6:8d:77:14:47:5e:e7:05:72:4e:1a:b0:1f:
93:3c:dc:c1:fa:d8:91:08:e4:06:60:5b:b9:a7:d8:e7:c7:ba:
7b:f6:ef:2d:82:bf:2e:da:ab:60:cc:c7:64:93:aa:19:f8:20:
b5:ee:a5:15:dc:24:c7:d9:aa:13:47:c8:3d:05:aa:2b:57:02:
1d:3c:6b:be:48:04:7c:15:e5:85:30:08:cf:60:6f:65:87:b2:
94:c0:7d:db:76:c5:96:ad:dc:ac:06:a6:91:4e:18:5c:b6:8b:
41:a9:d6:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyyq9LesZMQng9ak6DNql5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOGM3MThiNDVhNzc2NzU5MDlkN2ZkMWFmZWM2ZGFhYmFm
ZTg4YjIwHhcNMjUxMTExMTIwMTE2WhcNMjUxMTEyMTIwMTE2WjAzMTEwLwYDVQQD
EyhhZjhlNjAyMTFkNWRjZTg3OTllZDI3NzgzNzRkMGZhYWE5OGM1MzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DqKwV0BwujZPjrmYEDZfpABNVO3
ktj92AGrvQLYUmmipe7BxQMU0eY7G5K+AHlfAiNn8pXAxNiV6cbz4xYujh44nqte
pVo8JL04QG6LAIE6CMnUCfkIbTumMYrNbh04TAN7wACtGOv2BCvF0qfLYea4StPs
66YevB1iqgV+4tm7++Ujyd1KHKxGcnqBOcmK8ukaJlEoNver11rk5ZX8pQAU+D5/
GuDZVqugGB4uiZ/j1VwnCnhCybqkMcHI97RrrD5CSCU6HT2nkS1C/0Ng4gmQZ7YE
lhEDZbTYj060fhgcslWR4iYrvjklTzD9JfvUuX8TQlfDZ74RWCfIc+8TOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+OYCEdXc6Hme0neDdND6qpjFNsMB8GA1UdIwQY
MBaAFOGMcYtFp3Z1kJ1/0a/sbaq6/oiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5Nzgt
MDRmMDQ0YmI5OGMyLzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5NzgtMDRmMDQ0YmI5OGMy
LzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJvtDtlxe
O/pj9fFmtxaMbd9RE1R9c3UrrHSxZbNFbOSscw79oOQIL6PsAcako4Wdgal5E8JH
Kq6TZXVvh5N8WpMhaw+IE3ysQ7bJd1S/fa79Vfw+xhz16Bo2owah91/Kk9Slv0R8
CN8Jmh7DC1gLcWtzKBMtnXiTeBC2Ck/2UWcntuRrK7/iNL6dTjOzfwpxe0WroIWm
jXcUR17nBXJOGrAfkzzcwfrYkQjkBmBbuafY58e6e/bvLYK/LtqrYMzHZJOqGfgg
te6lFdwkx9mqE0fIPQWqK1cCHTxrvkgEfBXlhTAIz2BvZYeylMB923bFlq3crAam
kU4YXLaLQanWIg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:15:43 2025 by rpki-client