Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: xOrgpYBuI3FuK8JkTx8nWoHIwpkyA2iZSZsmCDz8MQY=
Subject key identifier: B5:3C:48:3B:BB:E0:D9:C9:91:50:D2:2C:D5:AB:E9:2E:3D:C9:B5:94
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 019A71B794C16A89761D646CC8C09BE6EFCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:00:47 +0000
Manifest this update: Tue 11 Nov 2025 07:00:47 +0000
Manifest next update: Wed 12 Nov 2025 07:00:47 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: 7S3RvfDF/Fs4I5/OueGJ2ljeS2jyn04oX/cPN3t99mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:94:c1:6a:89:76:1d:64:6c:c8:c0:9b:e6:ef:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Nov 11 07:00:47 2025 GMT
Not After : Nov 12 07:00:47 2025 GMT
Subject: CN=b53c483bbbe0d9c99150d22cd5abe92e3dc9b594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:b7:6d:96:a6:08:04:6b:fa:72:58:43:71:
24:4d:6f:fa:cb:4e:ae:06:26:e7:27:a2:bd:c7:02:
82:ad:4d:04:4c:39:a4:70:d5:25:ea:b9:dc:16:c8:
5f:e5:77:d1:a6:63:89:63:70:f1:3b:f0:59:5b:26:
36:04:d8:8e:97:52:d2:ec:ee:69:2a:7d:85:3e:04:
7f:09:73:cd:3b:96:e0:fa:ab:0b:cc:eb:23:e8:ba:
12:b2:5b:61:4a:4d:fe:81:95:ce:cc:0b:bf:5b:00:
d9:4e:75:96:11:d1:b6:14:48:a4:1b:33:c1:7e:77:
94:8e:08:4c:36:34:b0:48:ce:37:6b:df:f0:dc:38:
60:55:2b:55:4a:14:3a:42:47:88:08:a0:81:ad:82:
d0:a0:d7:ae:43:88:2d:16:98:a6:2c:59:03:10:c8:
f2:ad:1c:0d:df:22:f5:01:5e:b3:0e:03:65:d0:ce:
10:fe:df:de:20:ab:8e:3a:33:1f:2d:ac:dd:f5:31:
49:cb:05:1d:ae:a2:8b:1d:df:bb:cc:c7:64:c8:e6:
cb:48:6f:9e:66:08:57:09:8c:b9:fc:5e:f3:4d:79:
a5:ec:d8:26:6e:36:cd:5f:69:8f:c0:68:18:12:c5:
c4:d7:fd:c9:6a:c7:63:57:cc:29:d0:39:0e:5f:c3:
3d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3C:48:3B:BB:E0:D9:C9:91:50:D2:2C:D5:AB:E9:2E:3D:C9:B5:94
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0c:a3:02:c7:33:24:91:3b:08:6b:6c:74:3f:b6:74:bd:6c:
ac:87:93:02:16:28:e8:70:a1:4a:1f:0a:b0:a9:80:ab:e3:45:
5f:98:c8:af:6e:3e:0c:5b:87:e9:ff:46:3b:55:a5:2b:98:8d:
ed:0e:4f:7e:5b:ac:e4:c8:8a:a8:46:be:cd:1d:34:d5:b5:ac:
8e:83:6d:ab:1a:2b:c5:48:7c:44:5f:83:80:b1:25:21:69:eb:
e0:0f:c0:d1:a7:68:42:d5:9d:56:3e:ef:be:28:dd:6d:61:4a:
82:1a:69:0a:2c:51:39:7b:76:58:52:ad:d0:21:0e:a9:44:c1:
91:c9:33:8b:a4:45:1b:89:9d:72:14:a7:eb:4c:09:69:e8:d2:
df:45:e9:4f:ce:98:1f:2d:97:fa:4a:7d:b5:18:5c:52:cb:3c:
e8:e4:d9:81:fc:06:ff:cd:de:bb:6e:50:a6:b5:09:61:41:d9:
bd:38:87:f1:67:28:41:83:bb:cc:06:77:b5:77:1d:8d:93:73:
57:3b:6e:4b:85:2d:7d:a8:91:c2:10:de:2f:f9:3d:ce:55:68:
2d:fb:45:30:1f:6f:9d:d7:db:95:d7:4b:81:cd:71:94:9e:95:
e2:0c:09:8e:aa:18:30:14:87:6b:80:fa:fb:3c:e0:bd:54:47:
ab:f6:fd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:17:37 2025 by rpki-client