Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: coqpzOoTPW7QxRnY1XBg4iPPAyfcv2akiBHCWIj5gAY=
Subject key identifier: 08:B8:D2:1E:FA:64:27:BC:E7:3F:95:4B:70:15:C7:C6:BA:91:D4:95
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019A71B8237F20919B3307F68C6181BE99FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:24 +0000
Manifest this update: Tue 11 Nov 2025 07:01:24 +0000
Manifest next update: Wed 12 Nov 2025 07:01:24 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: vQqOim0ad10TevygcLlojve9/5TTy4W4V4ACkzNsDNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:23:7f:20:91:9b:33:07:f6:8c:61:81:be:99:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Nov 11 07:01:24 2025 GMT
Not After : Nov 12 07:01:24 2025 GMT
Subject: CN=08b8d21efa6427bce73f954b7015c7c6ba91d495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:da:5a:ac:62:e7:7a:23:87:01:9c:92:e3:
94:c4:f8:95:38:84:3b:a3:b5:a0:18:81:ef:41:15:
c7:d7:d4:9e:e2:43:c4:1b:56:58:d8:5b:e3:03:6d:
f5:27:96:84:b6:6c:bd:35:43:91:47:d8:a0:92:5c:
f6:c3:9b:2e:23:4b:70:cd:4c:03:1e:ba:a7:a9:2f:
83:2f:05:b4:80:5a:e8:6f:92:cb:3e:b3:54:25:5c:
e9:1c:1d:94:92:8a:f9:14:94:fa:28:fc:19:8b:5c:
48:c2:d0:f3:c3:ec:ea:64:b1:13:aa:96:91:fb:53:
c9:eb:66:ad:37:db:aa:4d:59:f1:bc:c1:df:90:40:
2c:23:38:2b:5c:d8:da:a0:8e:20:c6:b7:ac:7c:3c:
03:81:4b:4a:7c:75:d9:3d:dd:8e:34:ba:a7:1d:65:
51:c3:57:e7:9e:c9:65:34:cd:c5:a7:12:5b:19:58:
09:71:43:6b:c7:39:ca:72:59:9e:42:40:7f:46:30:
bd:71:33:29:d3:34:12:de:31:55:7e:27:6d:93:be:
61:6b:bf:7f:0d:a6:d7:51:18:63:33:9f:d9:fb:da:
ef:cc:7f:de:9a:7c:35:f7:8c:54:3b:da:95:f7:7e:
c2:11:cb:de:ef:6d:fd:b7:f7:b0:a8:75:4d:3c:c7:
4c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B8:D2:1E:FA:64:27:BC:E7:3F:95:4B:70:15:C7:C6:BA:91:D4:95
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:34:7d:21:40:26:b4:46:0a:9f:50:e2:38:26:59:da:81:9b:
1d:57:c1:3a:e5:de:6f:4a:71:40:0a:c4:77:5c:d0:e4:d3:5b:
80:f9:4c:32:21:26:fb:d3:22:f4:eb:12:b4:17:cb:22:6e:7b:
46:5d:19:c9:36:42:70:5d:9a:ad:41:30:bd:3e:4e:f6:06:82:
bb:3a:a2:cb:55:cb:2e:6a:02:82:2c:b3:1b:36:ff:9c:d6:dd:
43:9d:38:b6:a8:1a:bd:dd:f6:58:6d:3f:c0:19:bd:73:21:d5:
0b:f1:b6:c9:1b:fe:ef:88:3c:7e:14:1c:62:6b:e8:a0:8d:aa:
7e:a0:78:31:5d:8b:db:d7:c0:39:d0:6d:1c:60:13:fc:7f:56:
7d:df:ae:df:09:2d:ef:e1:0c:f6:df:51:89:f8:1e:48:c7:c6:
41:e9:3b:38:a8:cc:91:d7:1e:35:b3:84:bc:d7:c5:5e:c0:2e:
bd:ad:56:33:0f:a3:80:4c:55:63:f2:27:77:34:4b:dd:87:42:
15:ca:48:c4:a5:ef:dc:d6:14:6f:ca:5c:eb:3f:25:0b:9a:3f:
c8:4a:f9:2b:79:c7:fd:fb:65:6a:10:f8:9e:f9:03:c0:a7:bd:
91:27:82:76:76:ee:ee:36:10:aa:55:c4:0e:60:cd:6e:67:1c:
f0:3d:d3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:59 2025 by rpki-client