Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
File: 4KWDmEmtO4v_oBSbsOEeZhycPX8.mft (raw, json)
Hash identifier: OCi2e1XGykqd9ep2W/oFCXQX1O6ZyvnwQZqX3kuVZH0=
Subject key identifier: A8:1B:D3:25:86:49:86:90:5F:BA:2C:33:64:DB:E5:C4:C5:CC:0C:83
Authority key identifier: E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
Certificate issuer: /CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Certificate serial: 019A722606CD480ED0596A3C07EE883CA54E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 09:01:25 +0000
Manifest this update: Tue 11 Nov 2025 09:01:25 +0000
Manifest next update: Wed 12 Nov 2025 09:01:25 +0000
Files and hashes: 1: 4KWDmEmtO4v_oBSbsOEeZhycPX8.crl (hash: PFVPR7sefIaZKVckmHvHfVwJhjX2CtNtJZV6sRe3/S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:06:cd:48:0e:d0:59:6a:3c:07:ee:88:3c:a5:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a5839849ad3b8bffa0149bb0e11e661c9c3d7f
Validity
Not Before: Nov 11 09:01:25 2025 GMT
Not After : Nov 12 09:01:25 2025 GMT
Subject: CN=a81bd325864986905fba2c3364dbe5c4c5cc0c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:03:32:35:d5:99:25:e3:af:e7:f1:d0:60:
6d:b0:6b:09:46:f8:1b:fe:a9:a0:ad:b5:3d:cb:20:
f7:fb:ce:72:0b:d5:0c:8c:51:50:9c:81:92:20:79:
81:1a:80:b8:6a:e3:b4:c1:26:cf:a0:86:de:fc:75:
25:e7:f6:10:58:9a:4f:ff:49:01:a1:a8:9a:98:7b:
74:14:27:a1:a7:d4:8d:5e:bd:d6:d3:37:bb:a0:67:
f6:bb:97:cf:56:f4:94:55:3f:d9:18:05:bf:af:a6:
23:eb:8e:e7:09:db:7a:a3:c1:33:17:4c:9c:26:d8:
bb:2d:2f:82:da:6e:53:3b:72:bb:ac:e4:1c:a6:a4:
70:e5:f0:4b:14:c3:31:98:84:f1:54:a1:4e:e1:bb:
60:84:db:5b:08:50:8e:4e:40:88:ec:cf:16:44:1a:
85:04:e0:8c:c0:d9:4a:55:ce:9b:21:fb:33:b6:b3:
d0:80:43:03:ce:36:f6:81:25:38:95:50:c8:aa:27:
86:4a:60:68:c9:84:94:91:f5:e0:94:fe:b7:9e:83:
f6:25:34:e9:93:c1:3e:79:6c:60:9d:74:94:f1:d4:
39:b1:df:64:69:d7:32:d1:a7:65:36:2e:ec:8d:3c:
fe:4f:dc:f7:a7:90:f6:55:11:2a:9c:32:a1:1f:13:
36:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:1B:D3:25:86:49:86:90:5F:BA:2C:33:64:DB:E5:C4:C5:CC:0C:83
X509v3 Authority Key Identifier:
keyid:E0:A5:83:98:49:AD:3B:8B:FF:A0:14:9B:B0:E1:1E:66:1C:9C:3D:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KWDmEmtO4v_oBSbsOEeZhycPX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/eb97a7-d1ad-42d5-a0c8-78fae7fadaba/1/4KWDmEmtO4v_oBSbsOEeZhycPX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:bd:2b:ef:41:a4:22:f3:7d:d4:40:49:69:41:1e:d3:3a:b1:
b0:b9:71:2f:80:0f:cf:50:a6:fb:b4:95:ef:c1:df:1b:a3:97:
60:9c:68:75:d9:94:ee:57:e6:db:6e:bd:a5:2b:97:71:56:ab:
84:8c:22:8d:ec:41:3a:b4:6f:95:a6:ee:d4:8e:29:98:d7:7f:
f4:ca:86:b5:b1:2e:8a:8f:60:09:ed:4f:2e:76:9a:b0:ec:8e:
af:68:91:7e:52:01:8e:3f:e2:c0:c4:7c:b8:d7:7a:40:e7:3b:
78:44:18:a2:b5:3b:33:f9:0b:67:19:3e:12:d7:62:63:90:82:
54:2c:e4:65:55:1c:25:cc:09:55:cf:62:55:bc:99:d3:91:82:
3d:1a:96:46:01:81:81:81:b3:18:4d:1f:8a:61:e6:b5:24:3e:
ca:41:cc:0e:2e:28:8f:ee:5a:12:b2:a9:43:f6:47:59:59:b7:
f7:56:94:53:12:16:ca:00:5a:b8:a1:f4:24:6d:4f:26:d3:d6:
85:0d:42:66:20:e9:40:eb:fb:be:7d:b2:94:db:e0:54:0e:3c:
ff:ed:d1:c4:ff:d2:a6:29:24:ce:54:e5:95:56:07:5c:ff:71:
14:2e:07:e7:30:13:b7:78:54:b0:cb:19:21:5f:99:df:96:19:
21:6e:6c:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:33 2025 by rpki-client