Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
File: 4Xa6TSueAPu_jsQzEekblUqqU24.mft (raw, json)
Hash identifier: Kw67fT48bfH/FGuDMvVg9pgq26aO+4y86or7sNzKcM0=
Subject key identifier: 3C:E1:78:66:46:95:15:34:A4:D3:5B:06:DD:D8:E9:AF:AE:00:80:68
Authority key identifier: E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
Certificate issuer: /CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Certificate serial: 019A711332921D372D403978E724E95911EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
Manifest number: 067E
Signing time: Tue 11 Nov 2025 04:01:14 +0000
Manifest this update: Tue 11 Nov 2025 04:01:14 +0000
Manifest next update: Wed 12 Nov 2025 04:01:14 +0000
Files and hashes: 1: 4Xa6TSueAPu_jsQzEekblUqqU24.crl (hash: En9jFIxVGRTjYrx2u3zfCAskPJlti5K4OUGkdKoG5rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:32:92:1d:37:2d:40:39:78:e7:24:e9:59:11:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e176ba4d2b9e00fbbf8ec43311e91b954aaa536e
Validity
Not Before: Nov 11 04:01:14 2025 GMT
Not After : Nov 12 04:01:14 2025 GMT
Subject: CN=3ce1786646951534a4d35b06ddd8e9afae008068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1c:d7:35:f4:f1:06:33:9c:5b:a4:51:ab:bd:
7f:db:87:86:18:d8:88:f9:b6:db:c6:4e:b9:23:e3:
80:da:52:0f:39:ab:f2:48:42:0d:b5:74:ec:be:f7:
ce:17:dc:b7:ab:14:0e:cd:1b:c7:a7:4f:a4:16:e4:
40:37:08:a8:16:da:7d:32:a8:c2:dc:56:96:bf:32:
41:43:52:cf:4d:7c:5c:47:ff:0c:12:bb:ce:43:59:
33:ec:34:0a:cd:1f:0f:9f:51:a7:01:ae:56:21:7c:
41:d8:93:98:2c:03:70:cc:93:40:d8:f4:de:07:42:
62:f6:b9:88:9f:fc:9e:13:ef:a0:bf:02:20:e2:21:
dc:41:2c:6e:83:7e:87:26:d4:4a:04:04:61:2e:68:
ff:27:45:87:6a:97:89:87:6a:76:52:fb:ab:df:f7:
e0:64:c8:3a:4e:95:dc:6c:10:b1:ae:93:16:3a:2a:
fd:cc:35:8e:57:d9:0d:cf:ab:31:22:88:45:e4:ff:
0d:05:e2:c4:84:bf:c2:8c:01:69:b4:70:63:43:12:
26:03:14:85:c3:7c:55:36:67:21:3f:fa:1e:a2:07:
fe:f5:df:73:c8:ea:d1:dd:2e:10:5a:fc:a2:dd:47:
41:12:98:2b:c8:08:69:ac:aa:75:e5:aa:66:87:73:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E1:78:66:46:95:15:34:A4:D3:5B:06:DD:D8:E9:AF:AE:00:80:68
X509v3 Authority Key Identifier:
keyid:E1:76:BA:4D:2B:9E:00:FB:BF:8E:C4:33:11:E9:1B:95:4A:AA:53:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Xa6TSueAPu_jsQzEekblUqqU24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/fcbfdd-0b78-4040-9a91-d78d8ab6e668/1/4Xa6TSueAPu_jsQzEekblUqqU24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:97:29:c1:92:9a:22:9b:41:41:b7:d6:7d:80:8b:40:b7:d2:
de:36:cb:f3:39:99:f8:0d:5b:ff:0f:6e:5a:eb:cf:92:56:26:
b3:ff:bf:5a:cb:93:56:5f:51:8c:c3:41:0d:c4:c1:4c:2d:90:
3d:fd:d7:db:e2:d4:bd:50:e9:15:8b:28:9c:65:3c:31:d3:56:
61:0f:40:da:73:f5:62:63:f4:3c:16:87:d9:85:48:81:cd:4f:
30:f6:c4:9d:d7:98:9c:c9:ea:84:13:c6:59:b0:06:23:60:92:
a4:64:dd:b1:5a:e8:be:2b:09:52:eb:ad:26:b9:54:38:0c:23:
51:eb:92:25:4f:5e:1b:4e:48:31:80:c2:dd:e1:c1:fd:6f:5a:
64:29:b7:46:b7:7c:7b:8e:ee:0c:c3:fe:92:fe:67:32:66:20:
97:b6:c0:48:04:ff:9f:03:b8:72:1d:eb:52:c2:47:4c:ed:5e:
c0:8e:7b:81:e6:c1:b3:a3:79:9c:52:b2:2b:3d:88:5f:a2:91:
36:24:88:ef:fc:6c:45:f4:7f:27:bc:e6:06:ab:61:61:bc:a2:
5d:77:dc:4d:eb:ba:d0:10:fd:8e:4c:c6:e7:77:d4:59:8e:30:
40:68:cb:ed:71:cc:c3:22:ce:f5:b2:33:57:fc:ba:51:ff:85:
0d:0b:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:09 2025 by rpki-client