Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
File: 4e2SJYT2My2woOpx4XX2ql6NN54.mft (raw, json)
Hash identifier: kqxwMye/FzCSmq9KzuepR2v5xNxKK1j+nr2gRBU3OsE=
Subject key identifier: 09:4A:0D:2A:EB:A3:13:B8:44:2C:93:DB:A3:59:8C:34:09:2E:7D:35
Authority key identifier: E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
Certificate issuer: /CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Certificate serial: 019A4EF442DA96994B41D4A77869DF8830E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
Manifest number: 0841
Signing time: Tue 04 Nov 2025 13:00:22 +0000
Manifest this update: Tue 04 Nov 2025 13:00:22 +0000
Manifest next update: Wed 05 Nov 2025 13:00:22 +0000
Files and hashes: 1: 4e2SJYT2My2woOpx4XX2ql6NN54.crl (hash: YMsGGbJ2hkYoJBFtO1sYs1QnLpSxz9gN7KlrJfR+W/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:42:da:96:99:4b:41:d4:a7:78:69:df:88:30:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ed922584f6332db0a0ea71e175f6aa5e8d379e
Validity
Not Before: Nov 4 13:00:22 2025 GMT
Not After : Nov 5 13:00:22 2025 GMT
Subject: CN=094a0d2aeba313b8442c93dba3598c34092e7d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:53:9f:b1:07:8e:31:0f:67:74:a7:67:6a:2d:
6a:e7:95:c7:b2:1a:4e:ec:74:ab:c5:0f:70:25:60:
45:56:70:76:1d:01:29:db:18:86:51:46:20:eb:89:
d5:d3:ba:0e:a2:a8:36:e3:a1:40:69:c5:90:3d:a1:
6c:c2:c2:c8:c6:a6:02:f0:e6:76:7a:b5:8e:31:93:
65:d4:21:97:f8:87:55:9e:5d:d6:cc:57:ad:7b:66:
b7:8c:1d:46:1d:8e:c7:ee:cc:7c:86:4e:3e:cd:26:
2b:02:1e:49:0b:48:b6:b2:58:e5:b1:f5:b1:b5:e3:
08:ed:72:3e:40:f3:b5:71:20:91:6f:6a:a4:de:67:
16:89:8e:20:d0:e5:46:dd:b1:f1:c3:e7:af:f4:82:
49:2b:6d:9b:bd:1b:8e:4d:52:ca:be:59:6a:6e:63:
29:db:c0:1d:53:a9:0a:dd:8f:b3:37:88:d9:15:94:
74:8c:54:e6:31:03:70:01:ef:06:40:d2:a2:12:93:
7b:d9:13:95:a7:d3:1a:4b:f0:40:0e:52:0e:22:dd:
45:ac:d8:b3:6e:52:28:43:7c:c7:6d:8c:4d:cb:c4:
3e:5d:c6:00:c1:3c:9a:b4:e0:15:6e:f9:0a:9e:70:
dc:b1:41:ac:bf:09:19:b0:bb:45:40:25:5d:df:48:
bc:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:4A:0D:2A:EB:A3:13:B8:44:2C:93:DB:A3:59:8C:34:09:2E:7D:35
X509v3 Authority Key Identifier:
keyid:E1:ED:92:25:84:F6:33:2D:B0:A0:EA:71:E1:75:F6:AA:5E:8D:37:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e2SJYT2My2woOpx4XX2ql6NN54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/94c4d8-49bf-47c3-b9e5-4e579c61a5b7/1/4e2SJYT2My2woOpx4XX2ql6NN54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:46:14:cb:6f:4b:f5:a2:dd:7d:a1:d3:0a:64:89:b3:25:47:
cf:2e:a0:fb:68:31:0d:0b:f1:28:f8:8c:82:47:0d:55:7d:81:
8b:ef:d1:fc:cb:3e:8f:d5:61:2f:cd:7c:40:70:c8:a2:d2:fb:
73:02:40:1d:63:22:7e:de:e4:0b:b8:57:b7:ed:c5:4d:e1:96:
1e:3b:d3:a3:03:ee:7f:46:e5:72:77:08:09:57:d4:20:34:58:
c4:de:d4:3a:9d:76:fa:8a:33:bb:1b:18:2e:ba:62:1d:2c:fe:
5a:f5:0a:a3:a7:4c:04:f8:39:a3:3c:d5:ee:83:26:c8:47:c5:
e1:de:ea:23:a5:f0:0e:d6:c2:b4:65:40:d3:1b:12:90:92:27:
36:54:8b:47:3b:60:98:47:6b:ea:ba:0c:53:f9:6d:2d:10:63:
f8:56:4e:80:48:39:d2:75:93:a9:fe:ed:a7:4d:87:a1:e8:b8:
d3:fb:3e:7e:1a:08:83:30:3e:05:14:27:50:40:27:20:f9:f7:
25:0f:b6:da:c0:9f:aa:a4:89:e1:0f:d9:c8:b7:cf:2e:74:c5:
71:23:5a:14:9d:d9:56:7e:6d:17:ae:62:ac:8c:6a:db:bd:99:
2e:9f:0e:76:e9:a5:4c:a3:d4:e4:50:45:36:1a:9e:b3:88:2f:
27:37:a3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:18:00 2025 by rpki-client