Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: GRUdP7QYpt06YNXqoYhkCPzEfo8xiIyLO2X6npfY4uE=
Subject key identifier: BA:C6:C8:8D:65:F1:A0:0B:EB:A7:63:6C:21:3A:93:39:DA:81:9E:02
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 019A4D73CD1B7275055FB06E92E89297134E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 09D8
Signing time: Tue 04 Nov 2025 06:00:26 +0000
Manifest this update: Tue 04 Nov 2025 06:00:26 +0000
Manifest next update: Wed 05 Nov 2025 06:00:26 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: 8can3x6RCOMvqs40VNwlT60bfsv8qMN80ZRyz0JBYp4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:cd:1b:72:75:05:5f:b0:6e:92:e8:92:97:13:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Nov 4 06:00:26 2025 GMT
Not After : Nov 5 06:00:26 2025 GMT
Subject: CN=bac6c88d65f1a00beba7636c213a9339da819e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7e:c9:95:86:15:66:f1:c1:6f:1c:5b:a8:89:
70:cf:ce:f6:df:d1:cd:73:0b:dc:66:ef:08:39:e1:
42:0a:4f:ee:62:5e:52:0f:35:a5:1c:6c:85:c7:9a:
97:50:24:98:25:cc:de:cd:04:65:3a:4d:0a:6f:6c:
bd:a5:76:d3:49:05:a8:51:33:3e:f5:ad:44:9e:86:
ea:0d:87:23:87:b2:9d:53:7d:0d:f1:f1:49:0c:16:
ad:fe:c9:30:07:09:69:02:48:f6:c8:cb:f9:2c:39:
83:2d:cd:d9:9c:ea:1c:1a:03:ac:ac:a7:86:da:f2:
53:c8:ae:df:19:dd:8e:4b:20:2a:6e:09:e6:52:c6:
92:c4:71:bd:f8:70:88:6d:b0:ec:53:ff:71:b0:d2:
3d:e6:83:bd:98:be:69:69:e9:89:44:47:f9:a0:f7:
60:11:bd:0f:4f:5b:6f:e8:df:d0:7d:ae:d0:fb:c5:
f8:a1:02:b4:bf:97:9a:d3:43:7b:02:5d:ff:03:83:
a4:bd:72:03:94:86:73:6f:e4:5e:4d:ea:ae:52:66:
b9:a3:2e:eb:15:90:78:6d:9c:23:9d:6a:cc:dc:7e:
fc:3e:66:c7:92:90:dc:08:7e:21:d4:57:c1:56:da:
0d:19:f4:f6:54:2f:8d:4f:71:04:39:66:1b:20:03:
f9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C6:C8:8D:65:F1:A0:0B:EB:A7:63:6C:21:3A:93:39:DA:81:9E:02
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:d6:d9:41:6e:3b:78:89:5e:05:37:ce:64:0c:2c:b6:0c:07:
fa:29:7f:30:11:1d:90:4f:9b:2d:74:b3:85:7b:e1:1b:84:02:
3d:44:4c:11:85:8a:ff:e0:71:c6:61:c5:86:3d:f0:cf:89:5e:
2d:c0:5e:48:cf:36:ca:9a:fc:21:7c:c6:c6:d6:6e:29:13:97:
b1:aa:6a:fc:1b:1a:2c:c2:5f:bb:18:f0:01:da:e0:8a:16:ec:
7f:c3:3b:65:dc:16:16:ad:3e:04:3b:f3:e8:2c:fc:85:09:63:
36:54:63:c7:cd:93:c0:5e:ea:c3:88:04:70:55:da:03:79:58:
a1:ce:27:8d:a5:f9:52:fc:97:85:1a:23:de:e2:48:c1:c7:96:
d8:9a:ae:3c:65:df:d1:f3:16:39:75:8c:92:36:ae:dc:8a:4d:
a7:62:31:c2:17:8f:1e:c4:c2:40:fa:ef:f6:16:ef:dd:e3:95:
2f:0f:e0:96:3e:5c:cc:4c:bc:c0:0f:cb:e1:3b:dd:18:d5:7b:
c3:bc:43:9d:88:a0:83:21:79:44:da:ca:d9:42:19:1a:f9:bd:
cc:5b:a1:71:32:a2:f7:03:56:39:b5:2d:db:05:65:55:28:98:
5f:d3:db:48:a5:26:eb:c8:73:95:50:e6:1f:27:f5:74:f1:40:
5f:02:ff:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc80bcnUFX7BukuiSlxNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDk3NGMzYmQ0ZmVhNGU5ZmViNTEyOWRiZWQyMDNjMDc1
YzhkNjgwHhcNMjUxMTA0MDYwMDI2WhcNMjUxMTA1MDYwMDI2WjAzMTEwLwYDVQQD
EyhiYWM2Yzg4ZDY1ZjFhMDBiZWJhNzYzNmMyMTNhOTMzOWRhODE5ZTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlX7JlYYVZvHBbxxbqIlwz87239HN
cwvcZu8IOeFCCk/uYl5SDzWlHGyFx5qXUCSYJczezQRlOk0Kb2y9pXbTSQWoUTM+
9a1EnobqDYcjh7KdU30N8fFJDBat/skwBwlpAkj2yMv5LDmDLc3ZnOocGgOsrKeG
2vJTyK7fGd2OSyAqbgnmUsaSxHG9+HCIbbDsU/9xsNI95oO9mL5paemJREf5oPdg
Eb0PT1tv6N/Qfa7Q+8X4oQK0v5ea00N7Al3/A4OkvXIDlIZzb+ReTequUma5oy7r
FZB4bZwjnWrM3H78PmbHkpDcCH4h1FfBVtoNGfT2VC+NT3EEOWYbIAP5fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrGyI1l8aAL66djbCE6kznagZ4CMB8GA1UdIwQY
MBaAFOHZdMO9T+pOn+tRKdvtIDwHXI1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAt
YzAzNDEwOTRiMDlhLzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9jNDllNjAtOWY5Yi00ZmZlLWFkYTAtYzAzNDEwOTRiMDlh
LzEvNGRsMHc3MVA2azZmNjFFcDItMGdQQWRjaldnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAntbZQW47
eIleBTfOZAwstgwH+il/MBEdkE+bLXSzhXvhG4QCPURMEYWK/+BxxmHFhj3wz4le
LcBeSM82ypr8IXzGxtZuKROXsapq/BsaLMJfuxjwAdrgihbsf8M7ZdwWFq0+BDvz
6Cz8hQljNlRjx82TwF7qw4gEcFXaA3lYoc4njaX5UvyXhRoj3uJIwceW2JquPGXf
0fMWOXWMkjau3IpNp2IxwhePHsTCQPrv9hbv3eOVLw/glj5czEy8wA/L4TvdGNV7
w7xDnYiggyF5RNrK2UIZGvm9zFuhcTKi9wNWObUt2wVlVSiYX9PbSKUm68hzlVDm
Hyf1dPFAXwL/8g==
-----END CERTIFICATE-----
Generated at Tue Nov 4 15:06:20 2025 by rpki-client