Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
File: 4imzfrYwaGsTKDOEcbUtqV0gSRE.mft (raw, json)
Hash identifier: BEZyWirdtVbNPtFdvJ3H/sucJA1zg1T37o5HCbMd4Og=
Subject key identifier: 95:7E:9E:62:D2:F8:59:1E:A6:5E:8D:98:88:9B:D0:DA:B1:23:40:05
Authority key identifier: E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
Certificate issuer: /CN=e229b37eb630686b1328338471b52da95d204911
Certificate serial: 019A50E410877A262DE2BDB1592F51C0ED23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
Manifest number: 0C1F
Signing time: Tue 04 Nov 2025 22:01:54 +0000
Manifest this update: Tue 04 Nov 2025 22:01:54 +0000
Manifest next update: Wed 05 Nov 2025 22:01:54 +0000
Files and hashes: 1: 4imzfrYwaGsTKDOEcbUtqV0gSRE.crl (hash: JI0laNSz7EERW9CVf5dO9EBcNgNahbDEl7K3ol62jAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:10:87:7a:26:2d:e2:bd:b1:59:2f:51:c0:ed:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e229b37eb630686b1328338471b52da95d204911
Validity
Not Before: Nov 4 22:01:54 2025 GMT
Not After : Nov 5 22:01:54 2025 GMT
Subject: CN=957e9e62d2f8591ea65e8d98889bd0dab1234005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:6f:e7:41:16:23:d9:60:cc:84:e9:9f:e8:
a5:3f:5e:a8:3d:8f:77:f5:8d:28:1b:06:af:98:f7:
ea:3b:79:a5:13:f0:6f:e3:23:95:0e:a6:c9:f0:e4:
c3:16:8b:a5:9c:8f:08:20:80:d4:b1:09:8f:ec:4e:
a7:5b:f8:2b:3c:bb:cf:0e:4c:3a:d1:e2:07:fc:db:
00:86:9b:d2:c5:0e:8b:ff:d0:a2:cf:f3:5d:1b:98:
30:3a:d0:e2:5f:71:7e:5d:b1:26:75:62:a7:ea:48:
46:26:7d:80:95:ca:d5:9e:ce:29:03:47:9d:bf:79:
5f:dc:47:b4:d9:8f:34:0b:65:d3:a8:82:5c:21:5d:
6e:ea:02:12:ee:4e:71:bf:6f:87:7d:24:55:1a:10:
b7:56:b0:02:ca:60:39:ed:64:a6:0b:d8:e5:3f:92:
17:e3:8a:35:c2:9c:40:d0:00:d6:13:10:df:bf:e5:
7c:e3:52:97:18:92:36:16:5f:d7:69:5a:b0:3c:12:
fd:71:ed:52:55:ab:52:d3:a2:42:93:5b:35:74:63:
b0:bf:72:cf:f9:14:71:62:c5:9e:af:46:7f:49:5b:
cb:f2:1e:72:59:84:c8:8e:53:13:56:b4:c9:a2:b1:
df:c5:f7:8d:ce:e6:56:60:f8:b9:df:39:4e:3a:06:
76:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:9E:62:D2:F8:59:1E:A6:5E:8D:98:88:9B:D0:DA:B1:23:40:05
X509v3 Authority Key Identifier:
keyid:E2:29:B3:7E:B6:30:68:6B:13:28:33:84:71:B5:2D:A9:5D:20:49:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4imzfrYwaGsTKDOEcbUtqV0gSRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/745024-9e37-4790-86ac-7de8d8c2e930/1/4imzfrYwaGsTKDOEcbUtqV0gSRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:ba:50:ce:b3:c1:97:c3:57:f2:44:02:16:d0:41:c5:9c:cd:
09:4c:85:5f:c8:96:0f:5e:92:96:18:95:40:79:7c:1f:08:39:
3b:27:e6:2b:0a:b3:63:f3:7a:c3:90:7c:19:4f:4b:7e:33:57:
41:2d:08:68:3f:e4:cf:46:34:35:3a:62:5b:7a:15:93:b9:91:
95:6c:da:61:8a:4e:e2:a6:f5:60:4b:e5:77:08:03:f0:70:55:
3d:07:74:4a:b7:bb:8f:80:9f:70:cb:fa:6f:4e:21:39:1e:52:
25:a7:0e:14:fb:2f:68:a4:50:9e:12:35:69:49:3c:a5:4f:07:
b8:65:2c:e8:93:3d:90:25:3e:29:e8:ac:7e:6e:80:74:41:0f:
12:8c:1b:08:4a:06:a6:a3:af:76:60:78:12:3b:81:79:f8:f7:
9d:7a:ec:2f:b5:4f:7c:db:0c:e2:10:35:c6:0a:fd:c4:d7:e2:
2a:24:9c:fa:aa:a6:1d:36:76:6a:60:65:7e:d1:2d:59:89:c1:
fc:da:b8:09:76:e4:2f:b6:3d:59:36:72:0c:70:5e:98:f3:3d:
ab:9b:e4:f2:53:74:2e:82:c2:a9:e6:7c:19:52:60:d8:c1:a6:
3e:da:10:57:de:d2:48:95:35:62:a4:d8:73:a8:79:b3:99:36:
cf:05:92:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 04:00:02 2025 by rpki-client