Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
File: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft (raw, json)
Hash identifier: YItAarvtyuo+etp73VeZRPqWs2CF66lR3dMLqpPrJ1U=
Subject key identifier: C8:C3:AA:FC:AB:44:41:52:EF:7C:72:BD:56:3A:EC:B2:6E:5A:7D:B7
Authority key identifier: E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
Certificate issuer: /CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Certificate serial: 019A5006D7C2534C6E8EE597F04F1E9C94E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
Manifest number: 1036
Signing time: Tue 04 Nov 2025 18:00:16 +0000
Manifest this update: Tue 04 Nov 2025 18:00:16 +0000
Manifest next update: Wed 05 Nov 2025 18:00:16 +0000
Files and hashes: 1: 4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl (hash: h/XDrD/dmDtZuwJXAgGDxx9/jIdAoHg1EzFbH7CL93c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:d7:c2:53:4c:6e:8e:e5:97:f0:4f:1e:9c:94:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e1ef8511b7562bf3dc3c0b04093b337bce0391
Validity
Not Before: Nov 4 18:00:16 2025 GMT
Not After : Nov 5 18:00:16 2025 GMT
Subject: CN=c8c3aafcab444152ef7c72bd563aecb26e5a7db7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:19:e5:14:87:61:d2:7d:77:99:b3:61:3f:94:
26:1f:e9:59:2a:af:cc:04:fc:81:43:a6:b1:27:eb:
6c:d9:96:5a:a4:65:4e:af:b8:5e:ec:29:4a:28:41:
5f:fa:56:0c:6e:38:91:e7:a6:c9:53:e5:68:9e:a7:
9d:6a:f0:10:2b:ad:87:61:46:4a:74:74:21:e6:b4:
71:8a:3a:ad:c4:11:c1:b7:93:3d:c5:8d:6a:4e:64:
03:c2:66:8d:08:92:ae:89:03:6e:28:5b:fe:a6:57:
b5:27:4b:44:51:13:c3:6f:23:7a:2f:e3:b8:f4:d8:
b4:bd:46:36:54:da:6c:bb:95:f9:2c:11:70:25:dd:
79:77:7a:ff:21:3e:42:c1:67:cb:e4:64:92:a3:ed:
e2:7c:08:95:6e:0f:5d:da:cc:10:b7:25:91:9e:ad:
08:bb:2a:e2:36:c8:5f:47:eb:26:2e:aa:c6:97:86:
5d:9a:d4:a8:31:2b:b1:4a:04:31:e7:18:dd:2d:42:
db:39:42:d4:9f:34:63:30:9f:ed:b9:1a:89:5b:ba:
cb:44:4b:3d:7e:6b:7b:87:8e:a6:8f:c9:f4:89:e4:
e2:45:9c:16:89:bc:57:7d:cd:c7:02:15:0a:1f:df:
ea:be:1e:7d:a3:de:e0:c4:11:65:b1:df:6d:07:1d:
cb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C3:AA:FC:AB:44:41:52:EF:7C:72:BD:56:3A:EC:B2:6E:5A:7D:B7
X509v3 Authority Key Identifier:
keyid:E2:E1:EF:85:11:B7:56:2B:F3:DC:3C:0B:04:09:3B:33:7B:CE:03:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uHvhRG3Vivz3DwLBAk7M3vOA5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ecb5d4-b448-42e4-b4a3-9b65890e2eae/1/4uHvhRG3Vivz3DwLBAk7M3vOA5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:de:f3:c1:a2:cd:d3:77:c3:6a:db:d0:17:fc:16:e4:45:a1:
44:77:c2:9b:75:1c:a1:89:52:b4:b7:ef:46:68:91:0a:46:7d:
96:32:01:4b:66:47:97:7e:dd:64:04:fd:47:06:89:67:ec:5c:
b6:bd:c4:1c:48:09:cf:15:41:63:6c:00:1a:c3:0b:0c:a1:72:
0f:1b:1f:5e:19:7b:c4:5b:ea:74:be:e4:48:1a:0e:8d:a1:08:
e3:85:6b:99:5a:f1:8a:6c:0f:5f:d7:3a:4d:46:a9:78:f7:5f:
51:e8:7f:70:43:3f:42:9e:2b:62:34:e8:1a:fd:1e:4e:ee:f6:
e8:6b:75:dc:a7:91:7b:5c:6d:1b:29:72:12:4e:be:e7:03:b5:
3d:5a:01:64:8a:d5:1b:f9:ce:82:bc:9e:75:41:b2:3b:7b:90:
9e:3d:7c:34:7b:c5:e1:88:79:f8:07:89:87:1c:16:f3:82:64:
92:64:5d:0e:11:86:13:11:f7:a4:9f:a0:b8:d9:77:5b:67:05:
2c:05:b8:02:9e:43:44:e3:5c:b8:0c:3f:b5:0d:5e:b6:44:ec:
b7:f4:8b:ae:1c:97:22:8e:c0:7f:5d:fd:2a:4f:f0:a3:9b:ef:
e0:95:07:51:6c:c7:2a:42:97:42:05:bf:a6:35:b7:87:4d:e2:
28:a4:a9:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:47 2025 by rpki-client