Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File: 4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier: 33BM4me9RKafVVH0bveMeS3SVXGRMKl2mqrkgLPq180=
Subject key identifier: B0:05:1A:21:C2:DC:E1:88:AC:8D:B7:80:2A:DE:E7:6C:BD:AB:D0:17
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer: /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial: 019A51BE97279D0819BB8E26DEA1E176277C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number: 0D8D
Signing time: Wed 05 Nov 2025 02:00:36 +0000
Manifest this update: Wed 05 Nov 2025 02:00:36 +0000
Manifest next update: Thu 06 Nov 2025 02:00:36 +0000
Files and hashes: 1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: enju5BrhLPZ+wCLBfQJUBqrRiWEmscMSZqpq8I4W208=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:be:97:27:9d:08:19:bb:8e:26:de:a1:e1:76:27:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Validity
Not Before: Nov 5 02:00:36 2025 GMT
Not After : Nov 6 02:00:36 2025 GMT
Subject: CN=b0051a21c2dce188ac8db7802adee76cbdabd017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:23:88:db:d4:70:72:f7:17:5b:bf:ce:fb:
00:79:7d:c1:50:70:63:fd:f1:11:5d:28:5a:a9:f6:
f4:fc:90:b8:06:c8:51:51:8f:f8:2f:95:0f:88:f8:
da:48:d9:54:4b:73:0d:a6:26:c7:40:f9:f5:d9:e2:
ae:39:ea:48:a2:68:e3:c0:5c:8c:35:ec:e8:0d:d5:
5f:0c:ec:e2:34:fd:05:d3:52:20:ee:25:69:50:b7:
8c:96:9b:11:06:35:e4:4b:55:44:18:1f:f1:01:27:
1a:31:c3:d0:d1:1f:cb:f9:90:29:11:67:53:2e:dd:
4f:2a:3c:6c:eb:83:6a:c8:92:29:5e:f6:48:d8:1b:
be:d4:eb:82:59:84:74:8b:16:92:dc:27:14:40:36:
d4:d1:89:5b:1a:e2:32:d3:e1:b5:36:b5:8f:97:56:
d5:b5:a3:57:6c:d6:f0:c8:fd:27:3d:fb:b3:75:2c:
17:5e:d7:55:08:56:50:11:7f:83:e2:a2:d0:36:28:
a0:09:82:0c:65:54:a6:7a:65:bf:23:e1:4b:72:8c:
2a:7a:0a:43:0a:5d:c8:d6:89:5c:db:3b:40:90:db:
35:9b:21:0e:4f:4d:b6:97:e9:d1:e6:89:7e:ea:aa:
f2:ee:24:fe:86:eb:ab:90:ff:a3:13:1e:54:73:4a:
dc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:05:1A:21:C2:DC:E1:88:AC:8D:B7:80:2A:DE:E7:6C:BD:AB:D0:17
X509v3 Authority Key Identifier:
keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:1f:a2:10:77:7b:53:d7:49:3c:76:ca:f9:c3:2e:d7:c3:7f:
6c:59:a5:2d:ad:3d:89:48:b1:e0:b1:41:58:17:59:b1:2d:73:
28:7b:13:33:88:44:98:d2:f8:15:62:8d:01:0f:27:aa:e9:8c:
54:d9:d1:10:4f:68:34:f1:80:0e:93:fb:90:a9:93:5f:ec:69:
88:0a:29:7c:03:36:0e:15:3c:59:91:1e:e2:ac:3b:31:27:22:
b8:36:31:98:35:24:f6:30:b1:9a:5f:49:7d:b5:27:c1:0e:b8:
b8:94:fe:73:b6:22:2e:32:f8:b7:d3:25:3b:aa:c9:18:8f:bf:
b9:5f:5b:9b:ee:f5:ae:c8:95:74:95:6d:17:61:1f:9e:63:70:
8c:74:1f:dc:0d:6b:4f:1a:5a:94:f0:b6:51:09:26:92:82:47:
7e:28:b5:42:a5:11:ab:e5:ba:65:8a:de:ad:c4:0d:ae:4e:72:
20:c2:da:d6:36:30:0c:00:31:77:a1:b9:69:b4:f1:e6:de:b8:
d4:0c:89:23:8d:2b:84:ce:6f:3a:a8:7d:87:74:26:32:44:98:
91:04:e1:a0:ff:9c:67:ac:ac:3b:ac:f9:c1:45:ad:e3:bd:e3:
5c:12:d1:98:c0:00:87:03:a3:bb:1f:0c:57:4f:75:ae:c5:48:
65:c7:c0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:51:36 2025 by rpki-client