Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
File: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft (raw, json)
Hash identifier: M7e1PjuW4EOsHlB34KwXGEKqtVx2rbYumTDrZIN30wQ=
Subject key identifier: C7:0C:F5:88:5E:91:CB:74:71:FD:4B:13:B0:AC:E1:11:53:D0:CA:65
Authority key identifier: E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
Certificate issuer: /CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Certificate serial: 019A503E1439B73FB1F24B101B7760D8C89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
Manifest number: 123F
Signing time: Tue 04 Nov 2025 19:00:36 +0000
Manifest this update: Tue 04 Nov 2025 19:00:36 +0000
Manifest next update: Wed 05 Nov 2025 19:00:36 +0000
Files and hashes: 1: 4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl (hash: ymH3CQEoKfOniVoOYNP86nfNebU0kH3kKVfS/kT+7dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:14:39:b7:3f:b1:f2:4b:10:1b:77:60:d8:c8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2114a30a67e3cfb3cadb6368ed202c48cd29ba7
Validity
Not Before: Nov 4 19:00:36 2025 GMT
Not After : Nov 5 19:00:36 2025 GMT
Subject: CN=c70cf5885e91cb7471fd4b13b0ace11153d0ca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:7f:59:30:13:3e:3c:f5:83:5b:65:5c:d4:c4:
42:e9:21:18:c8:6c:6c:dd:8f:2d:64:f7:7f:eb:2c:
50:bd:a6:5d:11:be:e3:19:83:7e:d7:b3:62:6b:47:
87:73:41:27:94:1c:ec:3c:fe:6f:21:81:9d:e7:6b:
8d:13:d8:aa:e9:0c:a0:77:ad:1f:14:f1:36:23:be:
20:fa:e9:1d:1a:60:8e:69:2c:f3:85:1a:74:8a:56:
d8:20:18:27:5c:cf:5f:a5:d8:c2:47:78:1b:1c:81:
7f:79:38:39:c9:e9:50:ac:e3:ef:83:a2:4d:30:0b:
35:a2:73:d9:06:37:d5:a5:3d:a2:35:e0:26:90:3f:
96:40:b8:8d:43:74:8f:6d:7e:7d:f0:75:4b:0b:dd:
ae:71:44:fa:8e:8a:e2:c3:d3:fa:e4:6e:38:05:f6:
3e:c6:9f:57:17:21:28:e4:5a:6f:98:08:a1:ad:31:
2b:96:79:d3:99:a5:7a:5f:be:8d:88:7d:7d:a4:66:
02:3e:94:d2:f2:00:7b:a9:c6:7e:9b:31:1a:2e:12:
c7:c5:fe:4b:92:5e:cf:ce:14:0b:98:a0:93:44:e2:
f9:c3:a5:fa:2d:44:30:73:da:60:6b:78:b4:3a:46:
44:09:21:08:0c:0c:1a:a9:99:94:ef:e2:4a:47:39:
c8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0C:F5:88:5E:91:CB:74:71:FD:4B:13:B0:AC:E1:11:53:D0:CA:65
X509v3 Authority Key Identifier:
keyid:E2:11:4A:30:A6:7E:3C:FB:3C:AD:B6:36:8E:D2:02:C4:8C:D2:9B:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4hFKMKZ-PPs8rbY2jtICxIzSm6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e43b1-4d08-4846-a393-5236acc0a166/1/4hFKMKZ-PPs8rbY2jtICxIzSm6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:a8:29:8d:9a:5b:82:6a:5c:eb:2b:67:04:f2:69:2f:25:7f:
ce:1e:2a:50:8e:53:65:84:4c:1b:bd:6f:b1:c7:74:77:66:e5:
61:a3:f4:0f:85:ad:7b:1b:e0:d9:05:b4:e5:64:6b:bb:14:ca:
10:bc:aa:14:7a:47:7a:c4:33:04:ba:59:47:8f:b9:91:a0:b7:
99:9d:b6:0e:12:ed:a0:02:9e:ee:42:c7:67:39:dd:cc:8e:bf:
4f:47:78:bf:8f:d1:69:3c:34:e6:79:75:17:d9:f1:c5:24:4c:
37:77:4b:72:f5:b8:a7:6a:49:7c:78:05:5f:4d:4e:79:ad:fa:
82:37:e9:13:c0:e4:8b:08:d3:87:2d:a0:42:b2:c2:63:07:95:
9b:5c:31:5e:14:a9:1a:89:bc:b5:9b:2b:47:4f:31:c5:b8:0a:
4b:bb:7e:7d:b1:57:34:69:0f:3e:89:48:9b:80:9c:67:bd:6a:
00:2f:99:35:fd:a7:50:89:03:3d:9a:ca:1a:a5:95:5e:27:52:
29:fa:ae:92:4f:7c:ba:f4:c6:48:d1:9e:a2:3a:f7:fe:8b:76:
a2:e7:3e:47:b2:d8:13:c9:3c:53:2b:74:e5:eb:21:15:da:81:
8c:cd:30:64:5c:f2:01:62:f8:b8:41:a5:c2:4f:c8:87:77:07:
22:a3:42:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:52:38 2025 by rpki-client