Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: QZmG8YcpGCFjrAvzM0GQjvV1rDpTjqnfBSYUiZD2/M4=
Subject key identifier: 65:E0:3E:3C:6B:87:58:60:83:E7:6B:C2:A6:29:E7:6A:05:60:39:E3
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 019A4C610F15904EAB60750B24D065DBBD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 0A26
Signing time: Tue 04 Nov 2025 01:00:20 +0000
Manifest this update: Tue 04 Nov 2025 01:00:20 +0000
Manifest next update: Wed 05 Nov 2025 01:00:20 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: YBIeHNj3vRWBclr3BlYrEQ7PZ6mrwRstfD7vJ03pExg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4c:61:0f:15:90:4e:ab:60:75:0b:24:d0:65:db:bd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Nov 4 01:00:20 2025 GMT
Not After : Nov 5 01:00:20 2025 GMT
Subject: CN=65e03e3c6b87586083e76bc2a629e76a056039e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:52:26:89:41:49:0a:3a:a2:1e:53:9b:c6:77:
2d:bf:12:da:db:ca:a4:9b:b4:53:d5:72:fd:cb:d9:
4a:b7:d3:1e:8f:e6:d5:1a:59:e7:e1:f4:4f:67:41:
b6:09:da:73:68:a4:54:3d:ef:33:98:78:61:08:1d:
07:ec:95:19:9e:48:a0:18:8c:01:4f:18:72:7d:08:
dd:93:b8:25:f9:eb:4b:cf:a4:15:42:ec:11:4d:ee:
4a:51:7f:3e:e7:0b:8e:b3:cc:95:0e:95:2b:64:e3:
a2:ca:75:7b:5d:26:f4:bf:9b:5e:5e:de:c7:d0:33:
e9:a2:a6:be:c0:1d:f6:ac:a9:c5:dc:e9:29:18:f4:
93:e1:d8:bd:44:d6:17:c7:44:31:f7:8f:63:df:0c:
03:66:81:03:10:a2:6f:28:a3:43:1c:c7:1c:a4:11:
f3:6a:2c:93:78:99:08:a8:20:b9:f9:14:b5:05:28:
06:72:5c:ba:4f:5d:8a:a0:c7:39:39:1f:77:3e:c6:
b6:ed:88:4f:00:07:e6:48:05:56:a9:b4:b0:2a:22:
76:e1:5b:b5:30:17:e7:4a:ea:2f:74:8c:c2:33:4c:
a7:8b:49:24:48:53:6e:3d:28:15:19:18:b4:d6:c0:
07:0e:a0:a7:63:5a:ac:9f:91:02:55:8c:66:d4:5a:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E0:3E:3C:6B:87:58:60:83:E7:6B:C2:A6:29:E7:6A:05:60:39:E3
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:5c:26:36:c4:ca:bd:f9:39:02:64:ed:10:7e:97:7a:b1:99:
c5:89:2f:86:04:cd:d2:fe:61:ef:30:2a:6c:fd:e3:e0:df:1a:
79:b0:a3:15:d7:b9:35:9d:43:32:d3:99:48:7d:19:50:94:d9:
00:ff:f3:7b:b6:cd:08:73:60:26:d4:26:58:e4:44:a2:0d:ac:
29:8a:1d:72:a9:a2:db:41:16:14:72:f4:57:fc:55:58:a3:7e:
d6:7e:ab:9e:13:57:ad:72:1a:70:03:e4:bb:af:cf:3c:96:52:
09:cb:66:27:1e:52:37:f5:18:03:3c:c9:ad:17:4b:95:1a:b1:
6c:8f:02:b4:08:a1:ee:76:69:48:1a:e8:fe:cb:2c:eb:51:e6:
18:10:f2:a8:83:61:ef:93:61:87:11:81:3e:01:4f:a3:b2:e9:
54:7f:cb:5c:fe:64:85:91:8c:72:71:2e:92:f1:15:af:f2:6a:
94:47:f4:b3:57:52:d0:d8:66:51:a5:1d:fc:a7:b9:c6:d3:5e:
cf:9a:0e:59:f7:60:cb:88:4f:0f:ce:df:30:42:f8:80:7b:7b:
5a:72:62:31:c7:87:00:53:40:ce:23:c4:c4:4a:16:8b:d5:0f:
37:5e:41:5a:a4:8f:fb:20:b9:d6:4e:39:ad:6b:c2:75:c9:49:
c0:12:46:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:16 2025 by rpki-client