Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: 0ozdQvAShFGKpetsnitYBcAERyku5D2jQw2fQVmuSNc=
Subject key identifier: 35:0C:E7:BA:6E:61:8A:C9:1E:05:E2:28:25:DF:F1:52:24:C5:88:60
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 019A5006E3AABBC35635593FEB15CD6E3C47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: 038C
Signing time: Tue 04 Nov 2025 18:00:20 +0000
Manifest this update: Tue 04 Nov 2025 18:00:20 +0000
Manifest next update: Wed 05 Nov 2025 18:00:20 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: KXjs8xfU/1vPI+rY4QShloYA9PoQxab3WW9TwMW2FQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:06:e3:aa:bb:c3:56:35:59:3f:eb:15:cd:6e:3c:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: Nov 4 18:00:20 2025 GMT
Not After : Nov 5 18:00:20 2025 GMT
Subject: CN=350ce7ba6e618ac91e05e22825dff15224c58860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c7:bd:8f:93:0a:cb:63:e8:64:3f:4a:10:6c:
81:53:b7:c3:d0:0c:ea:1b:99:1a:f7:41:8f:52:29:
60:27:32:dc:f6:64:27:9e:c8:2f:72:c6:f1:0d:96:
07:5a:fb:f0:b6:16:b6:a3:cb:33:c8:4f:51:64:2a:
7c:f8:87:88:ac:6a:4b:fc:3c:31:8e:58:39:30:58:
14:5d:fe:06:6f:b7:a5:e9:f6:16:21:85:ef:7e:88:
9c:62:9c:2a:ac:6b:ef:6c:fd:88:d5:a8:98:44:67:
58:70:88:90:0a:ab:d5:55:34:70:f1:29:21:30:c1:
8f:08:84:c1:e9:c8:7f:47:c8:91:a1:f6:2f:8a:f8:
03:db:6f:1a:f3:a2:90:d6:58:17:ec:94:c8:d1:54:
10:7a:59:56:48:48:d6:ab:f5:9c:5b:cf:57:95:82:
b7:24:f6:ed:42:3a:05:d9:bf:01:df:7e:23:9a:13:
9e:b5:8f:9d:0b:c9:11:5c:ee:34:18:c8:11:a1:90:
f4:24:1c:70:ca:68:8e:38:a7:61:d9:1e:54:12:46:
96:30:11:9f:b8:fc:1d:1f:cd:62:90:4d:08:4c:27:
18:a9:78:a7:75:89:3d:11:e8:aa:51:79:d5:09:c0:
30:3e:d3:81:d2:b7:2a:bc:bc:af:b2:19:2a:34:f2:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:0C:E7:BA:6E:61:8A:C9:1E:05:E2:28:25:DF:F1:52:24:C5:88:60
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:61:3a:3c:be:8f:cc:a0:18:c8:06:48:8b:7f:c9:05:44:60:
eb:3d:39:34:c0:bd:73:14:4c:b5:3a:83:53:84:66:bc:70:d1:
5a:f6:24:20:67:0b:dc:f0:0a:3c:8e:16:b6:ac:b7:17:67:21:
6f:5a:36:6e:03:9f:63:c3:cc:b9:2d:cb:f6:ce:13:06:0f:f2:
97:62:a1:b2:6e:95:ad:ea:d2:a0:e8:9f:63:46:6b:a0:ec:da:
53:a7:d5:28:1f:51:32:c8:c7:fc:69:d3:26:0d:89:88:11:0f:
7f:c2:01:09:b7:79:dc:53:49:c3:31:89:06:04:c8:02:67:9c:
fc:54:20:a2:fe:ac:d0:37:6a:12:de:76:1b:31:af:ea:f5:39:
c0:24:b6:c1:49:d7:e6:5a:20:7c:85:06:a4:40:c6:e2:3c:22:
79:1f:0d:fa:6f:8e:d3:f1:91:44:92:34:07:71:05:4e:5a:fd:
5c:b8:fe:67:df:0a:bf:f9:1a:a8:cd:a3:60:21:fb:71:e1:ca:
c6:e3:af:4d:cf:67:a9:7a:8e:dd:ca:e7:64:f3:0d:f2:91:f7:
03:8d:1a:c2:1e:dc:49:eb:50:00:1a:13:24:33:6d:b1:16:4f:
fa:15:ea:12:3a:f7:69:49:ca:6c:f6:13:7f:22:7b:2c:b2:74:
e7:2f:65:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:45:16 2025 by rpki-client