Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
File: 4DkMHDYd8FIkN2EI7_myDcLuAmU.mft (raw, json)
Hash identifier: bgnipA4B2tj+NjwcmPi1h236WRblHzlWAOJKHBIQxVk=
Subject key identifier: 46:8A:93:02:6E:CC:A4:15:A2:34:93:08:AF:D9:3B:9B:DC:26:D1:50
Authority key identifier: E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
Certificate issuer: /CN=e0390c1c361df05224376108eff9b20dc2ee0265
Certificate serial: 019A4D745B1B50A4C960E43D4B2E25339D08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 06:01:02 +0000
Manifest this update: Tue 04 Nov 2025 06:01:02 +0000
Manifest next update: Wed 05 Nov 2025 06:01:02 +0000
Files and hashes: 1: 4DkMHDYd8FIkN2EI7_myDcLuAmU.crl (hash: olckFrNEgZUtKTMbsauFeKv1ehdiwFMxS8IN1Ay3r2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:5b:1b:50:a4:c9:60:e4:3d:4b:2e:25:33:9d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0390c1c361df05224376108eff9b20dc2ee0265
Validity
Not Before: Nov 4 06:01:02 2025 GMT
Not After : Nov 5 06:01:02 2025 GMT
Subject: CN=468a93026ecca415a2349308afd93b9bdc26d150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7d:1f:30:9c:00:d6:43:fe:bc:fb:49:e5:84:
30:ec:b9:fa:09:fa:ff:35:bf:04:79:6f:9a:c0:1e:
33:6f:c6:24:21:2c:ee:46:04:ab:33:11:61:95:12:
98:d3:d0:7b:77:7b:f8:15:c0:b8:04:40:8f:a1:4d:
de:0a:2e:b9:0f:f8:ce:9a:c1:33:3e:aa:77:eb:b0:
ff:e0:0f:ca:90:d9:0f:be:09:06:1c:00:e9:15:62:
e7:d2:9e:7a:d6:1f:05:ea:d1:66:f2:67:d6:ec:f2:
07:a2:0b:e7:14:72:b5:87:06:56:60:a9:11:ca:3a:
dd:82:f9:e6:96:f1:40:43:67:7f:a2:b2:bf:d7:fe:
2e:74:8a:43:09:2a:26:f7:40:4b:33:26:4f:b7:94:
8a:6d:90:28:dd:bc:fb:61:e2:ca:5a:72:88:f0:3f:
19:28:97:a1:3f:f7:c1:91:b4:84:62:79:19:07:b1:
0d:31:42:3a:f6:be:cf:d2:72:8e:cb:1f:d2:ed:00:
4a:0a:49:cd:58:ba:27:3f:c4:55:f3:e0:da:fa:f6:
75:44:1c:9d:5d:0d:c2:be:7b:fc:1f:c2:2e:fe:2c:
15:3f:1d:bd:da:1f:2e:f1:c4:f2:24:48:a2:c7:54:
0c:2d:6a:6b:e5:0d:5d:b2:b1:5f:ad:6b:37:cc:aa:
bd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:93:02:6E:CC:A4:15:A2:34:93:08:AF:D9:3B:9B:DC:26:D1:50
X509v3 Authority Key Identifier:
keyid:E0:39:0C:1C:36:1D:F0:52:24:37:61:08:EF:F9:B2:0D:C2:EE:02:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4DkMHDYd8FIkN2EI7_myDcLuAmU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c0f04-8caf-49d4-aab7-59e611d76574/1/4DkMHDYd8FIkN2EI7_myDcLuAmU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:3c:7a:29:dc:30:e3:82:54:86:78:9f:a0:12:0e:74:d2:a1:
f0:d8:df:d1:81:d7:f7:aa:a0:ce:67:45:11:b2:3a:5c:81:85:
84:0d:57:2f:e1:ae:45:3f:9e:4e:24:13:1f:b4:3b:75:52:da:
b4:5e:83:a1:d2:2e:82:d3:aa:a2:b8:93:1c:06:66:e4:a0:28:
45:f2:c6:d2:15:1d:a8:39:73:69:e6:81:1b:67:74:ad:be:98:
9f:a9:c4:f1:d4:43:10:c2:fb:0e:50:22:93:1f:65:dd:a4:d7:
09:86:f5:94:56:c4:bc:f4:d7:8b:f2:8b:73:0b:03:60:3b:b4:
c7:5f:6e:cd:9d:bb:2e:22:97:be:2a:86:4b:32:23:f1:69:36:
6e:b4:2e:c1:da:45:36:aa:f7:5c:73:ee:6f:25:5d:99:a4:1f:
cd:dc:9f:13:4e:fd:80:8a:2e:68:c3:2d:a3:ce:9c:31:a9:68:
97:56:5e:bf:55:2b:ff:f6:03:e3:3f:7a:ac:82:77:1d:67:be:
1b:b6:c9:6e:9e:c0:4c:ec:24:65:c7:f5:95:7d:1e:03:37:8d:
3a:ba:63:1b:48:32:d3:67:37:0e:3a:39:05:2f:be:9b:34:2f:
34:e9:7c:29:24:b2:95:04:cb:e7:85:e1:24:67:46:29:1f:17:
9a:6e:3b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:33 2025 by rpki-client