Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier: 19iCFuS6FHne3Uxp9lCALUD4L25RYNJRb8wgS8DnFS0=
Subject key identifier: B1:AF:97:58:7F:59:53:0A:34:34:F0:F2:6A:D1:F1:CC:54:A8:10:6B
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 019A4E1921368330FEE9C5495CFD7D34D6F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number: 088F
Signing time: Tue 04 Nov 2025 09:01:00 +0000
Manifest this update: Tue 04 Nov 2025 09:01:00 +0000
Manifest next update: Wed 05 Nov 2025 09:01:00 +0000
Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: 0EiTaIYSrV9w/QX1rbLT18dyzxTmDvzaQvb0RE2hOCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:19:21:36:83:30:fe:e9:c5:49:5c:fd:7d:34:d6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Nov 4 09:01:00 2025 GMT
Not After : Nov 5 09:01:00 2025 GMT
Subject: CN=b1af97587f59530a3434f0f26ad1f1cc54a8106b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ea:52:6f:78:55:fc:09:1f:a6:ba:fc:1d:5f:
53:d7:5f:95:59:b1:a1:37:c6:75:df:e8:93:45:c1:
77:b3:58:f1:5b:33:0a:21:3b:79:56:53:55:4c:8b:
a9:b3:52:76:ce:41:70:8d:89:a3:85:6e:eb:c0:2e:
33:61:cd:9a:ec:ae:64:50:f0:74:58:64:36:fe:d0:
a6:cc:7a:99:3d:c3:31:ef:80:df:f9:47:ac:19:f0:
de:54:26:58:28:4b:bf:fd:82:7c:d9:0f:f9:89:d9:
dd:df:29:b0:26:ff:88:26:53:e0:44:88:3d:0e:21:
c1:74:3f:7b:51:c2:8b:e4:9f:9f:1a:e0:7a:9d:37:
f5:ff:5d:3b:0c:6c:be:bb:63:53:b3:24:e9:95:23:
15:79:7d:29:55:fc:56:d4:5c:09:6a:9c:fe:3c:ea:
7c:b9:0f:5f:bb:af:3e:ca:a0:37:9d:97:8b:1c:31:
93:87:9a:45:b9:aa:32:19:7e:63:83:0b:2a:37:1b:
17:ad:89:25:fc:ce:10:d9:3b:51:9f:de:d6:3b:83:
5b:86:b0:22:83:ae:6d:61:00:18:f7:07:6d:8d:35:
df:8e:6d:77:8e:91:54:db:5a:b7:46:e9:2e:ec:d1:
f9:02:f0:3c:73:c5:24:b8:c8:c7:de:54:ec:9b:7a:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AF:97:58:7F:59:53:0A:34:34:F0:F2:6A:D1:F1:CC:54:A8:10:6B
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:83:40:dd:4c:67:38:93:ba:c5:27:f7:5c:d4:ff:92:ea:b0:
a5:1b:58:67:ed:71:9b:2b:07:ff:65:22:dd:a1:4e:9f:bf:34:
eb:92:fc:c6:d5:24:a0:34:37:e4:66:7d:45:f2:40:4a:7a:81:
7d:a0:54:a7:73:a2:a5:af:b0:54:ad:04:c5:bb:7e:7b:65:e2:
f4:45:53:79:75:68:ef:c1:3e:59:f8:0f:7f:c2:a6:bc:ec:97:
8f:6a:34:23:4a:55:18:16:c9:98:24:9b:fe:dc:7d:ca:ee:7a:
24:a4:5a:05:e9:cc:f4:6e:3a:0c:64:81:78:e9:87:f2:73:80:
79:f8:3e:a3:1f:a4:f7:c2:16:8e:36:2c:b9:b6:dd:fb:ee:68:
95:b2:82:21:a4:51:29:85:87:c8:61:a0:a5:01:52:9b:22:1b:
99:bd:f8:ab:ae:2b:35:e5:bd:2d:d6:fb:50:a6:97:6a:7e:09:
54:a7:ff:ed:f1:23:4d:14:04:9e:3c:64:39:a6:08:e9:2b:97:
3c:94:1f:01:5d:5e:55:4a:d5:16:8e:df:c2:e0:d9:a8:ee:dd:
8d:8d:53:b4:c4:c1:c7:df:03:2a:82:ed:a2:5c:90:11:3e:7a:
cd:c9:e0:b4:61:25:3a:cd:b9:9d:72:00:99:eb:4f:0c:a5:df:
d4:30:41:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:21:22 2025 by rpki-client