Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: iINlCsgLmoFyYW19TzyG8oOr72uuLMdJds76vlg3Qnw=
Subject key identifier: DA:6F:3F:EA:AA:A1:E8:66:8D:89:95:97:61:C3:2A:00:56:27:42:75
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 019A4D07441A1904AD144C1A16EB56E9D3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1708
Signing time: Tue 04 Nov 2025 04:01:53 +0000
Manifest this update: Tue 04 Nov 2025 04:01:53 +0000
Manifest next update: Wed 05 Nov 2025 04:01:53 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: swt6GTHxNwd8Pif8RiaioJTJzcuCUd+kqS5KL4iNCrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 04:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:07:44:1a:19:04:ad:14:4c:1a:16:eb:56:e9:d3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Nov 4 04:01:53 2025 GMT
Not After : Nov 5 04:01:53 2025 GMT
Subject: CN=da6f3feaaaa1e8668d89959761c32a0056274275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:71:06:db:b6:19:0d:9a:5b:39:8c:e3:5c:f5:
ae:2f:96:52:e6:b2:47:d8:75:4a:0b:4d:ea:e2:40:
1f:cc:8f:ef:60:98:73:32:08:e8:85:23:58:15:a9:
39:96:9a:ec:59:43:3b:c5:f2:36:8c:2a:9a:f0:30:
b7:93:5d:32:da:9a:a6:5c:19:b3:23:4c:70:5b:3c:
57:59:cf:ad:da:f0:ab:5f:da:59:00:b1:3b:e7:9f:
7d:f4:73:2c:77:a6:10:05:8e:40:b3:b3:ec:a7:91:
40:a3:e6:ac:bf:99:6e:58:aa:c5:c7:ff:d6:dc:12:
13:1e:32:f9:fe:d4:ae:fe:10:74:47:be:be:ae:13:
7b:58:f7:f0:78:23:cf:1f:be:91:57:96:79:59:a6:
90:24:b7:ba:16:89:e8:bc:1a:08:8e:a1:72:9c:4c:
4a:b5:5f:f2:3f:9f:a2:e6:96:b0:26:6d:72:86:07:
3c:a1:53:2a:84:f9:ce:1c:d5:9c:ce:b7:7f:84:55:
15:56:eb:70:db:0c:db:dc:c5:50:d9:91:55:8b:32:
a5:a1:9f:83:06:14:b8:dd:ad:d3:62:40:2c:fb:03:
63:91:74:b7:02:eb:8e:c4:48:39:af:b3:62:f7:72:
04:f3:35:7a:27:58:15:1b:46:95:dd:77:17:62:8a:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:3F:EA:AA:A1:E8:66:8D:89:95:97:61:C3:2A:00:56:27:42:75
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:db:7f:6f:e4:f7:71:f5:6d:7d:bb:bf:4c:2e:16:2c:88:77:
e7:7a:7c:d9:7a:e5:c1:78:16:57:b3:b5:00:a0:d4:10:e3:2a:
83:4c:5f:10:bd:6f:92:7d:70:2c:99:9d:3d:4d:51:96:81:05:
38:ea:84:75:34:4b:09:de:8e:b9:27:47:cb:1d:09:2e:59:da:
5a:5c:38:77:ca:62:cc:18:a8:c8:5d:c2:19:a1:4e:db:55:5a:
45:57:ac:42:28:03:63:d2:ee:45:f5:ff:18:53:34:b9:87:d6:
42:97:d4:60:d1:8d:27:00:fa:8c:3e:27:9d:fb:c1:cf:e6:72:
17:73:e5:da:01:04:13:b5:f2:d9:c4:f8:8d:cc:50:01:9d:3c:
fb:e3:c4:b9:8a:e7:f8:ba:e5:60:86:0e:fd:03:b9:92:b0:7c:
59:e0:af:ba:ba:bf:6b:1d:9c:a0:ec:ef:bb:2e:8e:23:66:9a:
12:d7:4e:c9:5a:05:a5:b1:de:4c:ed:95:d6:17:4d:05:a8:6a:
e3:30:5e:db:d1:12:88:e6:4c:a5:57:74:f5:02:b4:f3:c3:6e:
86:cc:2d:f1:98:9b:c3:d5:07:d8:a4:45:73:5d:d4:86:d5:ba:
4e:24:bb:58:2c:2a:21:fc:9a:f3:ef:ff:71:16:e3:be:1d:3b:
14:3b:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:53 2025 by rpki-client