Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File: 4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier: GfjBQTWCQDcCjubwGKV0T8Ui6+vD6D/9jC7FzMWZH2M=
Subject key identifier: 99:37:4E:2E:E0:76:92:4D:69:CC:24:A5:04:2F:9C:8D:B6:30:75:23
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer: /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial: 019A4E86415A74BC01319810115A02AA8F80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number: 0402
Signing time: Tue 04 Nov 2025 11:00:12 +0000
Manifest this update: Tue 04 Nov 2025 11:00:12 +0000
Manifest next update: Wed 05 Nov 2025 11:00:12 +0000
Files and hashes: 1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: oYj4Q+uwzUpRd7obZpVlBUrE8LhvCwEgYIVX//49ahs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 11:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:41:5a:74:bc:01:31:98:10:11:5a:02:aa:8f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Validity
Not Before: Nov 4 11:00:12 2025 GMT
Not After : Nov 5 11:00:12 2025 GMT
Subject: CN=99374e2ee076924d69cc24a5042f9c8db6307523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:aa:1b:d9:87:70:82:d2:db:93:0b:3c:21:bf:
ca:18:a9:9f:78:53:9b:85:c3:4d:dd:d8:cc:74:95:
7d:17:b7:09:6f:e2:85:24:2f:2d:3f:b9:e1:91:11:
4d:e0:b1:11:71:46:19:49:d5:7b:a4:81:83:e0:4e:
e4:88:80:5f:db:3e:80:4a:d3:cd:c9:65:7a:fd:f7:
06:c1:a0:6c:0f:f3:bc:2a:2c:a7:37:30:ec:27:4c:
a9:19:dc:dd:72:43:0a:e7:1d:f5:97:22:9a:d9:c5:
eb:a5:0a:f1:81:50:a3:da:9f:6b:69:93:c0:bf:9c:
ed:b3:d5:9a:ea:ef:ac:9b:e7:16:5f:ca:e8:b1:9a:
37:78:76:01:6f:ac:ef:b1:ae:55:14:dd:f1:e6:4e:
46:cd:c3:7c:3b:3e:83:ce:33:98:31:cb:7c:22:55:
54:b8:94:fb:18:c5:c0:bf:9e:da:70:c3:28:0a:4f:
cd:f1:45:85:4b:9f:45:0a:fd:68:eb:ac:0f:01:91:
27:0a:89:f2:db:f6:20:3a:b2:7f:23:6f:da:59:0e:
c1:0e:20:e5:fc:c1:f4:51:87:49:4f:d4:55:d4:03:
fe:ce:37:d6:ab:2f:22:c6:a4:7c:59:cb:94:c3:c8:
0c:2c:d5:8e:7e:c9:a9:00:90:36:1f:5d:ba:ae:27:
18:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:37:4E:2E:E0:76:92:4D:69:CC:24:A5:04:2F:9C:8D:B6:30:75:23
X509v3 Authority Key Identifier:
keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:6d:76:aa:ab:60:0d:6d:2c:53:3c:71:c5:62:9d:1b:55:b3:
ed:12:1a:e6:9b:dc:4d:c2:44:de:82:39:4c:ba:1a:91:49:b4:
6a:c6:7f:62:f4:28:23:b6:65:b0:f4:10:35:10:62:f1:16:94:
73:c3:8e:37:24:64:8c:b8:81:69:81:4f:03:bf:12:a8:31:12:
8f:a6:d0:17:28:22:78:30:80:3b:fe:2c:19:15:68:00:ec:9f:
1b:32:4a:94:71:c2:46:ff:00:d4:c0:62:0b:fc:91:9e:31:78:
e4:93:ef:3e:34:e1:94:6b:c3:2f:61:da:8a:77:30:bf:72:49:
c8:79:6c:2f:5d:a5:57:9c:65:05:c4:d3:00:83:3f:c9:69:6e:
b6:ae:53:5b:a1:94:31:84:eb:bd:1a:eb:8b:f0:0a:3d:f0:ee:
a5:84:7a:9b:c2:06:de:97:c5:26:5b:91:91:ee:6b:5b:bf:95:
73:77:3c:0c:d2:9c:df:62:c2:78:2d:4c:50:60:72:36:73:19:
00:60:42:ad:57:80:35:1e:84:4d:fe:ee:01:0b:39:11:fc:32:
0b:10:2f:96:8c:1d:51:ed:ce:c6:6b:28:e4:56:20:b1:1e:df:
97:54:05:15:de:8b:02:7e:40:1f:77:c6:cf:88:4c:62:e9:ca:
2e:43:14:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:44:59 2025 by rpki-client