Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
File: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft (raw, json)
Hash identifier: ua3fi4OGue6zYzyJpqPtc//XsJi5KetJ2HJt6eKWwKg=
Subject key identifier: EF:45:5B:F2:3F:E2:61:53:C1:B9:B5:3F:6A:52:B9:36:0D:38:BD:A4
Authority key identifier: E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
Certificate issuer: /CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Certificate serial: 019A4D74296978C7EDBAD4F455C1785D8D9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
Manifest number: 0E8D
Signing time: Tue 04 Nov 2025 06:00:49 +0000
Manifest this update: Tue 04 Nov 2025 06:00:49 +0000
Manifest next update: Wed 05 Nov 2025 06:00:49 +0000
Files and hashes: 1: 4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl (hash: kZlMi/tjdviia+GVB8Qm8JkzOsToaUvo9sPNBCQ2Rbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:29:69:78:c7:ed:ba:d4:f4:55:c1:78:5d:8d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1202e2e4b65db3b1fe581cdb199010b2e90cf78
Validity
Not Before: Nov 4 06:00:49 2025 GMT
Not After : Nov 5 06:00:49 2025 GMT
Subject: CN=ef455bf23fe26153c1b9b53f6a52b9360d38bda4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:83:14:f8:00:3c:00:b0:8a:17:40:7a:31:
de:a1:a8:89:4c:f3:89:5e:07:12:75:69:ca:36:5f:
4b:a8:77:be:9d:45:17:6a:37:59:d8:25:41:bb:47:
25:ff:8e:39:9d:43:4d:b3:65:b0:be:b9:b8:44:7a:
a6:a0:56:08:ae:74:8b:da:8b:97:ad:b1:cc:b8:5f:
57:47:b2:26:18:b5:20:17:cc:6f:51:e9:5f:71:11:
1b:62:10:ae:cf:a7:ff:20:f2:7b:1d:86:73:a6:e2:
68:62:d6:4b:6a:2a:00:1b:ab:cf:aa:9b:22:7f:95:
ef:64:ed:65:43:b3:59:7c:0a:9d:8c:e6:bb:58:f5:
02:2e:d6:12:2e:bf:61:0c:eb:fd:a3:d5:75:1f:e4:
db:08:de:97:c8:10:47:c9:8a:72:6f:81:49:ac:db:
d7:10:25:e9:2a:e6:b9:6d:cc:72:d2:d6:9c:29:65:
87:02:66:cf:69:e4:d7:64:02:b4:82:15:65:5c:97:
da:59:5b:52:9c:ff:f7:12:08:07:b2:25:0e:6f:26:
5d:55:cb:e5:13:63:42:21:67:c1:a5:27:94:50:c2:
2a:1a:bc:ac:e1:11:4a:fa:15:2b:fc:a8:ea:f1:da:
d4:d1:2f:ad:d9:8b:95:85:27:86:db:12:ec:21:48:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:45:5B:F2:3F:E2:61:53:C1:B9:B5:3F:6A:52:B9:36:0D:38:BD:A4
X509v3 Authority Key Identifier:
keyid:E1:20:2E:2E:4B:65:DB:3B:1F:E5:81:CD:B1:99:01:0B:2E:90:CF:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SAuLktl2zsf5YHNsZkBCy6Qz3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a773d7-554f-469f-b4f8-7dc6925cd42f/1/4SAuLktl2zsf5YHNsZkBCy6Qz3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:03:6a:fa:97:f5:b8:a5:be:78:11:59:96:49:2f:9d:10:fa:
ed:9e:99:69:aa:24:8c:20:ea:98:00:96:46:cd:51:d6:43:96:
55:71:a6:0d:af:ae:d9:65:0b:7f:11:a6:68:07:6e:08:1e:bd:
f4:9c:05:3a:0f:cd:1a:28:6c:a0:94:c8:10:53:3e:e1:81:8d:
86:ee:6c:da:22:53:39:a2:52:b2:1e:67:92:9a:ce:82:cb:86:
a5:99:31:9b:b1:a3:41:87:7f:6c:4d:8d:3b:79:4d:4d:00:e6:
91:f6:99:ff:b2:a6:dc:7f:e2:6d:89:0a:be:c0:08:23:29:2c:
61:27:35:18:dd:38:c8:68:0d:55:5b:52:74:eb:ae:53:5d:d4:
5d:b1:d7:12:84:3a:02:29:46:fb:76:bb:77:95:36:2b:bb:17:
87:b2:ab:3a:c7:94:ce:06:48:88:cc:2d:98:62:fe:33:bc:f6:
a5:66:54:2b:ce:7a:3c:bc:ee:16:c8:23:fe:c4:a8:74:53:4e:
ae:45:03:66:71:3d:75:ba:10:18:cf:49:bd:27:b9:16:e2:ed:
3e:67:30:11:90:da:75:73:a4:45:fb:8d:f5:09:f3:22:c9:c8:
ab:c9:97:1c:3f:bd:d4:5e:cb:01:91:9b:2b:69:94:52:53:7d:
2e:8b:9c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:09:18 2025 by rpki-client