Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File: 4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier: k6qnmUXoa5c4HdQrmS1Q3fL7R/9K5f9fBFWyauEVy0c=
Subject key identifier: DF:51:1F:7E:67:AD:B0:EA:4F:07:69:23:D3:45:9B:DB:4D:77:5D:96
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer: /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial: 019A4F627F177BBDFF72A2D342E3B4C76F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number: 169C
Signing time: Tue 04 Nov 2025 15:00:46 +0000
Manifest this update: Tue 04 Nov 2025 15:00:46 +0000
Manifest next update: Wed 05 Nov 2025 15:00:46 +0000
Files and hashes: 1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: xO2OfFfimvdvAbGwRPoAMWGcZZnlKLxrUZUDrtdxKKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:7f:17:7b:bd:ff:72:a2:d3:42:e3:b4:c7:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Validity
Not Before: Nov 4 15:00:46 2025 GMT
Not After : Nov 5 15:00:46 2025 GMT
Subject: CN=df511f7e67adb0ea4f076923d3459bdb4d775d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:0e:39:f6:a4:29:b3:23:24:1d:80:93:27:
e6:78:67:9c:22:08:61:80:5e:ec:f4:2d:c6:fd:7e:
55:e2:8e:c2:6f:f1:33:bb:cf:3e:70:2d:f2:60:ef:
6e:da:db:50:5c:05:52:ca:1b:f2:fe:7a:e7:a0:47:
58:3b:86:86:e6:49:b5:cc:35:27:11:6c:bd:61:24:
27:43:e4:ee:f3:b8:a6:0b:59:20:a4:91:82:9a:93:
48:d1:7e:c1:f4:91:64:66:fe:9a:7d:6d:da:ff:ba:
2e:e4:20:e0:9b:ed:de:85:67:17:1f:24:7c:3d:f9:
24:a1:11:cf:7c:a7:e5:b3:1f:bc:6b:19:cb:86:65:
6b:9d:cf:62:26:04:2a:82:2c:fb:10:8b:cc:a6:61:
6b:c0:ea:7f:51:62:08:58:a1:f3:5c:b7:5f:7c:f8:
fd:56:15:c9:69:e6:78:c9:b9:8a:de:4a:cb:82:e2:
35:ae:1f:e4:45:d2:3b:20:a2:09:eb:33:ba:69:6b:
81:36:8c:7f:bc:73:48:3a:36:c1:ba:2a:80:7c:9a:
9d:13:c3:1e:6d:85:d8:34:51:1b:c8:b0:a5:fa:ca:
0b:ac:f6:72:6c:5a:1c:ec:32:50:79:08:ba:96:1d:
5a:2c:87:2d:de:50:47:d5:82:71:e6:d1:78:b2:a6:
e3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:51:1F:7E:67:AD:B0:EA:4F:07:69:23:D3:45:9B:DB:4D:77:5D:96
X509v3 Authority Key Identifier:
keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:be:2c:79:51:dd:ab:79:32:07:65:fb:a2:b1:73:0d:3c:04:
4b:1a:d9:1b:66:e9:08:43:30:10:9c:6c:fb:13:29:dd:9c:cc:
a5:2c:c7:3e:2c:72:99:53:51:a1:f0:05:76:f9:1b:c5:23:87:
b5:23:1f:74:9e:a0:e2:f4:65:b1:cd:4b:d5:16:d6:b1:a5:ca:
40:c5:5f:cf:b7:55:a3:e3:7b:11:d1:83:6d:2a:a4:ad:1e:25:
2c:83:45:d3:23:c2:66:b2:72:0e:56:b1:13:b4:32:3a:dc:c5:
0f:f8:fd:56:e8:4a:81:75:a3:0c:ab:e0:be:c3:4e:00:a3:76:
64:d5:cb:b4:0e:d9:b0:0b:2c:1c:8a:32:03:48:95:15:53:32:
7c:98:c4:ef:7e:7d:01:6c:e4:da:b2:f8:a3:d6:f3:2c:b2:e3:
63:00:26:5f:b5:c4:32:92:5a:b3:22:cb:2c:2b:ea:31:e1:a6:
ca:ee:64:9f:73:9b:76:88:c2:0a:36:50:fd:e1:d7:07:9d:f8:
a5:cc:78:4d:8a:7a:6f:c6:87:f4:8a:95:e7:45:2b:9d:53:c4:
be:37:94:28:01:60:78:e8:ec:cd:2f:7c:96:c4:4d:fc:da:d7:
4c:53:2f:ea:36:6f:f1:89:34:a6:68:03:56:db:c6:66:32:7a:
4f:fc:09:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:08:27 2025 by rpki-client