Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: 5TiAE52brLJPhfuP+1rTkoXtCxLnAJp5uHyaEzclCo8=
Subject key identifier: 42:FE:9C:9F:0A:77:DA:01:94:E2:7F:F1:59:E2:64:FB:D7:3B:6D:EF
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 0199FB46235EF4BBAFDDEF7450333EDBCF59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 0773
Signing time: Sun 19 Oct 2025 07:01:41 +0000
Manifest this update: Sun 19 Oct 2025 07:01:41 +0000
Manifest next update: Mon 20 Oct 2025 07:01:41 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: OSLX/A0gxuCVANYjXYp4CvjkojgZ0X57ccfFKwPx5yQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:23:5e:f4:bb:af:dd:ef:74:50:33:3e:db:cf:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Oct 19 07:01:41 2025 GMT
Not After : Oct 20 07:01:41 2025 GMT
Subject: CN=42fe9c9f0a77da0194e27ff159e264fbd73b6def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fc:9e:51:eb:86:af:b0:94:69:8e:b6:64:ca:
93:15:7f:a6:bc:7f:ff:6e:4e:f6:b7:e5:ac:b9:12:
05:82:17:e7:9d:86:48:90:fc:38:29:6f:7a:ec:dd:
42:af:53:a8:2c:36:53:13:92:05:db:f1:33:5d:f5:
66:1a:40:f7:d3:61:02:20:2c:7a:10:3c:5e:e8:63:
94:ce:cc:d1:91:ac:2d:66:47:36:7e:54:2d:f5:a5:
cb:8a:74:cb:23:95:70:e7:9c:c4:8d:23:e7:95:d2:
cc:9a:1f:2a:93:fb:39:ba:e5:31:df:c2:c6:46:bd:
1a:af:31:4e:9e:22:e6:6f:bb:4a:c6:ef:a5:8b:e7:
c7:c4:7d:25:5c:2e:0d:f8:cf:f2:1b:da:e3:c0:bb:
c6:a9:21:55:83:67:34:d2:38:94:1c:b5:17:aa:ba:
3d:7d:78:5b:86:d3:f5:49:17:06:d4:42:64:0e:71:
3d:00:f8:94:bb:27:07:f6:53:f0:ef:24:f0:df:51:
3a:06:3e:bc:f5:f4:0e:6f:47:c1:b7:54:8a:9a:79:
33:2d:00:c7:0f:10:c2:28:74:15:e7:3a:7e:37:47:
c6:1f:e6:83:fc:8b:04:70:b3:71:8b:4c:76:e3:d5:
e9:1c:c0:37:7d:16:dd:da:17:03:7e:2f:27:b9:2a:
1b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:FE:9C:9F:0A:77:DA:01:94:E2:7F:F1:59:E2:64:FB:D7:3B:6D:EF
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:80:74:50:8e:4d:55:ca:4d:b2:4d:ef:36:b5:d6:41:ed:b1:
2f:77:41:91:93:5c:e4:d4:f9:64:4b:a6:0c:ec:ff:a3:0f:8b:
a5:87:8e:ec:87:8c:2b:40:4c:9b:35:df:69:94:bf:ac:00:8f:
c8:58:fb:d8:80:96:ba:f5:0d:dc:d1:f7:c8:31:79:0a:34:6b:
78:33:65:94:dc:69:d4:f0:4b:c7:3d:af:1b:82:5c:75:88:a4:
06:5b:33:97:a8:ad:ee:42:21:53:6c:66:a0:a9:32:c2:f7:51:
71:bf:c9:c3:f5:4b:f2:3f:ee:20:62:9f:8f:49:a0:e2:11:8c:
ae:c1:7c:6d:37:49:53:0e:2a:35:78:94:08:8e:8f:ec:16:c4:
4b:26:f5:d3:9a:cc:4a:49:d8:f5:de:b3:1b:a3:68:2a:ed:c7:
33:61:2a:8c:a3:b0:3c:5e:84:9c:b3:57:a4:6c:92:0e:90:36:
73:7e:fc:0f:fb:d0:51:12:e6:a8:7a:b0:c8:10:20:c5:58:5a:
7a:ed:b7:2c:0c:9d:33:b1:59:24:32:71:0e:f9:57:e4:db:0f:
c1:0c:53:3b:dc:f7:93:ab:4d:bb:4f:2b:c5:5c:72:fc:8d:a8:
42:6c:88:b3:23:95:cc:05:94:ac:bd:3a:61:bc:ae:ee:10:12:
6c:e4:8c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:01:17 2025 by rpki-client