Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
File: 4dl0w71P6k6f61Ep2-0gPAdcjWg.mft (raw, json)
Hash identifier: XIX2qWOdtm8dPhso90akS3xQSm53Abzcro6+ziSj0Mg=
Subject key identifier: DD:66:0D:59:69:36:DD:E5:51:5C:41:D5:84:65:0F:96:26:77:2B:3D
Authority key identifier: E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
Certificate issuer: /CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Certificate serial: 0199FE46925692C52B78827B22E8D76BA7F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
Manifest number: 09AF
Signing time: Sun 19 Oct 2025 21:01:01 +0000
Manifest this update: Sun 19 Oct 2025 21:01:01 +0000
Manifest next update: Mon 20 Oct 2025 21:01:01 +0000
Files and hashes: 1: 4dl0w71P6k6f61Ep2-0gPAdcjWg.crl (hash: yxP7L3mU/XUPDW091p8vRYUKEC2UobX2t0CrSYOWCIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:92:56:92:c5:2b:78:82:7b:22:e8:d7:6b:a7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d974c3bd4fea4e9feb5129dbed203c075c8d68
Validity
Not Before: Oct 19 21:01:01 2025 GMT
Not After : Oct 20 21:01:01 2025 GMT
Subject: CN=dd660d596936dde5515c41d584650f9626772b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:bf:cf:f6:f2:41:ae:59:9f:d5:fa:e1:f9:
59:24:30:04:57:c4:38:9b:8d:f5:1d:b6:75:cd:8f:
dd:89:b3:6f:ab:90:02:73:be:1d:dc:31:fc:3c:fc:
26:e9:9a:aa:c4:4a:1c:2a:7a:89:b8:fc:2b:ae:ac:
34:bd:76:80:e3:2c:76:f8:45:db:98:d8:d0:d3:2e:
9e:d0:59:95:06:4b:24:25:1a:71:2a:79:a4:94:41:
79:8d:9f:6b:46:63:1c:1e:ee:bf:8e:39:fa:00:db:
59:e7:5d:d8:a2:cc:d6:e5:82:89:2d:76:ff:58:4e:
7e:90:ca:51:54:3c:80:85:6e:f2:da:a6:71:7a:92:
04:9e:da:01:8a:fb:93:88:a9:00:67:c6:30:d0:97:
e5:aa:fe:9d:13:51:60:4c:9c:25:22:73:6f:54:cc:
ee:4b:8b:e0:33:4b:e3:83:ca:da:49:f6:2a:b5:7c:
64:69:f8:ab:65:de:31:97:89:78:6e:99:47:1d:cc:
2b:40:b7:14:d8:90:0e:b6:7c:b1:03:e6:69:d7:4c:
a1:0b:d3:bc:e7:df:8a:44:da:40:02:d8:d4:e2:bd:
01:08:0c:b0:d8:72:ed:13:a6:0b:81:29:89:99:6e:
cf:71:a5:52:14:93:fa:7f:02:ab:6a:44:c0:d9:e0:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:66:0D:59:69:36:DD:E5:51:5C:41:D5:84:65:0F:96:26:77:2B:3D
X509v3 Authority Key Identifier:
keyid:E1:D9:74:C3:BD:4F:EA:4E:9F:EB:51:29:DB:ED:20:3C:07:5C:8D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dl0w71P6k6f61Ep2-0gPAdcjWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/c49e60-9f9b-4ffe-ada0-c0341094b09a/1/4dl0w71P6k6f61Ep2-0gPAdcjWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5c:66:1e:d6:94:50:70:1b:4a:9b:07:45:e7:56:30:5a:a9:
40:a3:39:b0:b3:29:6b:d6:b4:16:7e:fb:21:ea:68:b9:c5:51:
5e:c5:71:d9:7c:24:5a:c2:8c:48:b2:9d:39:d8:da:b1:7c:c8:
c1:9f:74:fb:f1:fa:79:51:89:51:07:11:bc:ea:4b:3b:9b:3c:
00:de:82:79:f0:03:de:32:b3:ff:8e:3e:66:cd:86:0a:55:dd:
33:61:27:85:ff:fa:b8:8a:f2:eb:b0:3d:65:e8:06:95:cb:19:
a0:67:ed:29:f3:0a:ed:12:a9:0e:db:21:fd:a9:f2:60:38:ba:
4e:9f:88:ed:c9:47:5d:10:67:43:88:52:96:38:06:9b:bb:db:
08:68:9d:6e:30:eb:34:f1:9b:58:24:55:d7:3a:90:c3:c2:78:
64:2c:b4:ea:6a:4b:d1:25:6f:0a:8f:12:0e:e8:94:2a:68:d8:
71:cc:64:9e:29:e7:06:f3:b9:be:bc:ea:fb:83:17:29:95:b6:
ac:5e:cf:b8:b1:16:79:e6:43:0d:aa:1b:ff:95:3f:04:ca:7c:
f8:4f:ef:f8:b2:c3:e6:c0:3e:54:6c:1d:0d:ad:ea:a7:7e:2e:
a9:33:4d:67:51:ac:22:cd:1f:25:14:15:df:4e:28:e8:63:b6:
c7:3b:e7:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:22:40 2025 by rpki-client