Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
File: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft (raw, json)
Hash identifier: LjrtRWWfmuXaSJ4hOTa1AOGfxHH3nT8eKJitiQxgotw=
Subject key identifier: 3E:41:9B:57:A5:1C:8A:A3:4E:30:0A:99:90:92:74:86:9F:B0:95:75
Authority key identifier: E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
Certificate issuer: /CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Certificate serial: 0199FB0F095028AA461DC7A1B09A958B278E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
Manifest number: 6B
Signing time: Sun 19 Oct 2025 06:01:30 +0000
Manifest this update: Sun 19 Oct 2025 06:01:30 +0000
Manifest next update: Mon 20 Oct 2025 06:01:30 +0000
Files and hashes: 1: 4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl (hash: Xt1BS9N7tXXFJWIQZAlrnMo5CFO9kv01HP65hc4MesA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0f:09:50:28:aa:46:1d:c7:a1:b0:9a:95:8b:27:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0bbede6496f71727768af6b61b0bdd30e2170b0
Validity
Not Before: Oct 19 06:01:30 2025 GMT
Not After : Oct 20 06:01:30 2025 GMT
Subject: CN=3e419b57a51c8aa34e300a99909274869fb09575
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:63:14:1a:15:51:74:9f:89:11:ef:35:cd:
50:a9:41:27:d2:7b:6d:0d:e5:db:fc:fb:9a:94:b8:
79:14:fc:f1:bf:0d:66:9f:d0:e4:c1:19:2f:50:97:
eb:c7:73:3a:67:b5:6b:d2:4e:3f:9e:c2:11:1c:5a:
31:f0:1e:38:1d:cb:08:0e:08:64:fc:42:bf:85:d9:
d1:45:8b:b9:45:ba:cc:54:eb:b0:f7:21:e1:54:10:
08:30:2f:b7:b5:30:51:be:de:c8:23:f5:60:83:f4:
70:8a:9f:90:27:43:0f:80:10:d3:bb:1d:b1:e4:79:
e8:a4:0d:61:96:70:fb:80:6f:0d:6d:f4:f2:10:e9:
b6:12:db:37:af:f2:5e:2a:fa:b0:8b:49:ac:92:17:
65:9b:ec:20:49:a5:0d:ac:0f:81:a2:2b:34:1f:db:
96:23:3b:db:0d:f1:67:7a:74:29:4a:88:75:86:fa:
37:94:0b:42:86:0e:b5:aa:3d:52:2d:3b:f5:fb:78:
f2:e3:c7:80:ed:9c:02:87:9a:82:65:f0:ca:62:32:
df:6e:81:82:9b:4b:7b:64:f3:b8:76:70:01:19:dd:
cc:87:75:08:dc:e8:cf:8c:e0:17:b9:83:ee:60:f0:
fa:3f:b8:13:78:17:15:8e:37:f2:6e:da:d9:07:c7:
bc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:41:9B:57:A5:1C:8A:A3:4E:30:0A:99:90:92:74:86:9F:B0:95:75
X509v3 Authority Key Identifier:
keyid:E0:BB:ED:E6:49:6F:71:72:77:68:AF:6B:61:B0:BD:D3:0E:21:70:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Lvt5klvcXJ3aK9rYbC90w4hcLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/216370-1c01-4440-adcd-00f83987bed7/1/4Lvt5klvcXJ3aK9rYbC90w4hcLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:26:99:48:88:85:32:93:b0:9e:9e:65:a6:e1:b4:bf:98:81:
09:d3:c7:ee:f9:21:96:88:f4:17:d2:65:0b:3e:93:fb:66:4b:
ef:e0:f8:1c:bf:5f:09:c8:fa:be:f6:30:43:dc:35:fd:d8:8b:
bc:8b:0e:e6:d6:55:42:2f:fb:7a:82:22:d3:b5:8a:98:6b:7a:
ae:4d:66:18:f0:83:01:47:dc:f9:39:40:8e:7e:dc:3c:7c:28:
71:13:ad:36:56:04:d5:ff:9e:45:96:67:d1:28:84:fd:7b:9b:
73:7e:a8:4c:83:e7:4c:4c:ae:fb:d6:b6:dc:41:ae:95:7e:fd:
1b:4d:6c:29:b2:90:ca:ce:dc:e6:68:13:11:36:96:aa:03:a9:
21:5f:e7:ab:37:df:27:84:64:fc:56:2b:b8:d9:97:ac:1a:52:
f0:e8:e3:58:49:6b:cd:f0:48:b0:4e:52:b7:ec:31:44:d3:47:
1e:d5:b6:0d:94:09:1f:b7:10:d5:a4:93:0a:c2:d4:1d:4d:c6:
86:9f:45:31:6a:a6:00:cf:10:00:6a:d6:fe:bb:29:1d:bd:fa:
26:62:29:ca:92:5f:73:e5:63:67:e2:89:be:d9:23:d8:26:4b:
9a:28:03:6c:86:84:1b:31:7a:1b:45:31:5e:36:59:34:57:1f:
ac:94:48:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:31 2025 by rpki-client