Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
File: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft (raw, json)
Hash identifier: WR36oGU4wijymIavou93PoMg4uKsxa5g7hCnyMqSDMA=
Subject key identifier: 77:8D:15:CF:75:DB:04:15:97:46:8A:4A:42:87:65:88:2D:5E:C6:27
Authority key identifier: E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
Certificate issuer: /CN=e33779b8388d001fdcbddc48ace227f009850660
Certificate serial: 019A03A35456A872288A8ECD6417F8F316D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
Manifest number: 16E1
Signing time: Mon 20 Oct 2025 22:00:26 +0000
Manifest this update: Mon 20 Oct 2025 22:00:26 +0000
Manifest next update: Tue 21 Oct 2025 22:00:26 +0000
Files and hashes: 1: 4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl (hash: HP5KmkAExrXPd6gPF4gCWQvpSa9bs8LIbcMCNC/F5lU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:03:a3:54:56:a8:72:28:8a:8e:cd:64:17:f8:f3:16:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33779b8388d001fdcbddc48ace227f009850660
Validity
Not Before: Oct 20 22:00:26 2025 GMT
Not After : Oct 21 22:00:26 2025 GMT
Subject: CN=778d15cf75db041597468a4a428765882d5ec627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1a:3d:0a:e6:38:e3:bd:49:bc:62:28:20:e8:
82:52:fb:87:6a:04:d5:56:22:e0:e7:70:5c:a8:44:
5e:b1:18:41:26:80:15:dc:71:2c:eb:17:84:00:44:
62:c3:b8:a9:c8:a8:bf:71:19:4f:4e:6c:4d:a9:a3:
0f:13:ea:2b:92:2a:fe:20:de:97:f5:10:d2:3d:41:
b0:c9:7c:03:a4:2a:39:aa:4a:54:4d:ab:5c:c8:f1:
4d:04:08:80:b5:ce:6b:0c:60:e2:78:cb:29:03:e0:
fe:ae:08:5e:3e:b3:af:da:c5:9a:17:3f:00:ed:ee:
03:5d:23:c4:e5:bc:d3:e8:7d:8f:8e:b1:2d:2f:c9:
ff:8c:3e:66:f0:6c:a5:72:c2:c8:fe:9d:aa:67:f2:
dc:12:58:88:75:d0:76:5a:b2:0f:f9:d1:7d:45:e1:
56:5b:52:74:2e:82:2a:70:cf:aa:76:30:b4:db:0b:
f6:34:8e:6b:76:5d:8e:07:b8:40:67:4d:a8:ab:a1:
d1:90:d5:a9:3f:7d:e9:33:94:a3:57:94:23:ba:22:
cf:d4:5b:0a:68:96:c1:a1:6b:b1:15:27:bd:9d:37:
92:38:f2:fd:f2:89:3e:56:50:d9:3e:58:a7:8a:2e:
9e:13:b1:2b:b2:3f:78:0a:8b:b3:85:68:da:9e:00:
53:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:8D:15:CF:75:DB:04:15:97:46:8A:4A:42:87:65:88:2D:5E:C6:27
X509v3 Authority Key Identifier:
keyid:E3:37:79:B8:38:8D:00:1F:DC:BD:DC:48:AC:E2:27:F0:09:85:06:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zd5uDiNAB_cvdxIrOIn8AmFBmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/9db326-1189-4ac9-b412-f294d3b12cfd/1/4zd5uDiNAB_cvdxIrOIn8AmFBmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:52:f0:f1:68:93:bc:42:7b:a6:01:38:c0:f3:a7:4a:70:b5:
c2:11:7a:84:71:85:a9:6b:4f:80:e9:db:c8:31:c8:db:da:17:
94:fb:f6:84:9d:f6:24:d8:c5:f9:75:ee:21:f6:ec:1a:60:c2:
14:a0:be:58:11:40:46:b3:b8:73:51:48:93:fa:d0:a4:a8:86:
8f:a5:b4:4c:cb:39:c5:a9:ae:c9:68:ee:86:67:ab:16:cc:e0:
59:3b:9e:b3:9e:2c:dc:16:a1:b4:76:0c:d4:13:66:bb:6f:1d:
9b:cb:56:dc:ba:d9:9d:8a:e7:9a:b8:d4:34:da:09:4f:62:92:
b4:b6:42:ba:6e:de:6d:cf:c3:5c:53:94:a1:f0:64:75:6b:16:
fa:4d:4e:63:94:c1:3a:19:ce:39:8a:d9:93:d7:75:dd:54:ec:
53:f2:20:13:c9:dd:88:34:6b:1c:44:7e:38:f3:92:83:cf:fb:
11:3c:b8:9f:22:32:37:68:5a:39:c7:1f:4e:f2:5e:cd:43:71:
0b:98:91:38:46:73:c1:89:9b:4d:1a:3e:f3:39:58:f2:e8:89:
63:c5:51:c3:50:88:76:1f:78:ed:4c:bb:a7:5e:06:d3:42:09:
19:71:be:15:06:bd:cd:71:9b:b5:1a:1a:b1:20:7a:af:31:29:
8a:66:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 02:22:57 2025 by rpki-client