
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
File: _4fgqwMrDAXrXnTMLAhpjdMk2WM.mft (raw, json)
Hash identifier: AbPTiB7kfQtXpwK7EQ+jLnTTg8UW1nuqaIXqf64HOB0=
Subject key identifier: F1:D4:37:C8:EF:F2:95:D5:16:A1:19:08:D8:9A:25:6C:0D:B2:1B:96
Authority key identifier: FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
Certificate issuer: /CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Certificate serial: 0199FC8F4182BFF025D6194EF7A40668A25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
Manifest number: 171E
Signing time: Sun 19 Oct 2025 13:01:10 +0000
Manifest this update: Sun 19 Oct 2025 13:01:10 +0000
Manifest next update: Mon 20 Oct 2025 13:01:10 +0000
Files and hashes: 1: _4fgqwMrDAXrXnTMLAhpjdMk2WM.crl (hash: szXdxvCNIZorcvWtXjZyF4mzmY5lYKeXw1melnlk1Qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:41:82:bf:f0:25:d6:19:4e:f7:a4:06:68:a2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff87e0ab032b0c05eb5e74cc2c08698dd324d963
Validity
Not Before: Oct 19 13:01:10 2025 GMT
Not After : Oct 20 13:01:10 2025 GMT
Subject: CN=f1d437c8eff295d516a11908d89a256c0db21b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fe:22:9c:0a:ab:4c:a6:87:7c:49:d5:53:8f:
eb:35:9f:28:9e:ea:a5:64:e2:f7:e9:ed:f4:2b:56:
74:6b:b7:f7:c5:ff:92:4d:0f:05:d9:b2:1c:75:86:
7b:b2:ab:aa:80:d7:d6:df:b5:da:19:f2:1e:0b:96:
67:f8:e3:3a:bd:79:1c:70:70:d0:e5:80:95:d5:74:
26:ad:66:60:24:12:17:89:eb:44:43:59:b0:5c:c8:
b1:20:15:6a:9c:fb:7b:a9:1e:93:c6:b0:a7:cf:ad:
6c:1d:c1:df:b5:75:8e:42:4f:f9:07:72:0e:b8:e3:
c3:5d:7c:ae:b5:4a:2e:c3:90:7c:39:a1:cb:b0:cf:
95:3c:77:18:f4:34:38:e5:d8:db:02:62:d7:0c:bb:
a6:7d:08:f8:c1:53:82:c1:b9:5f:e3:af:52:50:eb:
18:96:35:6a:a6:8a:39:59:5c:a6:71:83:3d:f8:e5:
ca:0a:43:3e:ef:55:5f:4b:4d:8f:24:ac:4b:65:2e:
6f:1e:b6:11:d3:83:80:e7:4d:df:a3:7b:1c:a8:57:
cd:13:3d:4c:47:0d:ad:13:ba:90:be:4e:40:83:2c:
f8:a7:f3:7d:ee:6f:1f:a6:65:93:29:bf:c4:b9:94:
39:7a:59:a7:1a:80:4c:4a:05:2f:76:81:0d:a8:25:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D4:37:C8:EF:F2:95:D5:16:A1:19:08:D8:9A:25:6C:0D:B2:1B:96
X509v3 Authority Key Identifier:
keyid:FF:87:E0:AB:03:2B:0C:05:EB:5E:74:CC:2C:08:69:8D:D3:24:D9:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4fgqwMrDAXrXnTMLAhpjdMk2WM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/1df18e-6c4d-434b-8e31-71eb95f50e5b/1/_4fgqwMrDAXrXnTMLAhpjdMk2WM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:9d:4c:1b:e6:10:7d:47:51:cb:da:6e:7d:de:a2:2f:7d:0b:
0b:fc:5c:13:ed:f7:97:65:c3:89:74:85:a0:3f:4d:d8:ce:fd:
0c:d7:58:4a:95:39:05:62:ea:fc:8d:19:5e:be:fe:ce:a7:6d:
65:ef:f9:e4:f3:49:71:c2:15:ee:7a:b3:bd:f3:1f:7f:f8:53:
4e:e3:b8:78:83:e6:c8:22:ed:eb:46:1e:f9:83:fb:cf:37:9d:
ef:3e:7b:69:d5:2d:fd:0f:b5:db:26:2f:6a:27:78:3c:1b:41:
c5:36:57:81:b1:43:da:9c:ec:11:e2:41:ce:cb:07:0a:d6:71:
b3:50:91:b8:43:d1:81:df:41:f3:5f:37:a9:27:db:d5:ec:b0:
81:8c:95:af:a6:97:a1:5b:a3:d5:36:5c:e9:5e:e9:30:e3:5c:
96:6d:57:27:d1:16:aa:12:f9:94:5e:83:6d:7b:87:b4:fd:92:
6f:a2:9c:dd:f0:f3:35:14:73:67:66:6c:3d:0d:02:97:17:04:
e7:16:23:ff:93:14:90:c2:51:5c:61:21:5b:d8:ac:82:4e:7e:
2c:87:ef:35:95:8a:7c:ee:83:b8:a0:36:11:5d:21:8c:b6:f6:
9b:d9:0e:48:19:06:64:66:c6:55:54:79:4b:5f:ea:6a:c7:56:
37:da:3e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:19:31 2025 by rpki-client