Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: mgM2HhFiiY3tK4YaKcPHg0ky44WwlbwNrOFEPLLLAA0=
Subject key identifier: 02:5B:FF:EB:8E:9B:8D:88:92:6A:26:6E:F6:17:87:A5:7B:B5:EE:2D
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 0199FBEB70EE314B9BEA103D0F7D0DD86578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:14 +0000
Manifest this update: Sun 19 Oct 2025 10:02:14 +0000
Manifest next update: Mon 20 Oct 2025 10:02:14 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: IPLT83NYYpD1r456DdyW31/UGLxWy0tave9d14iuBvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:70:ee:31:4b:9b:ea:10:3d:0f:7d:0d:d8:65:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Oct 19 10:02:14 2025 GMT
Not After : Oct 20 10:02:14 2025 GMT
Subject: CN=025bffeb8e9b8d88926a266ef61787a57bb5ee2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:fc:ec:00:d1:e6:73:e5:a2:14:dd:44:8c:
ab:64:7f:b5:7c:2b:4c:f1:37:be:5d:a4:a2:29:78:
62:7c:bf:c2:42:57:24:c6:8d:22:a8:b6:18:2c:0f:
fe:72:be:0c:93:63:8c:11:13:f5:86:de:15:2e:36:
8f:4a:3e:5f:23:f5:c8:20:dd:bd:3f:90:a1:e4:16:
8f:18:53:a2:06:47:1b:61:aa:b4:6b:17:c0:96:bf:
38:58:f7:c2:43:2a:2f:92:d6:19:f2:49:d1:0d:bd:
43:42:43:6d:99:83:d4:e8:2a:19:a6:84:85:3c:82:
c9:7f:77:97:86:64:a1:b2:4c:15:47:31:ab:b3:3a:
af:25:0e:1a:13:cd:96:e0:b5:04:e2:00:b5:13:bb:
3b:84:ab:dd:73:9e:9f:5e:e3:e6:92:13:6d:13:44:
16:c2:48:d0:e1:48:35:c2:b2:98:48:e3:f0:f8:26:
c9:d8:8d:72:dd:66:80:58:95:b0:aa:0f:32:cd:7b:
9c:f1:1b:ab:56:6b:0c:3e:fe:54:97:a1:82:26:e6:
12:9d:68:31:7d:4d:5c:6b:14:8e:af:e2:d5:21:d5:
c1:78:cd:f8:94:5a:5c:55:02:1e:ff:c6:f1:2a:89:
cc:67:6a:f2:d6:b2:32:1f:78:01:ce:f7:54:25:eb:
21:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:5B:FF:EB:8E:9B:8D:88:92:6A:26:6E:F6:17:87:A5:7B:B5:EE:2D
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:fd:e0:05:45:0c:72:49:82:9a:66:08:54:da:08:da:95:09:
9c:ce:01:da:1d:f7:23:55:f4:87:d2:5b:bc:2f:2f:02:14:97:
84:a1:e0:f3:35:5d:e1:ee:11:f6:66:4a:ea:89:6e:7b:53:22:
49:29:27:47:6a:aa:aa:e2:a2:22:79:4c:2f:4a:9e:89:e1:71:
f7:a3:7c:21:1c:83:be:36:90:5a:0a:c6:35:73:6e:6e:db:ad:
1f:f5:80:ea:e2:a7:af:7b:d6:b8:fc:64:75:f1:9c:19:89:ec:
dc:42:7e:ab:2b:89:91:c0:80:9e:d7:a6:df:cb:1f:f2:1a:cb:
fa:00:e8:76:5f:bc:c8:9d:d7:99:8e:98:37:a5:2d:87:43:89:
c4:82:4e:f0:dd:29:06:9e:92:8a:4f:90:db:33:87:d7:5c:77:
44:e1:4b:eb:cb:c5:2e:7e:8e:be:9d:a7:dd:2c:74:7a:9d:17:
5f:a8:a8:4a:53:34:e1:d3:1b:a3:d4:e8:16:b7:f9:76:08:d1:
7e:15:37:23:39:5e:8f:3f:40:df:1f:17:d3:9f:8f:dc:2c:ea:
67:89:6b:92:48:a4:21:a3:b6:94:fa:45:90:e8:8f:b0:d0:1a:
64:57:49:29:17:f3:86:14:20:b2:39:80:85:df:5a:58:29:dc:
d3:4e:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:06:48 2025 by rpki-client