Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/df2a9f-7398-4d80-a9ba-67d31623d8d6/1/4H-Fqxk2xBximFp7MmJV2qaxFCk.mft
File: 4H-Fqxk2xBximFp7MmJV2qaxFCk.mft (raw, json)
Hash identifier: XGM/Vd5eNpcYMI/0nS1fvpD2dW0ezZOpzx8Y/jB5xh8=
Subject key identifier: DC:9A:E8:59:4F:58:97:85:0B:5C:D0:7B:E8:B4:52:05:9F:F7:DE:56
Authority key identifier: E0:7F:85:AB:19:36:C4:1C:62:98:5A:7B:32:62:55:DA:A6:B1:14:29
Certificate issuer: /CN=e07f85ab1936c41c62985a7b326255daa6b11429
Certificate serial: 0199FC2161F3DF42CC0E7822DAC6EE2D5931
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4H-Fqxk2xBximFp7MmJV2qaxFCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/df2a9f-7398-4d80-a9ba-67d31623d8d6/1/4H-Fqxk2xBximFp7MmJV2qaxFCk.mft
Manifest number: 07
Signing time: Sun 19 Oct 2025 11:01:10 +0000
Manifest this update: Sun 19 Oct 2025 11:01:10 +0000
Manifest next update: Mon 20 Oct 2025 11:01:10 +0000
Files and hashes: 1: 4H-Fqxk2xBximFp7MmJV2qaxFCk.crl (hash: yD6KKBYHkQT6hJp6aA1oCZRJDApzCEtU2vSX+u+s9WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/df2a9f-7398-4d80-a9ba-67d31623d8d6/1/4H-Fqxk2xBximFp7MmJV2qaxFCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/df2a9f-7398-4d80-a9ba-67d31623d8d6/1/4H-Fqxk2xBximFp7MmJV2qaxFCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4H-Fqxk2xBximFp7MmJV2qaxFCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:61:f3:df:42:cc:0e:78:22:da:c6:ee:2d:59:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e07f85ab1936c41c62985a7b326255daa6b11429
Validity
Not Before: Oct 19 11:01:10 2025 GMT
Not After : Oct 20 11:01:10 2025 GMT
Subject: CN=dc9ae8594f5897850b5cd07be8b452059ff7de56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:40:91:1b:d0:7b:b2:f5:38:ca:f4:97:eb:
1b:30:6f:52:5e:4d:d7:61:62:30:7b:c3:31:1c:98:
31:52:fc:d1:b3:ff:51:81:dc:d3:3a:6b:80:20:cf:
54:83:65:51:d9:36:ca:d4:cc:f8:a8:b9:e8:e1:65:
33:f0:ff:46:af:2a:84:8c:1c:fb:7b:49:22:4f:38:
49:55:58:b7:8d:31:67:5c:d6:ec:e9:5b:63:fd:03:
5d:fc:59:ce:0b:d2:9a:17:96:15:b1:5d:94:59:e8:
80:14:d7:2a:38:1d:ea:1b:4a:3e:39:fc:96:e6:a7:
98:d3:21:3d:4c:42:09:cd:8f:2a:64:c7:ae:88:34:
85:6f:52:6b:ec:85:62:a1:09:0d:52:43:f5:c7:47:
65:f2:c5:9f:82:d7:04:a2:f4:15:f8:f0:c8:42:74:
a3:41:cc:73:f1:9f:78:70:c2:e9:c4:05:52:4c:8d:
93:21:f1:d0:6d:b7:61:d7:20:70:8a:24:92:04:a0:
3f:9a:a7:e7:8c:2f:a1:4c:30:5b:5c:2c:c6:f3:58:
73:ef:95:83:18:28:04:77:e9:3a:1a:72:2a:55:bd:
7f:fd:8c:f4:90:09:87:48:f4:ea:ac:ac:90:83:d6:
1d:66:c1:23:67:6e:48:c4:6f:38:ac:46:59:06:a5:
93:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:9A:E8:59:4F:58:97:85:0B:5C:D0:7B:E8:B4:52:05:9F:F7:DE:56
X509v3 Authority Key Identifier:
keyid:E0:7F:85:AB:19:36:C4:1C:62:98:5A:7B:32:62:55:DA:A6:B1:14:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4H-Fqxk2xBximFp7MmJV2qaxFCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/df2a9f-7398-4d80-a9ba-67d31623d8d6/1/4H-Fqxk2xBximFp7MmJV2qaxFCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/df2a9f-7398-4d80-a9ba-67d31623d8d6/1/4H-Fqxk2xBximFp7MmJV2qaxFCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:08:ee:30:78:04:f8:f2:5a:f4:53:0f:8a:bb:8b:be:bb:a8:
0b:3a:4b:27:d0:a4:96:6a:d7:06:4e:50:22:71:65:e7:59:1f:
c3:99:ed:54:1f:ac:28:4f:d4:62:3d:dd:c1:17:76:c9:c1:2d:
f0:fa:04:8a:5c:ae:87:4e:f0:72:36:da:e7:8c:6e:04:df:38:
36:4b:32:79:6b:dd:7f:ff:5c:07:fb:e6:62:e2:ee:d0:c3:dd:
cf:91:45:8e:14:7c:78:a9:0a:02:83:f5:21:d5:08:ee:cd:8c:
d4:28:4e:63:c3:53:16:69:be:9f:d3:3b:e2:b7:2c:52:2f:f6:
21:4b:bf:6f:30:51:bf:19:c5:00:46:3d:42:43:6f:63:18:37:
d5:1f:07:91:97:14:17:93:5a:81:fb:30:4e:cd:1e:07:5c:de:
21:5c:9b:e5:13:08:74:9e:12:94:fb:88:94:d3:4c:0c:47:a4:
da:18:e6:cb:07:52:7b:03:45:f2:f1:8d:f7:b6:ef:39:1c:45:
0b:11:f8:bb:a9:d8:59:2f:ef:ce:7c:7e:f2:bc:b8:67:f4:df:
99:c8:ee:e2:fd:87:4e:1c:6b:29:4e:e5:84:52:40:8a:14:27:
f4:34:56:99:cb:67:42:20:ae:11:76:36:62:c9:68:cc:ea:e1:
60:ba:42:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:40 2025 by rpki-client