Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File: 4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier: V5UJteKBcZRGPNbrcTA50C0zsBGvYvN8FsnqSn71Q40=
Subject key identifier: A1:F0:7D:99:4B:78:03:9D:9C:FE:67:78:4A:6F:03:85:13:1D:9A:00
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer: /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial: 0199FEEB919D825CFBF4BDDB323BD55AAC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number: 05AA
Signing time: Mon 20 Oct 2025 00:01:14 +0000
Manifest this update: Mon 20 Oct 2025 00:01:14 +0000
Manifest next update: Tue 21 Oct 2025 00:01:14 +0000
Files and hashes: 1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: ORCSkQy1xLzVY03Mfxjbqec2lE1ZSqKwYWF9msaXmO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:91:9d:82:5c:fb:f4:bd:db:32:3b:d5:5a:ac:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Validity
Not Before: Oct 20 00:01:14 2025 GMT
Not After : Oct 21 00:01:14 2025 GMT
Subject: CN=a1f07d994b78039d9cfe67784a6f0385131d9a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d4:71:de:81:03:bd:e8:a8:11:21:5c:dc:7c:
0b:99:e1:c9:73:d2:14:00:7d:dc:1a:e5:f3:77:ba:
44:ae:bc:30:42:75:9b:0e:b9:84:84:77:2f:00:c8:
61:f2:7d:cc:c7:5d:3c:30:50:f4:1a:25:cd:bc:05:
a3:6f:8f:61:dd:98:2c:3c:4d:86:d8:cc:fb:85:b2:
27:42:38:7d:7a:bb:b2:57:f6:e5:cf:a1:d7:45:f9:
fd:a3:e9:c0:4c:9b:aa:c4:2a:d0:67:07:b2:66:59:
36:dd:bb:8e:71:32:b8:a5:3c:f4:0b:b0:bd:a5:2b:
0a:00:31:38:34:4d:1c:cf:8c:e8:70:43:c2:3e:6d:
f1:8f:bb:9c:4d:07:2c:32:65:e7:f3:5c:3e:df:44:
f1:08:67:72:56:e3:9c:73:c7:eb:0b:60:72:e6:4b:
aa:9e:9b:0b:b0:1c:9d:8b:0e:92:08:28:59:b7:5a:
79:40:68:14:ba:f3:0e:f6:0c:1e:37:6b:cb:51:f5:
22:ba:a9:ce:52:8f:37:d0:38:b1:be:f1:94:7f:e2:
44:7e:92:80:8e:f2:0a:6d:ac:70:a9:d8:f6:30:9f:
fb:25:9a:13:8d:81:94:78:58:ad:c6:28:08:2c:3d:
4b:20:df:d6:37:b4:07:f7:c3:1c:02:25:e0:01:fb:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F0:7D:99:4B:78:03:9D:9C:FE:67:78:4A:6F:03:85:13:1D:9A:00
X509v3 Authority Key Identifier:
keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:fa:cd:e1:2c:28:ae:ff:91:df:37:2e:59:49:63:67:3e:4c:
be:a8:e8:4c:1b:06:8a:9a:50:10:dc:3c:9d:a4:2a:e7:49:96:
e8:50:3b:44:63:2a:68:f0:6a:2e:20:38:6a:d5:50:4b:7f:c4:
93:6c:2d:be:c2:32:4e:7c:e9:f3:ce:74:c5:b8:46:64:92:34:
bd:9b:11:10:a7:d6:9a:54:7a:42:af:d5:ad:a2:97:13:4a:3e:
72:24:4d:18:8c:4c:dc:71:f4:dd:94:35:72:8e:4e:74:4c:d4:
e3:60:84:99:bc:d7:4b:7a:4c:bb:4c:89:c2:51:e3:2d:59:56:
55:e1:fa:d9:3c:4b:b4:a4:92:d9:9d:37:b5:2b:56:9a:70:f6:
a3:8f:aa:20:89:16:67:7f:49:f3:c3:a4:2c:a4:bc:04:8a:61:
f9:31:7b:98:71:62:ba:6b:9d:16:f9:b2:7e:cc:f6:be:7f:5f:
cf:7f:ce:03:13:64:10:ce:16:60:9b:89:19:50:77:ca:f5:de:
3f:ca:3f:3a:5c:69:68:20:3e:94:73:1f:7d:23:cb:08:1d:44:
8e:df:f6:09:a0:9d:45:d6:5f:e6:3c:42:9a:2d:c5:41:53:3b:
02:d0:b0:8c:a5:40:a1:69:1f:8f:fc:e8:1e:16:e9:56:d7:8a:
fe:33:a2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:49:12 2025 by rpki-client