Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
File: 4tccU1qnoKzpP62r22WD-ISmxiY.mft (raw, json)
Hash identifier: gy+c7NvChZh8mTi1DvANn+3mZTDbMLfSi0D/v9iMYJA=
Subject key identifier: CF:B6:5B:62:F5:6E:13:FD:13:DA:BA:69:6F:D7:4E:4F:41:67:C3:E2
Authority key identifier: E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
Certificate issuer: /CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Certificate serial: 0199FFC8BEB094E2EF0D95BBCBED381D78FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
Manifest number: 07BD
Signing time: Mon 20 Oct 2025 04:02:50 +0000
Manifest this update: Mon 20 Oct 2025 04:02:50 +0000
Manifest next update: Tue 21 Oct 2025 04:02:50 +0000
Files and hashes: 1: 4tccU1qnoKzpP62r22WD-ISmxiY.crl (hash: f232ALgbc8Ts36mtLELdyUWKjeC4RlVgGU6GmJoWPdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c8:be:b0:94:e2:ef:0d:95:bb:cb:ed:38:1d:78:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d71c535aa7a0ace93fadabdb6583f884a6c626
Validity
Not Before: Oct 20 04:02:50 2025 GMT
Not After : Oct 21 04:02:50 2025 GMT
Subject: CN=cfb65b62f56e13fd13daba696fd74e4f4167c3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:0d:b9:08:83:94:47:4a:90:8a:11:7b:a9:
0c:6b:ca:76:0e:9e:32:f5:09:c4:ac:15:15:91:b7:
d5:e0:65:1f:d5:50:03:3c:df:30:45:be:78:c4:2a:
9b:f5:37:79:33:be:95:22:57:22:2f:ba:f6:0f:01:
29:0e:8f:9a:10:5a:a0:df:bd:e1:40:db:de:ff:3a:
c5:e5:40:5a:a2:f3:30:d7:d2:73:c3:e2:07:d4:66:
15:e3:37:9e:9c:c1:17:8b:03:c0:12:a8:9f:c4:0c:
96:13:f9:a6:dd:f5:99:04:cd:dd:98:5a:30:ae:d8:
df:f4:ee:3f:6a:f2:ec:32:0c:48:5c:06:7c:ef:35:
f6:ff:34:c1:cf:e6:39:b7:a0:b2:47:41:96:59:1a:
8b:ae:6f:a0:8b:1c:af:3b:ef:50:74:06:1a:f2:2b:
20:b5:d6:b8:2e:a7:c9:e0:c9:d6:9c:13:58:91:fe:
64:9f:4a:76:1a:ae:a0:9d:19:d0:0d:0d:6d:72:ea:
fa:b1:2d:eb:f9:77:c9:b3:21:04:1e:c4:98:05:8a:
61:4b:db:43:c0:10:bf:79:82:75:47:b7:de:1a:f5:
87:05:4e:57:f3:39:b1:b0:8d:38:32:0b:0b:bd:44:
ff:d1:c5:73:2c:10:23:1e:96:d1:07:4a:a7:8d:a1:
27:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B6:5B:62:F5:6E:13:FD:13:DA:BA:69:6F:D7:4E:4F:41:67:C3:E2
X509v3 Authority Key Identifier:
keyid:E2:D7:1C:53:5A:A7:A0:AC:E9:3F:AD:AB:DB:65:83:F8:84:A6:C6:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tccU1qnoKzpP62r22WD-ISmxiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/2c708b-b6e2-4def-a2d9-b31011137a57/1/4tccU1qnoKzpP62r22WD-ISmxiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:60:88:04:b1:e3:cd:49:43:21:b2:e9:80:73:00:de:ee:cf:
71:e0:74:8c:ad:16:ef:86:16:53:51:b0:e1:8c:4d:5c:69:f8:
a2:b0:2e:26:d3:71:de:d6:fd:45:fc:b3:e1:74:b9:b0:89:c7:
d7:0f:25:e9:92:59:2b:34:e4:97:54:ed:77:a6:dc:72:ba:28:
28:7b:5a:84:a4:82:e2:fd:58:cc:fa:2d:aa:1c:17:7a:1d:45:
43:6e:02:51:1d:4f:74:2c:19:cb:76:db:67:4d:dc:f3:04:a7:
b4:09:7f:93:f9:e9:ad:76:75:4b:e3:3a:ed:80:2c:11:b4:0d:
22:ed:5a:8f:2a:8d:a9:a8:96:f7:1c:0d:89:48:4f:4a:cd:37:
22:3d:8d:ea:3a:10:c6:04:ec:0c:22:64:7b:f3:ac:eb:70:7c:
4d:64:57:58:66:82:7f:d8:55:90:b1:8b:1b:72:00:63:45:19:
14:b9:e8:30:04:30:a2:b7:24:f8:59:c6:3a:69:3c:69:ca:84:
b2:a2:67:c1:64:18:e7:40:7c:7d:f6:ae:90:c3:80:2d:14:a8:
fd:cb:0a:b5:43:de:51:91:62:7c:cf:87:5e:b5:5e:71:0f:8d:
cf:36:46:4f:65:92:a4:9f:07:34:e7:66:8c:d0:b0:45:be:9c:
49:2c:09:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:36 2025 by rpki-client