Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File: 4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier: ZEY1TuHnBd52S6uqEYMQND1ZhiK1gXohKyZnZVmI+/s=
Subject key identifier: C5:39:EF:26:7D:B5:CD:58:8F:BB:6F:7E:A7:A3:73:29:0A:DE:15:C7
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer: /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial: 0199FCC69079CEC77F8F0880FB18377F655E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number: 0D61
Signing time: Sun 19 Oct 2025 14:01:35 +0000
Manifest this update: Sun 19 Oct 2025 14:01:35 +0000
Manifest next update: Mon 20 Oct 2025 14:01:35 +0000
Files and hashes: 1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: G0+x28hRlsRQUj3P5bkUeicXLIO7gmPcBV4tU6rRTTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:90:79:ce:c7:7f:8f:08:80:fb:18:37:7f:65:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Validity
Not Before: Oct 19 14:01:35 2025 GMT
Not After : Oct 20 14:01:35 2025 GMT
Subject: CN=c539ef267db5cd588fbb6f7ea7a373290ade15c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:11:25:f3:97:f1:6e:d7:e8:ec:e6:b3:9e:2e:
50:f2:1c:85:f3:b1:07:ab:97:c5:7c:75:02:e8:16:
c4:b2:d6:28:77:91:9d:c0:e0:bb:56:f5:7d:71:20:
4a:04:dc:45:13:dc:83:39:39:b3:80:5f:9c:61:d7:
92:de:6d:a3:97:cc:e4:0d:37:1c:d3:e0:b4:f3:f3:
2e:e0:77:3b:bd:62:4e:ed:9e:6e:e3:f4:09:4d:7d:
d0:87:05:eb:d1:63:ea:9b:38:2e:5c:d2:63:7b:03:
c1:3e:aa:14:1c:3d:0f:c5:c0:3c:27:93:4a:bd:55:
f5:82:79:29:22:e7:cb:84:6b:d1:7b:0a:a3:6a:68:
5f:8a:43:61:6f:16:77:37:b0:62:81:33:06:0c:70:
29:11:41:a0:85:f4:4a:a8:2f:7a:76:53:db:6c:b3:
dc:74:57:bd:e0:86:35:17:98:9a:55:1b:62:79:4c:
81:70:ec:fc:05:0d:89:a7:45:f4:91:d8:c3:8a:dc:
ea:66:2c:63:10:c2:f1:79:27:a1:04:a8:ff:a4:ec:
79:97:b0:83:6b:b1:5f:6b:24:d7:c5:8f:f5:92:18:
9b:bf:f8:75:82:1c:4b:2c:e6:b2:f9:f8:47:99:c7:
d8:eb:69:5e:1c:08:b8:4a:54:a3:73:27:db:fa:a3:
4b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:39:EF:26:7D:B5:CD:58:8F:BB:6F:7E:A7:A3:73:29:0A:DE:15:C7
X509v3 Authority Key Identifier:
keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ec:4d:cd:b1:d6:e6:73:15:ca:a1:ae:ed:a6:24:1b:28:68:
4f:e1:ce:e9:a7:c1:de:4b:77:99:b3:aa:83:68:eb:18:36:2e:
44:b1:09:44:06:bc:8d:b6:1a:7d:64:f3:ce:a9:1f:e4:2f:81:
e3:08:e0:26:74:22:d3:0e:e3:04:8d:5d:04:07:10:81:48:a3:
90:51:6c:54:50:83:1b:59:b3:d6:da:04:fb:7b:5d:60:9d:48:
c4:48:4f:06:63:ae:7f:ce:bc:67:49:f5:cf:cd:73:27:b8:6f:
94:8d:68:cd:ac:75:bd:9c:72:5d:8f:8b:e7:20:4c:81:be:d7:
20:e9:63:e1:95:c6:0a:89:ed:e8:40:7b:f0:26:c1:83:0a:d2:
62:86:22:b1:99:70:50:0e:87:cc:ae:7f:e9:2f:35:16:f8:83:
90:a5:04:8a:bf:8c:64:e4:b4:77:0c:7c:eb:74:3c:ba:2d:45:
e6:de:47:d0:0e:91:ae:0e:ed:65:1c:b8:68:72:95:42:e4:42:
26:9c:39:a4:7f:f1:b2:fe:e1:ee:76:57:93:ca:e7:e6:6e:54:
29:2a:aa:77:f8:e1:66:3a:b7:ce:af:1a:cf:ec:fe:8a:80:0b:
2b:c1:b3:6c:71:70:f5:27:1f:88:d6:95:7e:5e:b2:df:e5:ac:
57:b5:74:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:10 2025 by rpki-client