Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
File: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft (raw, json)
Hash identifier: 7DGD8tOltgycTxjj8dH1PpNWh5yF0pshbvmPcb0uhCE=
Subject key identifier: 1F:79:F7:43:B7:EC:CF:EF:86:5F:EB:8E:47:DD:C6:7E:7C:6E:B7:DF
Authority key identifier: E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
Certificate issuer: /CN=e19f6151a347c7922ac7cf469925344330d724f7
Certificate serial: 0199FFC7156DAB71F98A13E9E5CDAD3B1616
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
Manifest number: 1414
Signing time: Mon 20 Oct 2025 04:01:01 +0000
Manifest this update: Mon 20 Oct 2025 04:01:01 +0000
Manifest next update: Tue 21 Oct 2025 04:01:01 +0000
Files and hashes: 1: 4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl (hash: 1k5idyY10E8XLHIwh6id7olaHygbTkzP3ydmOh5mYFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:15:6d:ab:71:f9:8a:13:e9:e5:cd:ad:3b:16:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19f6151a347c7922ac7cf469925344330d724f7
Validity
Not Before: Oct 20 04:01:01 2025 GMT
Not After : Oct 21 04:01:01 2025 GMT
Subject: CN=1f79f743b7eccfef865feb8e47ddc67e7c6eb7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f7:96:c7:b6:22:46:1b:72:1c:c4:65:6a:81:
b5:f3:88:a2:43:b8:c3:25:f1:ac:70:9d:d2:58:0d:
b3:ad:84:e8:52:82:05:42:12:49:05:28:b8:57:4b:
75:cc:f2:85:d3:a8:5c:4a:b4:63:49:57:b1:f5:fb:
a1:0f:ff:db:a4:d4:52:c6:73:cd:62:81:be:66:38:
c1:0e:21:34:00:0d:c2:ba:03:df:dc:7c:63:33:82:
3c:e9:de:4c:63:c3:da:e1:f2:9f:b1:35:8d:1e:0d:
e6:2c:fd:2f:b0:6f:1d:fd:66:15:e0:c0:24:17:d7:
ba:e1:07:15:f2:9c:01:4b:e5:02:0d:3a:b8:b7:5a:
42:6d:d7:a4:a0:88:b2:b4:4a:15:ff:2b:6e:42:7d:
f5:2b:73:66:f1:7d:d8:04:84:2a:c2:59:6f:69:da:
fa:4c:31:d1:8e:5f:2b:42:67:ef:27:a9:92:e7:09:
ba:49:c7:3f:dc:63:6b:d8:8e:78:51:12:41:1d:88:
0b:15:7d:9c:1f:b1:4f:03:1b:07:cc:c6:1b:0e:24:
ca:6f:fb:aa:76:e3:4b:a5:b0:ca:34:f3:b6:16:3f:
c5:c8:ec:3f:62:25:d5:a4:5e:78:af:d6:12:f0:c2:
c3:23:08:3f:5f:ef:3c:04:d5:30:37:df:04:8e:68:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:79:F7:43:B7:EC:CF:EF:86:5F:EB:8E:47:DD:C6:7E:7C:6E:B7:DF
X509v3 Authority Key Identifier:
keyid:E1:9F:61:51:A3:47:C7:92:2A:C7:CF:46:99:25:34:43:30:D7:24:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1179ce-25d9-4f96-b10f-42d4939a0519/1/4Z9hUaNHx5Iqx89GmSU0QzDXJPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:66:12:00:42:a2:f8:6b:11:85:02:1b:88:49:18:ab:fa:9f:
94:1d:a5:92:b9:e1:b1:be:8b:c9:d8:d0:73:34:cf:8b:56:c1:
eb:e1:4d:ee:30:8e:20:79:4c:2c:87:e0:ba:32:6b:73:87:6c:
d3:da:62:22:a5:19:9f:ee:fc:e3:3b:6b:8e:0b:9d:9b:f3:a0:
6f:40:6a:45:15:ea:e9:dd:ca:84:9a:15:41:59:c9:6f:66:85:
86:32:0d:b7:e9:6d:dd:21:f4:75:3b:5d:e4:d3:c2:7d:d7:0a:
b3:8a:92:1d:e0:46:6b:31:ce:6a:d0:19:d9:3a:39:49:64:14:
a6:c1:ad:2b:8b:61:ac:1a:74:2d:c7:37:3f:fe:5e:f3:9c:79:
20:63:f4:73:55:ad:2a:1e:8c:9f:d4:cd:86:ea:54:b3:d8:ed:
dd:50:00:9f:21:4c:11:65:a7:e8:42:a8:7c:9c:62:49:c3:68:
35:86:95:c1:dd:64:b2:76:3c:3c:72:97:b5:b4:7c:5f:8f:a0:
4a:d2:f2:60:4c:cb:19:29:99:27:f0:70:b8:1c:f9:f8:f3:1d:
b3:77:79:10:02:5c:88:07:0b:80:75:b9:38:19:87:f0:71:36:
70:15:a2:d9:52:7c:07:c4:0f:da:7d:ba:54:70:09:67:f5:b0:
49:17:98:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:41:28 2025 by rpki-client