Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
File: 4WU0PZW9Tbww89ciSVQanUfnbZE.mft (raw, json)
Hash identifier: /oVec6ojdnKRdNbGBYJlqpjoyPoVSEgisRfKLZ+qmdw=
Subject key identifier: 04:78:62:84:89:C1:2C:BF:18:2C:6B:5C:39:2B:3E:0A:66:9E:10:EE
Authority key identifier: E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
Certificate issuer: /CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Certificate serial: 019A01B56FCC0241ACCCA257E51AF3037541
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
Manifest number: 0FE8
Signing time: Mon 20 Oct 2025 13:00:58 +0000
Manifest this update: Mon 20 Oct 2025 13:00:58 +0000
Manifest next update: Tue 21 Oct 2025 13:00:58 +0000
Files and hashes: 1: 4WU0PZW9Tbww89ciSVQanUfnbZE.crl (hash: ei/fgmtcuGbFQvSP5Eo79TJs7LBjKO6wdjDTJdMjVsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:6f:cc:02:41:ac:cc:a2:57:e5:1a:f3:03:75:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e165343d95bd4dbc30f3d72249541a9d47e76d91
Validity
Not Before: Oct 20 13:00:58 2025 GMT
Not After : Oct 21 13:00:58 2025 GMT
Subject: CN=0478628489c12cbf182c6b5c392b3e0a669e10ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:1d:34:60:c5:22:58:94:1a:4d:f8:d8:5f:
8c:0f:66:c0:5b:cd:f3:b0:da:72:d2:dc:85:5c:6d:
ab:39:b7:ce:bc:37:97:26:c9:13:84:f7:ae:af:97:
bd:e9:98:95:3c:da:cc:f3:d5:03:df:0a:af:38:1d:
70:2f:f1:c4:87:05:6c:fd:72:a5:3b:0a:c9:10:6a:
f1:47:50:c2:df:72:5a:a3:df:3b:eb:0b:39:eb:0b:
a8:71:7d:e7:ea:4b:42:fa:4d:41:df:c9:ad:69:e1:
91:fc:56:a7:c5:64:69:16:d6:76:e8:22:67:72:b0:
cb:56:b9:46:07:ad:e3:43:c6:ce:28:76:a1:61:c7:
66:2b:82:a6:fb:4b:7a:a7:ea:d5:1a:48:89:9e:69:
c1:eb:1f:8e:a7:68:8b:6b:53:bf:26:2d:06:f1:d9:
af:b4:57:f4:fd:fa:24:ad:1e:ae:87:e2:17:14:a5:
2d:d3:0b:19:67:d0:29:b8:7c:ea:e8:6f:e3:71:2c:
75:33:ff:4e:e6:6f:93:e5:c7:13:5d:c8:ba:af:b0:
23:03:46:65:61:b5:88:9e:37:ac:01:85:60:3f:63:
f8:ab:8a:d6:21:40:6e:4f:95:35:ec:28:b9:49:f5:
b8:ad:d4:cb:8b:f2:b4:5c:a8:c2:3d:4a:39:b0:c7:
c0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:78:62:84:89:C1:2C:BF:18:2C:6B:5C:39:2B:3E:0A:66:9E:10:EE
X509v3 Authority Key Identifier:
keyid:E1:65:34:3D:95:BD:4D:BC:30:F3:D7:22:49:54:1A:9D:47:E7:6D:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4WU0PZW9Tbww89ciSVQanUfnbZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/7d26b8-f747-4d9a-9aa2-6e2c053d9993/1/4WU0PZW9Tbww89ciSVQanUfnbZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:db:15:44:3e:d3:cd:7f:38:da:eb:3d:70:07:31:3e:a2:24:
b5:13:3c:01:6c:6b:e6:70:20:bf:17:e6:23:c5:0e:ba:9e:92:
bb:1c:c1:8f:2b:5b:51:fe:42:4b:fb:08:6f:30:c5:ab:fe:17:
fc:87:85:a2:46:ef:ef:e2:61:27:a7:bd:4e:15:0c:6d:83:02:
fb:d3:b8:9e:b9:51:b4:0e:0d:27:90:92:7f:0b:c4:f9:25:93:
0e:c5:5d:41:b8:f7:e2:8c:08:81:47:c6:ee:97:09:4a:ff:8a:
7c:c0:e2:8c:d7:ca:5d:58:95:d1:86:1a:77:12:61:8c:7c:02:
3c:ce:ac:ec:af:da:b7:47:e4:b8:8b:44:24:30:28:6c:cf:f2:
d8:61:a9:0b:39:71:77:6f:79:78:04:c2:1d:98:d0:1c:43:2d:
6b:bb:78:06:41:87:b6:3b:3f:43:2e:c8:a2:65:15:e9:c7:d7:
34:e1:4b:b0:b3:95:51:11:73:f7:b2:c5:4f:cf:3d:d3:43:17:
11:a6:f0:a3:dc:c7:ba:35:6a:c9:21:84:d6:b5:e5:82:25:3e:
1a:8f:ea:d7:d3:0e:be:c7:d9:e2:e8:cf:42:9b:e2:3b:ff:cd:
80:1d:09:cb:c6:70:0f:35:a5:fa:b5:e9:6d:46:4a:c6:a6:a2:
a0:42:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:24:34 2025 by rpki-client