
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
File: 4fI_OJG9feF53kEDCi_R-ljkPRc.mft (raw, json)
Hash identifier: YhtuCh64yJmFb4+DQRUB41kGdc6pHJfIlw7Ok4jTupY=
Subject key identifier: 33:68:35:42:FD:5E:6C:2B:67:65:CA:F2:51:81:88:42:32:9C:7A:D8
Authority key identifier: E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
Certificate issuer: /CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Certificate serial: 0199FC21BC1E698FB4EE1738812AF2FD9217
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
Manifest number: 04FE
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 4fI_OJG9feF53kEDCi_R-ljkPRc.crl (hash: Zea17v5mFei9JyA64AqxQEMeq7x07t7HncU7wuIDIj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bc:1e:69:8f:b4:ee:17:38:81:2a:f2:fd:92:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f23f3891bd7de179de41030a2fd1fa58e43d17
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=33683542fd5e6c2b6765caf251818842329c7ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:17:54:90:0a:f1:9f:7a:ec:a6:75:3e:19:ed:
4a:20:a0:42:1d:84:4b:ce:81:4c:e8:43:b2:ef:9c:
ad:6c:27:13:e8:91:27:5c:5f:35:07:c0:bb:07:0b:
37:a6:7b:73:e8:97:bc:f0:ba:42:04:38:0c:37:19:
f4:39:f9:6b:7a:07:a4:49:21:9a:fe:dd:2c:b9:59:
f5:ef:3f:53:c1:7f:ca:74:60:4d:29:87:50:e5:fd:
d3:70:2d:ce:c2:18:a1:70:e9:b9:76:03:d9:bc:dd:
7f:0a:82:74:7f:3a:39:62:26:01:84:15:db:00:94:
5f:de:39:ee:27:3d:06:d7:5e:d0:1c:62:bb:de:75:
18:30:fa:77:32:15:7c:3b:25:9e:1a:60:ef:0c:34:
c6:ae:36:3b:ae:62:00:d7:39:8b:03:a5:1d:3c:6b:
b1:4c:fc:23:3b:ea:b4:ab:65:31:44:8b:b3:2d:c4:
1f:90:fe:34:d0:dd:eb:f8:4e:66:bc:a7:d3:e7:a2:
6f:06:80:7a:6f:50:09:a1:b2:48:dc:d7:48:44:dc:
dc:7e:41:cc:8b:8e:e2:fb:dd:66:44:91:10:8c:bf:
a6:9f:f0:48:4d:dd:f4:b7:02:66:57:ad:85:e9:6c:
14:5f:40:be:41:dd:df:80:67:e7:7e:65:41:4e:51:
fd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:68:35:42:FD:5E:6C:2B:67:65:CA:F2:51:81:88:42:32:9C:7A:D8
X509v3 Authority Key Identifier:
keyid:E1:F2:3F:38:91:BD:7D:E1:79:DE:41:03:0A:2F:D1:FA:58:E4:3D:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fI_OJG9feF53kEDCi_R-ljkPRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c3cd6a-c6c1-4087-96f6-861763b5f065/1/4fI_OJG9feF53kEDCi_R-ljkPRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:17:67:c8:cb:b2:55:54:5a:05:e1:85:78:dd:4a:8c:49:c2:
72:27:77:7c:10:78:80:ee:1f:55:24:3b:d8:f2:76:e7:0f:b7:
23:1f:02:df:af:54:cf:da:fb:53:6b:36:66:18:de:6f:fc:8f:
e0:cc:45:30:b4:26:cf:57:d6:6a:39:7a:4a:b9:92:9b:ac:da:
3c:d4:ad:26:c0:2f:33:62:fc:8a:22:0e:3c:89:6a:e4:0d:c5:
b2:f0:4e:ab:91:79:ca:86:1c:8e:5a:51:69:e5:ac:ed:15:5e:
97:1c:c1:fe:7a:44:f6:ca:32:45:57:e2:8c:46:22:db:31:52:
16:51:7f:ae:0d:23:2d:c8:f2:2d:07:5e:3d:3f:9c:f5:47:9d:
63:b9:22:9f:1d:93:12:44:8d:62:79:5b:1e:f2:ed:ab:d1:3b:
5e:05:b5:8b:2d:85:d0:49:30:cf:5a:ae:e7:2a:66:df:1b:06:
1a:00:c3:5f:5f:b3:6c:1f:70:62:72:22:7a:ec:ea:48:13:3e:
8c:d6:51:25:0b:1b:31:33:73:60:08:2c:80:84:dd:f7:3a:93:
d1:33:fb:94:e9:89:49:b4:80:80:c3:6d:6e:3b:98:1a:ba:2d:
43:de:a8:dd:bb:24:26:5c:3d:59:95:5f:07:23:69:98:47:cb:
1f:98:1e:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:22:17 2025 by rpki-client