Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
File: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft (raw, json)
Hash identifier: q6vFy76cokVup9W/WAfMXP12WRuLsmfegbwd+N8PjyI=
Subject key identifier: 99:E7:48:EB:0A:45:D9:02:31:50:B4:B3:07:CB:EB:33:CD:E3:EF:80
Authority key identifier: E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
Certificate issuer: /CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Certificate serial: 0199FFFE80FF31B77C7ED04EE004266E65F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
Manifest number: 0AE5
Signing time: Mon 20 Oct 2025 05:01:33 +0000
Manifest this update: Mon 20 Oct 2025 05:01:33 +0000
Manifest next update: Tue 21 Oct 2025 05:01:33 +0000
Files and hashes: 1: 4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl (hash: ik80bliUlJFG4gQCk02/wIITFSXeFzxIrqU6zpAiVhA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:80:ff:31:b7:7c:7e:d0:4e:e0:04:26:6e:65:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e00a6f2e633fcf3adef8725cc5be0ea7915dd40c
Validity
Not Before: Oct 20 05:01:33 2025 GMT
Not After : Oct 21 05:01:33 2025 GMT
Subject: CN=99e748eb0a45d9023150b4b307cbeb33cde3ef80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:42:28:3a:54:8c:43:1e:ef:6d:08:4e:b5:6c:
22:eb:e5:53:69:67:cb:7a:d8:2a:a6:37:3a:b0:08:
4d:a5:b4:42:53:22:70:0d:b6:f2:6f:d2:f4:00:1e:
aa:64:11:60:18:ae:69:84:1d:10:7e:17:41:33:d0:
96:78:11:40:4e:56:37:d4:27:8e:df:63:ef:33:6e:
eb:cc:ed:66:7e:19:3b:38:57:37:67:bc:80:da:16:
e8:6e:03:33:e6:67:cd:4b:3e:4c:dd:2c:7c:8a:0f:
59:bc:21:0f:f7:6c:29:d2:43:4f:f7:18:15:f6:44:
3c:96:70:60:cc:88:29:f3:5e:83:b4:76:96:d2:a2:
5e:8a:fa:1d:e1:bd:51:c3:a2:7a:04:e1:62:0c:7e:
0c:99:d1:0b:04:dc:e4:58:c5:83:73:08:99:e7:d3:
9a:5c:bb:63:ad:c0:6d:89:f5:5e:d3:ed:8a:63:f2:
e1:43:c3:f8:48:5c:56:8f:c6:49:eb:1b:48:50:9b:
71:af:5a:e4:86:3a:1e:d8:66:a8:26:19:6c:76:90:
91:5b:d4:e8:43:a7:aa:13:98:47:fc:7e:45:e8:2e:
59:78:28:2c:48:cc:eb:1f:1d:ff:d3:12:da:d2:68:
73:ae:1b:b6:63:a0:69:19:08:5b:57:be:1f:51:16:
dd:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:E7:48:EB:0A:45:D9:02:31:50:B4:B3:07:CB:EB:33:CD:E3:EF:80
X509v3 Authority Key Identifier:
keyid:E0:0A:6F:2E:63:3F:CF:3A:DE:F8:72:5C:C5:BE:0E:A7:91:5D:D4:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c0443e-9608-4196-9625-d096f1e25e97/1/4ApvLmM_zzre-HJcxb4Op5Fd1Aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c0:bf:bc:bd:8d:18:10:91:56:3a:a5:dd:4e:e6:ab:55:3c:
95:1a:13:df:53:d8:e1:c3:1f:1f:56:03:17:ae:f4:61:dc:91:
7e:85:62:b9:e0:5a:4a:c8:6f:fe:57:3a:18:20:00:02:4b:66:
40:87:f5:9c:0a:1d:0e:c0:c4:3a:74:75:c0:d9:e3:7a:6f:f7:
81:e1:b5:ed:67:b3:2d:fd:3d:5e:b3:9e:0d:1d:4b:88:e0:95:
d5:70:28:57:29:0f:a7:7e:3e:85:ef:c4:fd:0b:49:d8:4b:40:
39:1c:1a:bc:41:24:bf:32:41:46:54:ba:49:0e:fd:0e:fb:d5:
bb:70:f7:0e:fe:32:d5:c9:b5:e2:67:aa:bb:2f:e8:2d:e4:cb:
83:43:57:11:fb:23:4a:a6:a2:bf:99:33:58:16:cf:9d:d8:53:
40:94:b2:69:65:9a:8d:1b:b9:0a:a3:e0:3f:87:1e:a8:68:f6:
6c:7f:c6:a3:fd:b6:4c:7e:22:c5:9d:b4:4e:89:05:4d:dc:8c:
5b:f4:53:0b:36:b5:5e:78:99:2c:f3:8a:d8:27:8c:11:42:f9:
45:18:88:2e:d6:5e:2b:5d:67:27:91:89:8b:79:63:28:ee:79:
b3:da:61:98:ae:d3:e1:39:f3:9f:d4:3d:d4:c2:1c:a4:46:11:
4a:7a:01:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 09:24:53 2025 by rpki-client