Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
File: 4VaISXYX6PCmBpCvqz75TBGrbXI.mft (raw, json)
Hash identifier: ci5CUuD5OtmBd6n+Dqahnck0/RnapeoNsJRYV6vePRs=
Subject key identifier: B9:68:A7:C5:9B:F8:9B:93:11:99:EB:CF:A6:60:EC:ED:75:2B:0B:6A
Authority key identifier: E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
Certificate issuer: /CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Certificate serial: 0199FFC7792161C6D4B297074BD507867DE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
Manifest number: 019F
Signing time: Mon 20 Oct 2025 04:01:26 +0000
Manifest this update: Mon 20 Oct 2025 04:01:26 +0000
Manifest next update: Tue 21 Oct 2025 04:01:26 +0000
Files and hashes: 1: 4VaISXYX6PCmBpCvqz75TBGrbXI.crl (hash: ZowYaKFTQTFQYlcSi2nY0MRmtFvjWhsEwJLcg7VCrMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:79:21:61:c6:d4:b2:97:07:4b:d5:07:86:7d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15688497617e8f0a60690afab3ef94c11ab6d72
Validity
Not Before: Oct 20 04:01:26 2025 GMT
Not After : Oct 21 04:01:26 2025 GMT
Subject: CN=b968a7c59bf89b931199ebcfa660eced752b0b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:c9:6a:27:7b:4a:2b:22:c1:04:f2:85:d1:
2e:c2:ad:c7:c0:d8:75:95:b5:8f:a0:74:0e:62:e2:
92:33:4f:34:7b:f5:b6:a3:d0:9b:95:af:39:fd:e2:
52:09:3c:d3:8a:fe:ee:60:94:05:9f:48:e4:47:b3:
35:2d:1d:65:67:4a:61:d4:0b:f6:fd:cb:8f:68:b4:
99:33:67:03:7a:80:40:be:89:ef:f3:38:ba:c2:44:
8c:fb:1d:49:c3:41:9c:d4:4b:b5:41:cb:b0:5e:04:
43:cc:c4:99:ac:88:88:a2:bf:36:89:96:a0:92:2d:
39:b4:94:6d:06:df:40:8f:de:91:58:e9:61:f3:20:
3d:12:c4:ad:29:5a:6b:57:ff:26:0c:35:e5:9b:cd:
ce:f5:40:ee:2f:fc:a6:14:3e:7f:97:9d:5b:41:f9:
e2:85:7e:84:4d:f2:c0:c8:00:bf:ab:32:be:5f:93:
66:b5:d9:d8:66:fe:a5:30:87:65:2f:18:05:2a:4b:
5c:4c:ec:76:57:07:a7:f2:be:44:4a:61:f7:9e:1b:
b6:d9:30:e8:42:26:9b:95:82:3a:2b:77:9d:89:42:
4b:e6:f4:8d:66:f3:17:8b:8b:d9:fd:11:e9:c1:b1:
c3:e2:20:f3:f0:28:c9:b5:64:9b:16:1b:7b:25:97:
5d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:68:A7:C5:9B:F8:9B:93:11:99:EB:CF:A6:60:EC:ED:75:2B:0B:6A
X509v3 Authority Key Identifier:
keyid:E1:56:88:49:76:17:E8:F0:A6:06:90:AF:AB:3E:F9:4C:11:AB:6D:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VaISXYX6PCmBpCvqz75TBGrbXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6c8446-79fd-456e-9e6b-ca3bb1dfdaa6/1/4VaISXYX6PCmBpCvqz75TBGrbXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d8:a1:d7:05:b6:5e:27:ea:8a:e4:10:d0:7e:e8:2b:6f:dd:
e5:28:06:23:d2:5e:ed:9c:ea:b6:94:4e:cd:48:71:5e:05:a3:
e7:c9:24:05:6d:80:fa:2e:6d:c2:16:ea:14:1e:a0:31:53:6f:
24:b6:1f:1a:35:c7:7a:c8:e2:93:e2:16:40:cc:b7:68:40:69:
ec:3c:f1:be:54:63:52:2a:e9:a5:42:23:ce:e3:7d:1b:8e:be:
a6:f4:1d:ea:77:fd:b9:34:1c:a9:6a:fb:07:5e:a3:fa:3d:58:
67:1f:5d:1b:66:45:ed:4a:f5:ad:9c:79:b3:7c:f9:86:68:58:
59:20:e4:9b:10:11:dc:97:4b:4e:c2:b6:55:46:43:2b:2e:ff:
39:a2:14:48:95:9a:61:79:f6:c4:9c:17:7c:d4:57:bb:fb:34:
22:74:96:0d:0f:83:e4:67:f5:48:b4:b1:7d:94:1a:f5:8e:da:
de:ec:be:1f:c6:ae:c8:1b:64:1e:5d:90:c6:02:00:62:49:75:
01:b3:b9:82:a6:a1:45:60:1e:52:8c:34:94:5a:d0:b7:af:d7:
ff:3e:9a:46:53:bb:67:4f:62:af:5c:08:0e:49:aa:89:99:fc:
f4:8a:05:cc:3d:12:7f:1b:70:8e:42:d6:77:62:4b:aa:aa:b0:
6a:67:73:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:24:13 2025 by rpki-client