Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier: ql6hX9Jvd+sQn9f4eM87BbbaFLrzyjzaRSqFHuCZE1c=
Subject key identifier: 07:5D:76:B5:26:ED:56:AE:77:CD:06:7C:AD:F0:E6:E4:0C:96:04:DA
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer: /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial: 019A006BE7EF039F7CADC7C91ED1E340A9B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number: 15DF
Signing time: Mon 20 Oct 2025 07:01:02 +0000
Manifest this update: Mon 20 Oct 2025 07:01:02 +0000
Manifest next update: Tue 21 Oct 2025 07:01:02 +0000
Files and hashes: 1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: 5T7d6CtRQx+ojYtFBE3vo/R6u7QXmYHT/nHpjZ2iB8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6b:e7:ef:03:9f:7c:ad:c7:c9:1e:d1:e3:40:a9:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Validity
Not Before: Oct 20 07:01:02 2025 GMT
Not After : Oct 21 07:01:02 2025 GMT
Subject: CN=075d76b526ed56ae77cd067cadf0e6e40c9604da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:d9:f1:69:6d:34:d5:72:e7:cc:67:f1:2f:
15:7b:27:4d:e2:52:4b:47:3f:2a:07:1f:b0:3c:95:
0e:92:c3:03:43:34:27:02:f2:1a:40:aa:cd:a3:a8:
ac:6e:21:64:e4:b2:33:94:2d:f7:9e:81:9e:d3:bc:
c1:e5:f3:7a:e8:33:9e:9b:90:dd:c8:bc:84:8e:fd:
66:19:0a:dc:76:3c:e7:18:a0:e8:58:a4:67:46:82:
14:84:1b:e6:b6:e2:43:37:0c:22:bd:fd:ac:01:01:
f4:b5:80:ef:67:8b:45:f6:47:db:5f:16:c8:d7:ab:
ea:70:e3:f4:87:21:d8:5a:95:0b:e1:bb:bd:0d:23:
3c:fb:06:8e:17:b9:ae:36:c3:e1:aa:d8:c6:72:4a:
de:93:0f:a4:7f:92:db:90:49:dd:a8:d4:ad:39:cd:
68:24:ea:e7:f0:38:83:4e:0d:08:2d:88:90:bc:75:
85:70:35:6a:a1:2a:cb:c4:69:a5:52:e2:07:7b:fc:
b2:f4:f1:b8:1b:83:f4:57:05:ff:58:45:0a:33:4a:
ac:21:15:48:3b:43:c8:a1:e5:90:7b:9c:05:af:94:
3f:1e:32:a0:4b:ee:45:df:ad:66:bc:5e:b1:0d:5f:
7e:64:34:b9:34:b3:ad:79:4d:01:10:a8:d6:73:8b:
4e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:5D:76:B5:26:ED:56:AE:77:CD:06:7C:AD:F0:E6:E4:0C:96:04:DA
X509v3 Authority Key Identifier:
keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:50:0c:bc:44:c6:de:ff:82:e3:d7:11:19:a9:fe:e3:85:2a:
b6:75:d8:20:df:10:1a:a6:5d:b4:3c:16:59:19:9f:5a:4a:78:
f3:1d:1e:89:64:ff:33:59:06:fc:fc:af:21:f2:c0:fb:df:62:
d2:c0:41:09:e8:f5:1b:74:08:9b:db:a3:0f:cb:cb:e3:f7:2f:
ba:c2:4c:d2:fa:49:d8:8a:af:b3:1c:5c:d5:c5:a5:d4:18:b1:
3f:70:6e:46:c5:36:d4:12:af:ea:73:61:4a:de:48:8c:22:3e:
19:1c:77:09:66:4e:c6:ab:98:68:d5:f7:94:ba:51:d6:81:66:
ab:ba:f4:59:e0:e0:d7:28:f4:a8:dd:73:a6:e1:dd:b8:b1:9a:
5e:e9:ba:cf:ef:16:a7:22:cd:7b:76:51:d0:4e:75:5b:c4:96:
e8:c5:14:03:c6:1f:cf:be:0a:76:cb:f2:bd:40:87:ee:40:05:
35:64:a1:b4:2c:d7:e2:ee:67:50:66:91:4e:aa:39:30:1f:43:
0d:52:49:c1:f5:7d:77:83:9c:3e:32:45:2b:8a:11:69:8d:28:
c4:d6:37:5b:d8:7a:be:ba:7d:30:c1:e7:6c:1d:86:d0:21:eb:
2d:cc:00:67:8a:b5:68:89:94:b7:38:de:a3:8d:90:c2:f3:e5:
7d:35:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:56 2025 by rpki-client