Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
File: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft (raw, json)
Hash identifier: yggMreC/gAs5ipFzclSnCAWOdeQB3rLypw2u3BZEkT8=
Subject key identifier: 0D:89:20:6F:C4:25:13:00:49:BF:91:E5:E6:70:5F:2E:32:07:F0:E3
Authority key identifier: E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
Certificate issuer: /CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Certificate serial: 0199FBEB7AD161C64DFB78B1720B0B27155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
Manifest number: 10FC
Signing time: Sun 19 Oct 2025 10:02:17 +0000
Manifest this update: Sun 19 Oct 2025 10:02:17 +0000
Manifest next update: Mon 20 Oct 2025 10:02:17 +0000
Files and hashes: 1: 4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl (hash: yB+me5VUsy4J7H45sP2fNs8DCJDcSYwSqRiekGoHfe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:7a:d1:61:c6:4d:fb:78:b1:72:0b:0b:27:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e104dee9255bcc8ca4e0f5ac29d09826e023a0d1
Validity
Not Before: Oct 19 10:02:17 2025 GMT
Not After : Oct 20 10:02:17 2025 GMT
Subject: CN=0d89206fc425130049bf91e5e6705f2e3207f0e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e8:35:f3:f6:c2:3f:54:2c:d6:e8:92:8d:6d:
9d:f6:86:08:5d:ee:fb:b4:16:6e:dd:86:bb:fb:10:
87:77:97:20:3c:d9:c6:78:6c:7c:c7:c6:ed:75:45:
93:f9:35:1b:ad:04:f8:d2:36:7a:6a:6f:a1:19:92:
e9:d9:ce:d9:1c:d3:dc:f2:c5:66:7d:17:37:e6:d3:
73:18:90:fd:7d:4b:d5:65:04:47:50:24:00:80:c4:
99:f5:0c:75:07:f5:c1:b0:35:bf:84:11:8c:87:ad:
06:c0:df:f5:fd:1b:df:1c:9a:e9:6e:dc:50:5c:1a:
87:c5:c0:50:ca:6b:c6:13:a6:0f:96:74:31:16:68:
bc:0f:2a:8b:8c:1b:9a:77:58:c7:84:35:72:9c:d6:
96:75:a9:4b:52:bc:cb:bd:3e:0b:a8:33:1e:7f:c8:
3d:f6:5c:d7:7c:1f:cc:c8:14:26:1c:61:23:fd:9f:
09:da:97:a1:08:84:1e:9b:bb:41:97:9c:c9:f6:6f:
97:fa:cf:ed:49:74:3e:9d:9a:cc:a3:40:e5:c5:68:
e4:b0:3d:f9:72:73:71:4d:b9:fe:ae:9e:7f:76:19:
f6:12:da:8c:7c:57:00:9b:3a:be:15:16:69:ff:fb:
b1:7e:b2:a7:e6:b6:bd:2f:62:91:ec:4c:19:cf:7b:
2e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:89:20:6F:C4:25:13:00:49:BF:91:E5:E6:70:5F:2E:32:07:F0:E3
X509v3 Authority Key Identifier:
keyid:E1:04:DE:E9:25:5B:CC:8C:A4:E0:F5:AC:29:D0:98:26:E0:23:A0:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QTe6SVbzIyk4PWsKdCYJuAjoNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/b69ce9-4571-494e-8bb2-761bb46077f7/1/4QTe6SVbzIyk4PWsKdCYJuAjoNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:07:85:47:0b:d6:0a:3d:2c:b6:11:1e:5c:c8:fc:f8:26:b3:
1c:da:66:ba:d9:f0:74:72:fe:59:17:5d:6c:bd:ea:34:af:aa:
3c:95:25:c0:b1:4a:48:e6:86:89:af:05:85:15:a5:05:91:55:
90:72:8b:a5:f7:0f:a1:47:27:16:75:02:ba:c6:d7:b7:fb:b8:
7d:f6:42:69:7d:70:e7:8c:bd:6a:41:49:48:76:a7:7c:82:aa:
4b:39:be:36:16:e0:b7:be:54:c4:47:04:4f:1e:00:1b:fa:ed:
10:d0:68:c3:15:2c:d7:e3:19:9e:5d:29:f4:03:e0:4a:b0:3d:
42:77:62:6a:98:91:f5:be:fa:7d:fe:b7:20:ec:27:66:74:b0:
ca:c8:6d:0d:ac:6e:da:ab:b4:8f:af:a9:75:dd:7d:bc:8f:db:
cc:c8:73:a2:48:3a:2f:0c:6e:d8:b5:23:72:50:7e:08:c5:d7:
6d:3c:a4:0d:21:ce:40:34:95:0a:33:ef:d1:ae:b1:95:4f:bb:
a5:21:36:bb:91:44:56:8a:70:d4:a9:d8:b2:73:74:b0:31:f8:
77:a3:2c:b7:a2:5b:f9:b5:4d:08:c3:56:17:b8:f7:df:bb:f8:
86:e8:4c:f1:86:19:65:69:f2:b7:8d:18:4f:9e:3a:4d:60:13:
47:46:23:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:36:16 2025 by rpki-client