Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: szmrl12eopxrily7VXrfh/AzCSV0VEJGpZVFidMzRdo=
Subject key identifier: 1E:7B:3F:2E:76:B7:DD:26:32:28:AA:DD:58:A5:E0:7B:30:F0:D1:6F
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 0199FBEBF631D6239B899FD299F9A8A5B449
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 08F1
Signing time: Sun 19 Oct 2025 10:02:49 +0000
Manifest this update: Sun 19 Oct 2025 10:02:49 +0000
Manifest next update: Mon 20 Oct 2025 10:02:49 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: 28FN3pvO8HPx4JD/C88e7HDw04kV9ADU7XVIoa5d0Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f6:31:d6:23:9b:89:9f:d2:99:f9:a8:a5:b4:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Oct 19 10:02:49 2025 GMT
Not After : Oct 20 10:02:49 2025 GMT
Subject: CN=1e7b3f2e76b7dd263228aadd58a5e07b30f0d16f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:59:da:04:e6:eb:ee:e9:f4:45:6d:d1:37:08:
ae:28:6b:e8:2f:54:f6:65:f0:0a:99:d3:7b:2b:cd:
02:59:e5:ca:12:45:4c:f6:ca:c1:ad:d2:3b:90:ca:
3b:74:7f:d8:59:2a:1b:a0:95:1f:dd:fd:01:1c:8d:
cb:f9:9a:f1:b5:f5:12:1d:56:6d:52:06:b5:57:cc:
0c:2b:cc:a4:bc:3b:0f:36:c6:db:83:8f:d7:6a:ae:
f2:0c:4e:d4:9c:ce:cf:c4:95:bf:da:d0:26:50:2e:
2f:37:80:be:6f:53:45:f1:42:97:6c:d9:12:46:98:
41:1c:ef:1d:f7:f1:e3:46:ec:2b:2f:74:67:f0:d9:
b4:78:6a:e4:d9:a5:f1:fb:4c:07:50:25:9d:e9:36:
88:e5:e5:82:e8:ed:2e:98:10:75:48:b2:81:39:e7:
1b:1a:32:f4:49:e8:54:19:e0:4b:dd:23:c9:45:49:
3a:93:e3:86:b5:22:1e:d3:16:db:15:b4:8f:3f:7d:
f7:16:43:fb:59:60:b9:29:01:41:29:32:c8:80:39:
7b:96:a1:01:5b:39:63:c4:49:79:e1:44:dc:65:b2:
ab:bb:d2:cf:0c:16:37:b1:33:07:9d:2d:c8:a0:0a:
33:d9:4f:38:bb:90:79:de:c0:5e:0a:1d:27:5e:48:
f8:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:3F:2E:76:B7:DD:26:32:28:AA:DD:58:A5:E0:7B:30:F0:D1:6F
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:eb:dc:53:54:29:b4:96:5d:aa:5b:82:44:e3:f5:57:41:4f:
4b:ab:1f:05:ab:98:3b:0e:c0:4e:5b:c7:b8:49:72:f8:05:4f:
46:fa:8a:5b:23:50:94:85:93:f4:a4:cf:48:64:e0:e7:98:96:
f4:09:7d:cc:88:65:8d:4d:e1:e3:18:c8:1c:4a:5b:cc:81:80:
02:a4:16:c8:00:7d:46:ab:9a:ee:36:6e:1b:c4:d9:87:97:a4:
7f:90:04:7d:46:0a:e6:b5:8b:41:a2:c6:48:13:15:8d:98:b1:
d8:21:1f:86:b3:93:be:d0:b8:1d:72:c4:e2:08:84:8a:03:48:
9b:28:25:99:b8:c5:de:b4:11:be:2f:29:fa:58:eb:59:ff:99:
15:83:95:e7:1d:f1:e5:7c:94:ce:08:1e:03:fd:c8:11:ba:bb:
59:b7:0f:6b:a4:1e:42:71:1a:7e:72:09:8a:8c:00:01:53:e3:
21:4f:4c:bc:cb:73:79:1c:22:13:2f:81:24:de:a4:95:c3:4e:
32:bd:55:0a:7e:b8:87:1d:0a:b1:3e:7f:5e:72:07:85:a1:42:
86:bd:f9:99:e8:bf:84:71:43:1e:56:29:cc:4c:2f:e3:01:17:
e1:1c:63:4e:a9:c1:45:32:b4:41:7e:fa:17:27:b0:49:fb:4c:
0e:48:20:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn76/Yx1iObiZ/SmfmopbRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZTFlYjAyMGFiNmE1NDJmNjBiNTg1NzY5ODcyZDlmMDYx
N2FmMjYwHhcNMjUxMDE5MTAwMjQ5WhcNMjUxMDIwMTAwMjQ5WjAzMTEwLwYDVQQD
EygxZTdiM2YyZTc2YjdkZDI2MzIyOGFhZGQ1OGE1ZTA3YjMwZjBkMTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+FnaBObr7un0RW3RNwiuKGvoL1T2
ZfAKmdN7K80CWeXKEkVM9srBrdI7kMo7dH/YWSoboJUf3f0BHI3L+ZrxtfUSHVZt
Uga1V8wMK8ykvDsPNsbbg4/Xaq7yDE7UnM7PxJW/2tAmUC4vN4C+b1NF8UKXbNkS
RphBHO8d9/HjRuwrL3Rn8Nm0eGrk2aXx+0wHUCWd6TaI5eWC6O0umBB1SLKBOecb
GjL0SehUGeBL3SPJRUk6k+OGtSIe0xbbFbSPP333FkP7WWC5KQFBKTLIgDl7lqEB
WzljxEl54UTcZbKru9LPDBY3sTMHnS3IoAoz2U84u5B53sBeCh0nXkj4BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB57Py52t90mMiiq3Vil4Hsw8NFvMB8GA1UdIwQY
MBaAFOHh6wIKtqVC9gtYV2mHLZ8GF68mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAt
YzgzNWU1ZGFhZjI0LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9lZWYzNjktNmIxMi00Nzg2LTk3ZTAtYzgzNWU1ZGFhZjI0
LzEvNGVIckFncTJwVUwyQzFoWGFZY3Rud1lYcnlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnevcU1Qp
tJZdqluCROP1V0FPS6sfBauYOw7ATlvHuEly+AVPRvqKWyNQlIWT9KTPSGTg55iW
9Al9zIhljU3h4xjIHEpbzIGAAqQWyAB9Rqua7jZuG8TZh5ekf5AEfUYK5rWLQaLG
SBMVjZix2CEfhrOTvtC4HXLE4giEigNImyglmbjF3rQRvi8p+ljrWf+ZFYOV5x3x
5XyUzggeA/3IEbq7WbcPa6QeQnEafnIJiowAAVPjIU9MvMtzeRwiEy+BJN6klcNO
Mr1VCn64hx0KsT5/XnIHhaFChr35mei/hHFDHlYpzEwv4wEX4RxjTqnBRTK0QX76
FyewSftMDkggFw==
-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:17 2025 by rpki-client