Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
File: 4N8zRFExdiUqLLaQvPcF1kmBEfU.mft (raw, json)
Hash identifier: +0vbved93O7VjBDn9lQmYr/NStfvhx2oHOKZ1+uBpvE=
Subject key identifier: F4:1F:2F:9E:AA:26:D5:2F:BA:29:2B:3F:77:58:6C:55:6B:C3:BE:FE
Authority key identifier: E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
Certificate issuer: /CN=e0df3344513176252a2cb690bcf705d6498111f5
Certificate serial: 0199FF227366DE59060A1120C5468737BA58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
Manifest number: 09FE
Signing time: Mon 20 Oct 2025 01:01:11 +0000
Manifest this update: Mon 20 Oct 2025 01:01:11 +0000
Manifest next update: Tue 21 Oct 2025 01:01:11 +0000
Files and hashes: 1: 4N8zRFExdiUqLLaQvPcF1kmBEfU.crl (hash: ZFonTtSYqmFHBpxmzRPDHpQAa1s+czlEi3NP87O+8KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:73:66:de:59:06:0a:11:20:c5:46:87:37:ba:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0df3344513176252a2cb690bcf705d6498111f5
Validity
Not Before: Oct 20 01:01:11 2025 GMT
Not After : Oct 21 01:01:11 2025 GMT
Subject: CN=f41f2f9eaa26d52fba292b3f77586c556bc3befe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:85:0d:43:ba:92:b7:3c:49:19:92:02:d6:4e:
4b:3b:eb:eb:86:da:d9:f8:99:c2:17:ab:5b:2d:4e:
00:75:a4:f4:24:d6:b7:4e:3e:59:63:b9:37:d4:6b:
70:ba:cb:0c:a5:f9:4b:fd:73:4f:eb:e6:24:84:e6:
32:4a:00:b9:02:db:e6:74:14:fc:9e:1e:5d:9f:03:
cf:85:c0:6c:65:dc:c0:20:99:e5:18:c4:9d:09:ed:
54:b5:bc:5b:ed:b4:67:d8:6c:a0:fa:f6:1e:58:35:
db:a8:c9:88:5c:20:f7:a6:89:53:6a:35:e7:b6:66:
83:4b:f4:e7:79:09:a4:a0:a4:3b:52:4b:e0:7e:64:
52:6f:99:29:12:79:5c:11:e6:6a:ac:ac:ff:40:af:
69:94:fb:ad:a2:7c:2f:07:30:09:56:fe:03:13:37:
47:f7:a4:de:c0:4b:0f:f1:8b:c0:f5:b8:35:cc:61:
5a:38:60:2a:7e:33:4a:cf:2d:eb:68:bd:43:f2:38:
ff:da:a0:cd:22:b8:83:8d:91:a5:89:2d:9c:62:43:
52:6f:74:86:b0:a7:86:93:72:65:d0:bc:c5:73:2e:
73:19:af:71:28:4b:44:f6:72:72:c8:a3:1f:35:37:
45:c0:49:d2:81:8a:ac:1b:b6:6a:b6:97:81:7e:c4:
0a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:2F:9E:AA:26:D5:2F:BA:29:2B:3F:77:58:6C:55:6B:C3:BE:FE
X509v3 Authority Key Identifier:
keyid:E0:DF:33:44:51:31:76:25:2A:2C:B6:90:BC:F7:05:D6:49:81:11:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N8zRFExdiUqLLaQvPcF1kmBEfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/cc3b6e-b749-45f1-a868-25e21c9e7de9/1/4N8zRFExdiUqLLaQvPcF1kmBEfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ff:ed:72:74:e1:db:a2:23:c0:45:6b:4d:e2:1e:25:23:d9:
25:27:5a:2b:d6:9f:54:d0:ec:f8:e8:aa:d7:40:23:c2:1e:83:
98:7f:72:0b:c0:34:f8:4d:8e:e4:09:59:6e:a8:53:3d:6f:21:
0a:74:bf:08:8a:19:1b:92:be:4d:0b:f7:f0:5d:14:7a:12:12:
73:a1:de:19:74:c0:e9:dd:53:52:2d:a8:33:aa:79:e3:ec:82:
62:4d:0d:74:4f:68:cc:d1:bc:57:b0:ed:8d:c3:27:55:6e:56:
f6:7a:2a:fa:87:53:73:97:59:a4:56:d0:cd:42:66:38:9a:6f:
f7:32:49:d4:9a:67:4a:41:96:9a:b1:da:97:01:37:a2:d5:33:
74:d7:05:b3:2a:f1:42:6a:15:fb:59:57:49:a1:b0:ec:69:3e:
6a:8b:71:5d:19:30:1d:a3:b5:f6:a3:b1:62:c0:5f:9c:c5:bd:
38:b6:b6:11:94:19:46:40:c6:d4:d6:45:0c:e1:74:32:3c:4f:
39:a3:a6:b6:58:d5:7a:a5:ac:4a:dd:92:c3:6e:55:6d:7f:9d:
c7:a5:90:95:34:50:ba:4d:58:ef:6d:6c:b6:40:7f:a4:97:2a:
04:5a:03:4c:35:9c:30:09:2a:c4:05:fe:44:57:22:cf:0e:02:
23:39:ee:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:46 2025 by rpki-client