Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
File: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft (raw, json)
Hash identifier: POjGbMwsZrKxk1OavM3N+HQWAPEwErSZ06VLWmhmv6g=
Subject key identifier: C8:F9:B2:FC:27:34:92:FF:FB:3E:92:93:1A:0E:09:A4:59:7C:88:F2
Authority key identifier: E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
Certificate issuer: /CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Certificate serial: 0199FC5881D7E957AD8E64BC89F7EB616ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
Manifest number: 0DC7
Signing time: Sun 19 Oct 2025 12:01:22 +0000
Manifest this update: Sun 19 Oct 2025 12:01:22 +0000
Manifest next update: Mon 20 Oct 2025 12:01:22 +0000
Files and hashes: 1: 4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl (hash: hvnHxxCrefz2uBiY8LQifwa62Em0ugOJdmAfWdWjHrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:81:d7:e9:57:ad:8e:64:bc:89:f7:eb:61:6a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02b7b307b8c96e6c77b5b8a783ff55e37907636
Validity
Not Before: Oct 19 12:01:22 2025 GMT
Not After : Oct 20 12:01:22 2025 GMT
Subject: CN=c8f9b2fc273492fffb3e92931a0e09a4597c88f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ca:21:7c:dd:9b:9f:54:41:49:80:c6:99:a2:
9a:93:2a:77:d0:56:03:b2:b6:f4:74:97:58:8e:19:
53:4a:f8:b4:98:62:e5:cc:50:b9:62:76:46:bb:98:
8b:8c:7c:39:f0:cc:a1:0b:13:fb:81:70:3d:eb:c6:
ee:48:74:c8:18:7e:70:3d:25:a0:78:1a:62:13:50:
7f:fa:08:78:64:f5:5a:1d:95:85:89:06:2f:af:de:
c6:4c:be:67:87:aa:49:d1:ec:6a:18:ac:40:d4:e9:
b0:74:d9:dd:d7:b1:8a:78:ec:f9:30:59:85:fe:ca:
9c:be:e8:4b:35:af:39:a4:59:dc:5b:0b:28:24:e3:
18:ba:92:71:cb:b4:4b:4e:ef:41:c4:c3:50:22:28:
16:a4:4e:9f:68:b4:e0:f2:77:0f:3e:f6:86:12:1b:
df:d0:30:c4:9d:da:15:e3:d4:99:21:77:b9:84:c5:
43:11:87:c5:f3:d6:ce:c2:20:87:d3:15:3d:a7:6f:
18:ec:ad:e7:05:2b:d9:73:6a:ae:e2:90:b6:af:27:
68:8e:00:94:40:61:8f:e4:ac:74:6c:0a:ff:b3:a4:
1d:86:6d:ac:03:b0:c1:de:ab:ed:ae:31:e6:7d:4f:
f6:07:b8:c5:e8:ba:c0:4f:d4:a6:db:15:bc:0e:70:
7f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F9:B2:FC:27:34:92:FF:FB:3E:92:93:1A:0E:09:A4:59:7C:88:F2
X509v3 Authority Key Identifier:
keyid:E0:2B:7B:30:7B:8C:96:E6:C7:7B:5B:8A:78:3F:F5:5E:37:90:76:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Ct7MHuMlubHe1uKeD_1XjeQdjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b51890-22f0-46f7-94f9-220ddbe2c09f/1/4Ct7MHuMlubHe1uKeD_1XjeQdjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:57:67:2c:09:74:0e:d7:e2:24:ac:44:4a:95:50:f4:37:6e:
e0:4e:58:49:4d:2a:af:47:c3:91:90:c3:7d:d0:10:22:8c:67:
8c:7d:53:6a:3b:bc:1c:01:f7:79:dd:2f:a7:05:5e:04:16:a7:
ed:a7:bb:ea:65:ab:ef:67:56:f4:09:dc:05:03:39:e3:16:77:
56:2c:34:c7:6e:2f:f0:19:4a:fb:d5:9e:83:f5:91:27:68:f9:
6a:62:e4:19:6f:0c:64:c1:36:a2:13:65:78:92:dc:08:eb:46:
05:1c:c3:9c:94:97:cf:68:c3:85:b7:3d:fd:41:c9:73:78:2c:
53:fe:e6:f0:98:5a:cc:28:99:12:89:a6:c0:04:74:27:79:22:
86:ee:8b:32:6e:43:19:b5:77:9e:40:49:c4:f1:6c:2c:3a:16:
b8:77:e7:1d:51:5d:8b:62:9c:e1:a1:0e:1a:6f:d6:e1:2a:2d:
d5:1d:89:5f:35:fb:f1:29:ef:59:05:3e:31:a9:86:1d:39:30:
9d:c0:62:f2:a1:1c:f7:6b:0d:cf:ea:e6:4c:b5:15:da:a6:8d:
62:4d:01:fa:b6:64:bd:de:e4:e6:4f:d3:d3:83:76:9c:2a:82:
53:dc:e9:90:23:32:57:ca:7e:87:a3:f0:b7:07:2d:65:91:95:
06:b9:be:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:33 2025 by rpki-client