Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
File: C4JANE7t1v9gI0SCv8MAHW4boJk.mft (raw, json)
Hash identifier: /CSDtrDZi1axaw14y9aAV7TauUYIRE3AhRKaGqzD6oQ=
Subject key identifier: D5:25:CC:36:A9:9A:7D:2F:D9:44:48:98:45:90:B6:88:0A:CA:35:3E
Authority key identifier: 0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
Certificate issuer: /CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Certificate serial: 019A00DA6FDA343A546B2AE9022439A4D93A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
Manifest number: 0113
Signing time: Mon 20 Oct 2025 09:01:46 +0000
Manifest this update: Mon 20 Oct 2025 09:01:46 +0000
Manifest next update: Tue 21 Oct 2025 09:01:46 +0000
Files and hashes: 1: C4JANE7t1v9gI0SCv8MAHW4boJk.crl (hash: 5ersDpwy0EdISu+xWmgnLIh0va/Zdr4LL+G4biEBGMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:da:6f:da:34:3a:54:6b:2a:e9:02:24:39:a4:d9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8240344eedd6ff60234482bfc3001d6e1ba099
Validity
Not Before: Oct 20 09:01:46 2025 GMT
Not After : Oct 21 09:01:46 2025 GMT
Subject: CN=d525cc36a99a7d2fd94448984590b6880aca353e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:44:59:a8:c7:d1:b6:04:eb:3e:bf:19:03:b0:
c7:29:17:14:0d:ee:fb:5c:6e:96:c9:92:ac:c7:a3:
e7:a3:5d:23:f8:4f:32:3f:99:34:e1:e4:fd:7e:94:
2e:86:7c:8f:da:7e:e2:8a:03:a2:9a:f1:80:b3:11:
4a:d6:2a:58:ec:4a:5e:b7:a8:1d:2c:8a:00:80:4d:
cb:1c:34:aa:c2:ae:ea:20:e6:f7:8f:c7:2c:ac:a3:
9c:d9:43:e3:65:b4:54:2d:f0:0d:85:f8:15:46:51:
f5:8c:33:d5:ea:0e:32:b2:4d:a8:97:07:2e:9d:71:
05:68:65:c8:10:68:07:33:e4:0d:a6:4d:7d:09:f0:
7e:6f:90:ac:88:d9:e3:42:b4:bb:a9:6e:a9:a4:12:
8e:d8:c5:5c:e3:2f:0b:7d:bf:b8:22:53:13:d9:99:
bf:86:14:0e:2e:ff:85:f5:2f:46:7b:b8:65:75:f7:
1a:44:b7:1e:d7:cc:ce:68:c9:7f:69:89:0f:be:19:
2a:9f:89:8a:84:07:0e:21:30:af:a3:41:f3:70:51:
13:aa:76:ae:a6:74:86:e9:e6:58:b5:59:1d:4e:85:
3a:43:5c:c9:d6:39:74:b1:b5:29:2d:8b:c4:2c:9a:
67:ee:dc:9a:f0:d3:6e:b3:41:41:52:62:d0:f6:6e:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:25:CC:36:A9:9A:7D:2F:D9:44:48:98:45:90:B6:88:0A:CA:35:3E
X509v3 Authority Key Identifier:
keyid:0B:82:40:34:4E:ED:D6:FF:60:23:44:82:BF:C3:00:1D:6E:1B:A0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4JANE7t1v9gI0SCv8MAHW4boJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/f11418-30b8-4657-a6ce-57b048c33b62/1/C4JANE7t1v9gI0SCv8MAHW4boJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:40:72:c7:41:c5:5d:3b:99:67:3b:28:e7:e5:36:81:5c:58:
51:e7:ba:5e:57:0a:8b:e8:1f:78:c4:c2:bb:38:2d:8f:cf:79:
06:16:4a:39:fa:5e:99:dc:6e:4a:56:79:92:af:51:2e:d9:2c:
04:71:31:fc:4c:05:71:c3:e3:51:5b:e2:a1:f9:96:ab:19:d0:
57:3a:c8:59:58:9c:5e:8f:72:c1:b1:75:74:0c:09:4b:92:ea:
5c:f1:c2:6d:0c:99:97:f7:29:b6:6b:ce:12:07:bb:43:8e:a5:
f9:82:e1:2f:6f:a3:5c:4a:7b:64:07:c1:7c:a6:f3:c0:c8:c3:
3c:2d:97:f8:94:59:b1:9b:c1:36:18:a8:6d:c4:0f:ff:c5:a6:
9d:05:26:53:8f:02:83:98:84:12:86:43:e0:1f:f0:a5:a2:f4:
c3:b7:8b:41:b6:aa:60:10:af:fe:4a:cf:6a:77:48:3f:79:a0:
0e:ed:8e:83:b9:ec:ec:a8:a0:9c:93:d8:30:1c:37:ff:54:41:
ee:3b:08:af:f0:aa:90:64:e4:e4:43:e0:f2:0c:12:6b:8b:01:
08:2c:e2:9b:4f:ef:c9:62:17:c2:e4:c1:e3:15:67:c0:1a:1e:
0e:f8:3f:5d:c5:b0:3a:16:6f:ae:ae:e1:61:c9:f6:e8:24:2e:
79:c7:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:33:34 2025 by rpki-client