Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
File: 4C7HTaVJNr70L-JgWX3W0h3M7fw.mft (raw, json)
Hash identifier: T/TIqyBGRl17QV7kXKqBleZrsxAi61sh33YxjQ39jr0=
Subject key identifier: B4:AA:41:5B:CF:DA:8D:69:CB:3A:1D:1C:36:44:0D:C2:84:C9:96:1D
Authority key identifier: E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
Certificate issuer: /CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Certificate serial: 0199FB46190616288A88112758FD18EFEFCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
Manifest number: 1648
Signing time: Sun 19 Oct 2025 07:01:39 +0000
Manifest this update: Sun 19 Oct 2025 07:01:39 +0000
Manifest next update: Mon 20 Oct 2025 07:01:39 +0000
Files and hashes: 1: 4C7HTaVJNr70L-JgWX3W0h3M7fw.crl (hash: yzM9L4Bz01HYbDFIMszHnPZuG9CtrVv2F3rcFsdHMwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:19:06:16:28:8a:88:11:27:58:fd:18:ef:ef:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02ec74da54936bef42fe260597dd6d21dccedfc
Validity
Not Before: Oct 19 07:01:39 2025 GMT
Not After : Oct 20 07:01:39 2025 GMT
Subject: CN=b4aa415bcfda8d69cb3a1d1c36440dc284c9961d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a0:8e:a8:1c:20:55:75:9f:34:51:1d:32:2c:
ec:f0:b8:2a:86:89:46:96:92:1d:5f:04:bb:b0:19:
c5:95:37:57:32:0f:69:06:2b:0e:8a:96:d0:d9:b2:
99:66:9e:f2:f1:38:42:4f:67:51:dc:42:68:f3:d0:
4b:4e:4c:c3:12:f2:c1:8e:91:c8:3f:c7:1f:1a:60:
03:30:de:7e:d4:8f:56:10:05:74:0b:88:7e:55:f5:
6d:ef:35:47:18:b9:1d:90:02:30:cf:1c:5a:32:a1:
12:a2:65:22:d4:b4:9c:20:ae:aa:b9:e2:57:62:6f:
56:8f:d7:13:f7:16:be:56:1c:8e:e0:76:1f:04:e1:
54:b2:32:09:1a:12:74:85:97:29:d5:65:22:54:0a:
3d:87:be:25:3f:1c:dd:e9:bb:a4:9c:4c:98:79:27:
d6:3b:7a:11:a2:73:83:3c:7e:7d:a5:3c:12:55:d5:
1b:f4:28:c8:83:e4:52:57:aa:51:e0:63:bf:07:98:
bf:69:7d:8d:21:1b:7a:de:8c:04:9a:fa:ac:85:6c:
70:80:92:66:96:63:60:8d:05:8b:17:32:12:3e:27:
e9:8f:ac:e4:72:00:ea:31:76:cb:93:31:6d:66:f2:
fb:32:67:a8:07:f6:15:52:b9:45:b2:4e:71:8c:3a:
82:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:AA:41:5B:CF:DA:8D:69:CB:3A:1D:1C:36:44:0D:C2:84:C9:96:1D
X509v3 Authority Key Identifier:
keyid:E0:2E:C7:4D:A5:49:36:BE:F4:2F:E2:60:59:7D:D6:D2:1D:CC:ED:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C7HTaVJNr70L-JgWX3W0h3M7fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/74e013-5a1c-4003-bf92-01b8b0f4b019/1/4C7HTaVJNr70L-JgWX3W0h3M7fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:07:fb:8e:4a:1c:9b:c8:0c:7a:9c:34:79:a6:50:27:2a:c2:
dc:a3:53:bf:88:4a:27:7e:84:03:88:1c:6d:c0:57:a2:41:97:
78:b9:02:a4:e4:0f:9a:5b:4a:19:af:fc:fc:1f:6b:97:a5:c0:
f1:e6:5f:bd:c1:86:51:6d:6a:c2:1a:2a:c3:3b:15:6e:fb:4e:
62:69:64:7f:81:34:f5:26:ba:7b:a7:6b:d4:d5:3a:a2:02:a0:
52:98:03:e5:a9:da:1c:db:be:22:ef:82:f7:f9:93:be:dd:b6:
f2:5e:9f:f0:76:9e:a4:5f:74:23:e4:b9:be:a3:00:b2:1d:26:
06:fe:b8:22:10:06:bd:be:76:ac:46:97:f1:67:4a:c3:f8:c8:
a1:d1:db:f7:d4:4d:ff:87:64:db:42:07:9d:f4:22:2d:73:46:
96:c1:f4:95:28:b3:ab:41:32:82:24:8a:49:d8:ed:2d:24:a2:
f0:95:26:d4:7f:7e:69:71:24:9c:42:3b:0e:31:88:93:eb:fd:
0e:08:d0:08:28:7e:60:be:94:98:45:0a:5b:95:55:19:a7:ba:
32:13:b3:95:ac:de:76:a1:fd:ac:4b:c7:13:7e:09:a9:ee:84:
e5:0f:b6:55:ee:4e:9c:7f:01:b0:53:07:99:66:29:4d:e8:64:
a4:71:ac:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:53:59 2025 by rpki-client