Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier: y9TiUWASsh51HLWmxu5iIOrxzqS8ACQGWGbCsabOaJ4=
Subject key identifier: F3:55:1D:81:A8:A7:AF:D3:9B:E8:BD:16:E2:C7:9C:24:04:D6:D7:03
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer: /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial: 0199FCFD760D012FAF0984E2695BC003B2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number: 0865
Signing time: Sun 19 Oct 2025 15:01:33 +0000
Manifest this update: Sun 19 Oct 2025 15:01:33 +0000
Manifest next update: Mon 20 Oct 2025 15:01:33 +0000
Files and hashes: 1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: bmO2OiEjri3KJxoELh/M28av/EEL5dH9cXrzq0DtnJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:76:0d:01:2f:af:09:84:e2:69:5b:c0:03:b2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Validity
Not Before: Oct 19 15:01:33 2025 GMT
Not After : Oct 20 15:01:33 2025 GMT
Subject: CN=f3551d81a8a7afd39be8bd16e2c79c2404d6d703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:eb:39:80:9c:b8:76:81:4f:f4:a8:7b:6a:
a3:ea:a2:35:d2:07:35:0d:cf:85:c5:e9:1e:39:6f:
1e:02:87:b6:ff:f0:86:fb:26:08:b2:a7:5b:13:8b:
26:d5:40:7e:63:75:5e:8d:e8:b4:b4:93:e3:c4:8b:
96:a1:bf:0b:5b:6e:bc:ab:e2:61:5d:97:42:87:77:
5c:fa:f8:40:3c:59:0b:a7:ab:66:d0:be:0b:0a:83:
b8:16:9f:fc:03:1e:ea:f1:f3:0b:27:46:18:47:5c:
24:03:b3:75:7f:4e:6d:31:2d:c5:57:5c:21:fb:ab:
a5:78:44:d8:a2:2e:2e:1b:15:f1:bf:f6:d6:e7:22:
db:bc:1a:4a:98:04:d6:d3:34:30:18:59:1b:3d:a2:
36:e0:ac:85:18:7a:c3:ba:3e:2f:ec:f4:a3:47:c7:
06:b1:02:7c:7e:09:04:d5:2b:40:db:de:5c:5f:41:
81:ac:5d:80:30:95:bf:5b:85:6f:e2:77:cc:e9:6c:
02:8d:05:1a:3a:4a:1a:2f:bd:81:a3:cb:82:fc:4c:
a5:d2:d3:49:b9:f0:0c:72:fb:55:01:ae:d7:c2:b9:
54:92:5c:e2:0a:fa:b9:a3:3d:3d:84:8e:21:9f:f6:
be:c3:93:8b:6e:f4:3f:94:dd:1a:26:04:96:71:e8:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:1D:81:A8:A7:AF:D3:9B:E8:BD:16:E2:C7:9C:24:04:D6:D7:03
X509v3 Authority Key Identifier:
keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:5d:93:a7:57:db:0b:79:e4:b7:79:38:d3:9a:85:c0:6d:50:
8c:d8:f8:e1:05:dd:ca:75:ed:ce:fa:1d:f7:45:ce:cb:8a:f9:
4d:67:64:a6:2a:2a:c1:66:c6:25:2b:35:1f:f3:64:de:f3:b5:
96:02:5b:b8:32:ec:9d:d9:76:b6:09:8a:b0:97:73:1f:02:e9:
73:c9:2b:82:73:ec:cb:19:77:20:80:fa:51:76:a4:0b:2a:33:
0f:0a:90:41:2a:ef:30:fe:1c:ae:8d:a6:f7:a7:18:31:0f:60:
5c:6a:d0:b6:8b:03:92:36:19:cd:1a:13:16:6f:29:35:ae:5f:
a7:3e:03:7d:2b:34:4a:d7:81:44:c4:7b:33:9c:4e:7c:f0:9e:
11:9e:83:97:02:60:1d:82:28:97:8a:65:c5:74:b9:cb:5f:17:
d4:94:d5:9d:39:b9:d8:82:f5:ca:ce:6e:0b:c0:81:65:b1:d5:
0a:a6:62:cb:43:05:be:19:ac:e9:0d:98:1b:ea:7c:73:be:1a:
1f:79:30:99:8a:82:9b:5a:e0:f9:32:44:8e:12:76:cb:9a:cb:
07:96:60:67:d5:c6:c1:42:ce:7c:12:51:26:f3:84:c2:8b:65:
3b:c8:d0:1e:cb:98:5a:0e:5f:11:51:72:d8:ea:d9:03:a2:2e:
56:be:04:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:51 2025 by rpki-client