Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
File: 4fhh7IT8VurKm4xjbnkj5vktzOo.mft (raw, json)
Hash identifier: HRixc/p1FwB+p9q09YDpAW4itDu0M6JtTqKbfHLGctk=
Subject key identifier: 90:EC:0E:8C:7B:14:E1:A6:D7:43:93:8B:E8:99:F4:E4:B9:66:87:8F
Authority key identifier: E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
Certificate issuer: /CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Certificate serial: 0199FDD8B1C99E197D4D9E58B100C209DC05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 19:01:00 +0000
Manifest this update: Sun 19 Oct 2025 19:01:00 +0000
Manifest next update: Mon 20 Oct 2025 19:01:00 +0000
Files and hashes: 1: 4fhh7IT8VurKm4xjbnkj5vktzOo.crl (hash: byGxg15GUjgAzvv0H4TYWJylZqdt7N9djdqYZ31uBAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:b1:c9:9e:19:7d:4d:9e:58:b1:00:c2:09:dc:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f861ec84fc56eaca9b8c636e7923e6f92dccea
Validity
Not Before: Oct 19 19:01:00 2025 GMT
Not After : Oct 20 19:01:00 2025 GMT
Subject: CN=90ec0e8c7b14e1a6d743938be899f4e4b966878f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f9:78:ce:ba:03:55:97:9e:8d:92:d2:fc:3d:
20:ac:ba:a1:f7:f4:8a:a4:55:c0:94:dc:31:a0:85:
f3:2a:90:fc:d0:84:c5:cd:99:bc:3a:42:8c:6c:c5:
f4:d4:21:24:b6:17:07:50:2d:2b:10:43:c2:ec:3e:
e2:e3:62:0c:f6:33:80:dc:f1:64:0d:7c:6c:68:db:
4e:5c:72:dd:73:c6:f3:97:e8:ca:75:c5:12:2b:33:
47:c5:58:82:f2:b8:83:43:5e:00:77:80:f5:6f:15:
99:1c:03:b3:91:4d:d7:62:41:77:68:03:ea:2d:b3:
bc:ed:cd:bd:23:6a:65:ed:d0:06:73:b1:80:54:69:
45:80:7a:d5:65:aa:04:27:c3:9e:62:49:70:41:a8:
ce:14:ea:af:18:fd:3d:83:56:17:7c:82:38:43:5d:
ae:12:dc:6f:37:05:4d:7a:93:f2:a6:21:4e:94:ab:
fe:3b:00:cc:3a:68:4c:d4:94:9b:74:4a:0a:00:67:
74:27:3b:f4:50:f2:2f:37:75:90:35:33:d4:a7:32:
bf:b4:23:ba:f6:03:c2:46:81:d3:4e:40:2b:aa:f7:
ed:97:07:f0:32:3f:64:dc:f8:d1:e9:36:61:85:70:
64:31:0e:2d:11:11:d2:cd:83:01:87:ca:ae:0a:0b:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:EC:0E:8C:7B:14:E1:A6:D7:43:93:8B:E8:99:F4:E4:B9:66:87:8F
X509v3 Authority Key Identifier:
keyid:E1:F8:61:EC:84:FC:56:EA:CA:9B:8C:63:6E:79:23:E6:F9:2D:CC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fhh7IT8VurKm4xjbnkj5vktzOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/fd8a94-daef-4644-bb5e-21a4d5cc2abf/1/4fhh7IT8VurKm4xjbnkj5vktzOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:9c:c0:c5:58:98:95:57:05:b5:3f:0e:42:cb:60:56:a4:b7:
53:77:7b:7e:74:6f:56:f2:df:7e:24:7e:c5:f0:86:30:09:90:
c6:0c:72:f4:8f:c3:f1:47:b5:6d:6d:a4:1a:79:ba:94:da:b5:
73:14:c6:64:1c:89:20:82:c9:84:15:58:cd:46:a5:96:a6:c8:
05:7c:3d:12:b2:55:24:b3:4a:a9:3e:f3:24:c2:09:bc:11:67:
74:36:33:03:00:d2:1d:ac:6c:56:bd:65:c9:8f:e6:8c:9c:1b:
a6:c2:d7:32:d5:c3:5c:d8:9d:2a:84:f9:7a:e8:1b:9c:0a:e6:
c3:d2:ab:1b:fd:27:48:53:b7:52:0e:3d:9a:f7:ce:9c:88:e5:
ec:c9:0a:60:26:ff:ed:e7:13:66:00:13:98:20:02:54:63:d0:
26:7f:f9:2b:3b:41:d0:bb:9c:a4:20:78:dc:68:ae:40:6c:6f:
73:7a:6b:47:93:83:c6:80:8c:a2:8c:1f:c9:db:53:46:e0:5d:
c8:26:b2:76:38:e3:50:6b:59:9c:5a:30:fc:cc:49:1b:27:f7:
c9:78:15:93:e0:d0:86:f6:72:d2:b3:30:37:7d:59:80:75:d3:
0f:95:92:a6:6c:39:13:75:bb:a0:26:04:1a:de:f1:3f:0f:d8:
ee:64:5d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:35 2025 by rpki-client