Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
File: 4SFHcEtsZk3PIjSS7mHV5fkXxek.mft (raw, json)
Hash identifier: 0SJ1MebvSXYqiVAZPoRK+CG2Eq7lJQV8E2SU8K1zDXc=
Subject key identifier: DE:80:02:C0:A3:F8:E5:C9:8B:6E:56:4F:D1:31:0B:DE:52:DC:6F:D3
Authority key identifier: E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
Certificate issuer: /CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Certificate serial: 0199FC8F8A6BBFD3743BCC2CC378C5C5D3AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
Manifest number: 0420
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: 4SFHcEtsZk3PIjSS7mHV5fkXxek.crl (hash: 9CZZRlg9loJILDnF/NNvApkTBDOXK6Q+ekufupOquAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8a:6b:bf:d3:74:3b:cc:2c:c3:78:c5:c5:d3:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12147704b6c664dcf223492ee61d5e5f917c5e9
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=de8002c0a3f8e5c98b6e564fd1310bde52dc6fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:89:24:d3:de:f6:31:99:66:4f:76:22:aa:
d9:7b:6c:7a:3b:9f:ba:21:34:f7:5a:31:07:dc:ba:
8b:6f:6b:cc:49:62:73:5a:0c:f2:0e:d6:cb:f0:41:
f5:bf:ce:f3:1e:6f:2b:c8:04:9e:e7:c2:63:da:9b:
ed:1e:5a:6a:c3:0a:cc:ef:0a:32:e5:07:08:7b:82:
0e:b2:2d:43:60:60:5b:ba:25:08:80:8e:b0:10:17:
28:93:8c:7c:e5:a9:c3:52:65:28:87:26:50:11:5e:
0e:16:a9:e9:e2:70:45:4f:83:e6:6a:2d:2b:07:8b:
a2:54:8a:b7:78:d0:b3:51:f5:45:bf:85:fc:4b:6f:
28:66:24:23:06:c5:21:21:1d:6e:29:6d:8e:cb:e0:
15:0b:09:1b:f1:1d:02:68:64:c6:21:28:24:2b:86:
fe:06:d4:62:79:ae:b8:f6:dc:08:c8:99:49:41:c3:
61:da:ad:9b:2b:71:25:e8:c5:96:e9:ef:16:e5:6b:
e4:6c:d1:48:b5:9a:ee:24:53:f4:6c:16:16:2a:41:
3f:fd:49:ec:26:70:59:d9:9d:31:16:93:dc:7c:b3:
46:73:4d:a2:6a:93:58:1c:46:e2:e1:9f:51:97:da:
5e:ea:16:3d:94:f8:57:4d:ff:85:71:88:28:13:e3:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:80:02:C0:A3:F8:E5:C9:8B:6E:56:4F:D1:31:0B:DE:52:DC:6F:D3
X509v3 Authority Key Identifier:
keyid:E1:21:47:70:4B:6C:66:4D:CF:22:34:92:EE:61:D5:E5:F9:17:C5:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4SFHcEtsZk3PIjSS7mHV5fkXxek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9b9703-3929-4a4e-93b7-a1bf42c58494/1/4SFHcEtsZk3PIjSS7mHV5fkXxek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:40:a3:2d:94:93:17:65:f5:4b:5d:53:2c:4b:a0:9f:bc:a2:
3c:ec:33:64:4a:11:34:40:e8:c3:83:3e:9d:3f:85:38:a0:27:
e3:4d:f5:55:a3:f1:2f:46:a1:f9:ed:1a:7e:96:78:7d:14:d2:
0c:e0:84:63:c0:3a:b8:df:fc:34:19:61:f5:ac:2c:7b:f6:87:
c9:fd:b4:2f:cf:77:7e:ef:60:3d:ac:6d:3f:65:39:59:89:8c:
84:5c:ac:9f:56:64:92:ee:35:ea:ba:bd:fe:a2:04:ee:00:84:
8c:49:19:f4:c4:1f:26:78:7a:94:54:c1:1c:62:38:25:32:01:
93:6f:27:12:e5:0b:fc:76:5e:db:03:84:12:08:21:69:66:47:
09:d4:9c:0b:d5:f3:c8:ec:5a:5c:0c:80:8c:5a:33:4d:22:e7:
73:6b:35:bf:ea:f5:54:57:a9:10:9e:df:b5:dd:7e:62:e2:0f:
bc:20:e3:ff:1d:5a:9d:09:b0:3f:48:92:58:20:e5:bf:4f:3c:
7f:10:55:75:3a:1f:f5:e3:56:bc:bd:d3:6c:d4:53:33:7a:14:
6c:f3:d3:7e:f2:81:74:22:dd:fa:40:65:76:d5:7e:a0:f0:97:
70:bf:da:27:7f:8f:ec:83:4f:64:69:0e:9f:b9:16:c5:e6:27:
de:c3:c8:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:30:05 2025 by rpki-client