Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
File: m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft (raw, json)
Hash identifier: AH5pEsesvcnKXnCTtOROI5TKCqxwtiz2KeZGL8bkGDQ=
Subject key identifier: D4:EE:46:40:7B:31:0C:1A:84:6D:AF:EF:88:93:66:21:20:4E:23:82
Authority key identifier: 9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
Certificate issuer: /CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Certificate serial: 0199FEB4F6CE5414001C5F54AC60597C5497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
Manifest number: 0949
Signing time: Sun 19 Oct 2025 23:01:36 +0000
Manifest this update: Sun 19 Oct 2025 23:01:36 +0000
Manifest next update: Mon 20 Oct 2025 23:01:36 +0000
Files and hashes: 1: m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl (hash: nWLGMJs4V6xVTY5HdlhoS+E/KucwLpfLMG1nOZaRjLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:f6:ce:54:14:00:1c:5f:54:ac:60:59:7c:54:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be7f8922ab846a29819ea824bb1c61b06e313b0
Validity
Not Before: Oct 19 23:01:36 2025 GMT
Not After : Oct 20 23:01:36 2025 GMT
Subject: CN=d4ee46407b310c1a846dafef88936621204e2382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d4:a1:8f:6d:4d:da:36:50:ac:29:c2:07:68:
bd:aa:af:cd:40:ef:a7:9f:64:3d:d3:e2:ee:ca:d2:
cb:48:93:91:0d:9a:3a:3d:a8:44:31:cf:79:0a:52:
81:da:f1:fe:9e:4d:ec:3e:34:e5:74:cb:1e:3b:d1:
d9:7c:72:95:0c:2d:b5:3c:cb:90:bf:4f:12:55:b8:
3b:e1:09:d1:3c:36:9c:2b:9f:f3:7a:55:cd:a1:07:
78:3d:17:8c:aa:c9:63:6d:e0:cb:39:02:af:3b:d4:
4d:81:f6:a0:56:ae:9a:a2:f1:9c:70:cd:9f:5c:46:
20:0f:3c:95:97:4e:29:0c:2d:1f:ef:63:6c:84:5c:
2b:01:ef:4d:1b:a9:e3:2a:22:5e:40:cc:28:6f:9c:
e0:3c:3e:17:6c:07:7d:22:54:a2:f5:b1:39:1d:e0:
0a:24:2b:64:bf:fb:ae:43:c3:10:17:1d:81:47:5c:
41:9e:ee:e5:af:1a:6c:d5:70:77:a2:f4:aa:de:0d:
fd:be:a5:43:95:ad:b0:39:ad:18:02:57:9e:7b:2e:
98:cb:99:21:77:1c:cc:95:6e:6e:4a:65:fa:42:d4:
86:2d:3b:06:05:21:3d:05:80:75:7d:8e:a8:2f:6a:
cd:cf:34:6c:69:9f:da:06:fe:b0:71:40:2b:cb:42:
31:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EE:46:40:7B:31:0C:1A:84:6D:AF:EF:88:93:66:21:20:4E:23:82
X509v3 Authority Key Identifier:
keyid:9B:E7:F8:92:2A:B8:46:A2:98:19:EA:82:4B:B1:C6:1B:06:E3:13:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-f4kiq4RqKYGeqCS7HGGwbjE7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/43b73f-a0c5-4a2d-94cd-b53967a2c938/1/m-f4kiq4RqKYGeqCS7HGGwbjE7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:17:98:87:aa:cb:3d:93:29:01:8a:32:ca:0d:7d:98:b0:fe:
35:01:2d:56:05:b7:3b:71:fc:da:3d:ec:69:d0:74:68:f9:ac:
b6:93:e8:16:64:25:7a:8c:97:cf:7d:99:8b:1f:2a:05:96:91:
ba:a3:03:f3:b7:06:df:52:b5:92:54:99:03:d5:a8:fe:e7:9f:
5d:ee:6c:c5:91:60:fd:65:db:1a:50:a2:c5:3e:2b:51:93:2a:
1c:09:13:8b:49:59:36:e1:47:45:87:c9:cb:59:56:2c:e4:cb:
50:19:fe:ad:86:4c:80:11:a3:ab:8b:7b:3e:61:a5:3f:5a:7b:
8d:d0:69:a6:91:f0:19:e2:36:ff:b2:34:4c:96:b3:0f:44:88:
ef:b8:c5:ce:08:16:88:a0:4a:2f:b2:fa:06:20:95:b9:e8:d1:
a7:48:4b:7f:56:49:3f:68:06:1b:a5:cf:6c:82:69:98:4c:48:
fd:01:43:05:60:df:63:49:ea:df:a4:a7:df:6f:dd:f5:0b:c9:
29:f9:d1:2a:18:ba:22:64:a7:48:ff:f4:b5:1e:e8:80:a1:f2:
cd:02:7a:6d:6a:a3:c5:ae:f5:fb:85:30:37:e5:87:d8:a3:5c:
08:b4:55:f1:69:17:da:ef:6b:68:c3:5f:8a:fa:4b:d4:8e:36:
c3:72:81:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:40:01 2025 by rpki-client