
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File: 4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier: /iUD3axvLkitaWFCZaq+XAI6gHT4eonpWSI+ABrn/XI=
Subject key identifier: A7:CE:F9:39:9C:FC:92:79:00:80:7F:ED:24:66:4C:E6:B8:00:01:B7
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer: /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial: 0199FB7CB5FFF9A856C43A6632870E8A036B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number: 03D7
Signing time: Sun 19 Oct 2025 08:01:18 +0000
Manifest this update: Sun 19 Oct 2025 08:01:18 +0000
Manifest next update: Mon 20 Oct 2025 08:01:18 +0000
Files and hashes: 1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: /BVhvUW+O/5CiapriHA19lc7K0geZAjgC/JxVu1PDzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:b5:ff:f9:a8:56:c4:3a:66:32:87:0e:8a:03:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Validity
Not Before: Oct 19 08:01:18 2025 GMT
Not After : Oct 20 08:01:18 2025 GMT
Subject: CN=a7cef9399cfc927900807fed24664ce6b80001b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:43:8b:d5:9b:4f:1e:d8:f5:04:86:94:e4:0f:
e8:95:07:09:4a:12:f4:d9:23:16:f2:27:84:54:d7:
0d:af:42:3e:27:e9:f2:4b:c9:60:9c:49:bd:dd:48:
96:9b:f4:81:b0:a2:16:20:4b:74:cc:ef:8b:a4:b1:
49:72:71:d8:26:72:52:13:2a:ff:f8:16:78:c2:d9:
fd:79:f0:0f:7c:cb:f3:fa:c3:86:94:37:32:a3:9d:
0a:1f:09:88:8b:93:ec:62:22:6d:fd:6a:be:b8:81:
3d:ce:c4:d9:21:eb:3d:34:af:aa:4a:00:40:d8:08:
1b:21:9c:3f:92:d4:6e:da:eb:ab:14:ff:49:54:d2:
b5:4a:af:e8:99:47:b7:3c:a2:76:b0:02:ae:2a:c3:
68:22:fe:ae:8d:eb:28:c1:d0:19:58:29:64:3d:9a:
05:8b:bc:98:3a:9c:b3:79:80:16:ec:27:55:f3:eb:
0e:61:56:69:b5:fc:64:db:eb:8a:be:5f:41:dc:fd:
b7:18:74:11:be:65:46:77:df:c9:af:d7:ce:46:a3:
eb:ba:05:dc:96:25:dc:a3:5b:64:91:86:df:92:23:
60:34:49:10:e4:03:51:ee:31:a7:1f:5c:8d:c2:de:
51:d9:6b:7b:01:c9:ea:8f:de:e9:72:49:e3:dc:49:
8c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:F9:39:9C:FC:92:79:00:80:7F:ED:24:66:4C:E6:B8:00:01:B7
X509v3 Authority Key Identifier:
keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:03:4f:01:91:b2:ab:62:48:09:82:63:8b:e1:e9:e4:c8:f3:
01:82:34:71:67:0a:88:1c:2a:5a:db:37:0e:85:90:68:34:68:
92:bb:8a:f1:3f:17:a1:8a:bc:99:db:6a:2a:d1:25:d8:f6:df:
87:9f:2b:67:ea:39:c5:36:a8:d9:4d:53:56:81:b0:27:ba:6f:
bb:7f:ff:db:98:1b:31:d6:68:09:6f:0c:5c:91:9d:9d:92:a0:
0d:f5:73:be:c2:80:b1:60:f7:9a:c9:2f:79:a2:37:0d:a8:ec:
91:4f:00:c2:36:fa:55:b9:46:97:8f:8d:23:9d:4e:bf:bb:54:
35:4f:ee:81:bc:05:56:95:88:0c:44:2f:ec:c1:85:a7:fd:69:
31:33:54:93:7b:49:02:c1:cd:12:fc:28:33:76:33:8a:ac:19:
08:51:a9:ef:27:14:d8:0c:d0:22:b4:4b:4e:b2:75:27:66:6c:
3c:72:20:4b:51:0d:d9:99:38:eb:cf:ef:6d:ed:17:c1:c9:89:
ec:28:ec:ac:f2:7f:9e:ec:c0:7d:4f:f5:a2:df:b9:a1:9e:a3:
a7:77:05:b9:cb:0c:76:1c:72:07:cf:32:33:9a:b7:fe:45:34:
91:48:7b:09:67:dd:76:db:32:72:28:01:73:8f:fb:a9:ce:7e:
2b:15:e9:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:27 2025 by rpki-client