Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File: SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier: 3F5qbArAhjz51Ur6Vop1AWp+PXq41Lhhin1sUULteE4=
Subject key identifier: 9A:05:32:12:51:05:A5:1E:E7:B1:45:5C:9C:BC:31:04:EC:BC:C1:4A
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer: /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial: 0199FBEB0E8AEAD9F19675AF021232704AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number: 1409
Signing time: Sun 19 Oct 2025 10:01:49 +0000
Manifest this update: Sun 19 Oct 2025 10:01:49 +0000
Manifest next update: Mon 20 Oct 2025 10:01:49 +0000
Files and hashes: 1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: yA7Xs6ciJMmopQutn9xs3fqpAZFUq7BL23fZ0xTGhJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0e:8a:ea:d9:f1:96:75:af:02:12:32:70:4a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
Validity
Not Before: Oct 19 10:01:49 2025 GMT
Not After : Oct 20 10:01:49 2025 GMT
Subject: CN=9a0532125105a51ee7b1455c9cbc3104ecbcc14a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f5:cb:33:02:b9:12:e2:4c:16:99:31:83:77:
67:22:ba:f4:0e:16:69:2e:82:e8:8f:b8:e5:5b:ec:
78:50:86:df:44:b1:0f:42:5b:ff:98:51:a6:c5:f3:
ad:16:0b:0d:93:ed:8b:77:6a:27:35:b7:b6:f9:bd:
66:29:e2:04:13:d2:f7:b4:36:5d:76:27:4b:f0:a5:
40:f3:ea:4a:6c:d9:c7:36:d6:1d:7a:1f:9b:05:26:
67:70:dc:34:5f:0f:85:f1:4b:c8:e2:a8:55:f6:48:
34:77:10:1b:02:a8:91:80:8d:bd:b3:80:83:41:c4:
6b:27:39:87:52:87:ea:a1:13:1d:04:8e:56:37:6b:
96:1d:fc:42:55:a1:ab:03:c9:51:57:0d:d1:60:f0:
3b:ca:35:04:69:7f:87:f4:e6:df:a2:e7:58:88:44:
a5:d6:51:02:74:0f:e1:23:03:9e:89:b0:bf:68:af:
e7:d9:81:29:60:f4:f7:2f:fc:81:ec:79:8c:72:77:
20:ca:9d:c0:d2:2d:7d:fc:2c:1e:ad:2c:76:03:6b:
9e:2a:fa:57:61:10:60:30:58:9c:72:d4:aa:a2:78:
8e:68:76:32:78:74:7f:d9:9c:4d:9a:b1:80:4c:e0:
ec:26:0a:6c:dd:2d:23:b7:36:7e:63:e0:4f:c4:d3:
9a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:05:32:12:51:05:A5:1E:E7:B1:45:5C:9C:BC:31:04:EC:BC:C1:4A
X509v3 Authority Key Identifier:
keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:49:ee:d7:ee:66:93:91:80:86:df:6e:8f:69:14:99:c2:48:
d9:a4:ff:e6:6a:ec:a7:59:6a:8c:1a:5f:6a:30:f2:e8:89:62:
3e:48:2c:a9:5b:ae:c3:be:6c:2a:66:22:3a:e9:37:62:95:84:
6e:db:9c:83:f0:fc:30:95:df:4d:f5:51:a8:de:ba:80:cb:a4:
8f:f3:db:14:7c:75:29:67:0f:41:eb:a5:d8:98:af:0f:ac:cb:
65:59:1b:3e:86:46:e5:8e:56:2e:02:dd:6f:c5:b3:33:a6:d4:
75:19:17:6f:03:96:33:f8:ae:21:e4:59:ff:38:06:13:16:a4:
5c:90:71:0e:d5:35:58:2d:b0:73:e0:2b:7a:7a:b9:be:14:f9:
f9:91:cd:34:2f:f9:ef:10:22:0c:34:16:ad:24:bf:ac:6f:92:
6e:20:ea:62:40:7f:44:6d:51:0e:1d:4f:01:8e:84:21:e4:dc:
25:29:b1:c0:c6:70:1d:4c:24:3b:64:73:66:cf:ed:e9:bb:d1:
b9:dc:58:d1:c6:5f:0c:b0:0e:96:52:59:93:b0:cd:2f:ab:4e:
35:9b:25:39:10:05:4e:28:3e:34:1f:7f:f6:11:4e:a3:65:45:
6c:5d:c7:ee:0a:7f:1d:bd:43:13:ec:8e:d4:4d:41:f7:9a:e3:
57:0c:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:57 2025 by rpki-client