Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: PQGTU26GvXEffxsQh0hvNa0DgDrjv+hw0zU9g/BmkOQ=
Subject key identifier: 32:56:0D:28:94:00:24:E7:3D:93:47:1B:1D:26:EC:24:D3:0C:03:53
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 0199FBEB4683B9E79D2126DF987DC4F1F452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 141E
Signing time: Sun 19 Oct 2025 10:02:04 +0000
Manifest this update: Sun 19 Oct 2025 10:02:04 +0000
Manifest next update: Mon 20 Oct 2025 10:02:04 +0000
Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: hMm+pmHW6gKUlblHlBNNIOpsznJDRdWTtr9Pm7/5Ifc=)
2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:46:83:b9:e7:9d:21:26:df:98:7d:c4:f1:f4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Oct 19 10:02:04 2025 GMT
Not After : Oct 20 10:02:04 2025 GMT
Subject: CN=32560d28940024e73d93471b1d26ec24d30c0353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:9e:ee:2f:af:97:c2:76:70:df:8a:c5:81:21:
30:34:7f:c5:18:cd:37:b5:00:e6:34:2e:f2:4a:26:
04:fa:fb:0a:3e:56:d0:af:16:6f:ff:26:87:90:08:
9f:0c:fc:f7:4c:87:e6:53:71:a9:7a:16:ec:e5:1f:
5d:70:0b:e0:e5:c2:e8:bd:c5:d0:1c:d1:b1:b3:87:
2a:00:c7:26:49:d0:5a:19:9f:44:84:fd:94:bc:f1:
bc:e0:c2:58:a0:8c:af:eb:5f:f1:3f:6b:e9:03:08:
47:fc:93:34:1a:28:be:f3:da:56:24:2e:1e:32:20:
05:fc:85:ec:2a:97:34:e5:08:3b:32:73:fa:e7:d4:
6e:08:cd:32:62:40:e6:90:c2:96:ce:75:bc:b0:3a:
2b:54:57:92:39:03:10:3b:79:74:37:4e:bd:11:51:
63:12:a9:9d:41:3c:6f:af:a4:4c:e9:76:32:c6:40:
89:b5:7e:01:51:f4:e9:47:16:b4:ef:0d:0c:60:85:
a1:c7:58:da:59:5b:5b:32:57:ec:e2:ff:0c:ae:03:
ea:94:b5:b5:71:d4:31:e0:94:31:65:e6:cf:f0:76:
67:eb:d8:2a:70:d0:91:f7:00:24:2f:84:65:d5:08:
5e:f8:7d:d9:14:c5:f9:22:4d:14:6a:ef:4c:02:fd:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:56:0D:28:94:00:24:E7:3D:93:47:1B:1D:26:EC:24:D3:0C:03:53
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:64:1f:a6:af:d6:15:6d:49:85:b4:47:dc:78:eb:e4:92:10:
ef:38:08:56:03:bd:83:6f:01:5f:b1:27:a1:f5:46:0e:9d:59:
d1:fa:0a:06:61:06:02:d1:af:72:9b:c7:73:11:68:66:18:66:
bc:6b:73:b0:b2:9b:c3:61:3d:27:6f:31:0b:af:a0:72:f0:8e:
f8:c9:84:13:38:3b:85:f7:4b:33:1e:8e:dd:6d:d0:80:28:b9:
dc:59:f1:44:c5:47:87:fc:15:fb:8b:6e:af:f1:2c:ff:82:98:
74:2b:64:79:45:fd:62:81:22:a1:06:1f:83:9e:74:36:bd:29:
c2:da:d7:0c:45:89:56:f3:7e:c8:a9:a1:b1:5d:92:33:66:41:
23:e2:7a:2a:98:fe:30:b8:ee:58:97:e9:33:73:c8:89:72:17:
9e:2b:3f:9e:4d:34:82:65:7b:99:cc:64:fe:f7:c1:95:e1:27:
6f:d9:a8:35:93:70:b2:c1:57:8c:51:9d:a2:b0:5e:74:30:b1:
93:95:1a:93:a0:f6:6d:29:54:b1:f9:95:fd:4e:ef:f3:cd:37:
89:22:a8:1a:f8:09:60:8f:c8:fe:54:27:0b:88:48:46:17:0c:
82:65:3c:94:45:ca:fa:5f:8e:e9:9f:51:b3:d0:ae:8d:33:b5:
35:8c:ba:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:08 2025 by rpki-client