Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
File: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft (raw, json)
Hash identifier: O1XEimKZMqaQKPwapu3HLFsh5fylRI7XL/tAJOxWbcs=
Subject key identifier: 05:12:55:09:FC:53:C2:AE:08:42:CF:57:51:E2:D9:D2:7D:89:49:73
Authority key identifier: 46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
Certificate issuer: /CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Certificate serial: 0199FCC6363C10E0DE5C998370F26FC04744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
Manifest number: 0829
Signing time: Sun 19 Oct 2025 14:01:12 +0000
Manifest this update: Sun 19 Oct 2025 14:01:12 +0000
Manifest next update: Mon 20 Oct 2025 14:01:12 +0000
Files and hashes: 1: RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl (hash: qrhmcUiB46wHR3KiP6jJtWjyVD4KdbC3qYuFHLd5AD8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:36:3c:10:e0:de:5c:99:83:70:f2:6f:c0:47:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4654f3e6927ec4c7c97d0f236a8c24534a7fcdd4
Validity
Not Before: Oct 19 14:01:12 2025 GMT
Not After : Oct 20 14:01:12 2025 GMT
Subject: CN=05125509fc53c2ae0842cf5751e2d9d27d894973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:d2:7e:e1:4a:78:4a:1f:e9:2e:6c:30:57:65:
da:0b:52:7f:4a:25:99:ff:63:41:c0:8d:dd:87:df:
18:a4:b9:c0:a3:21:2e:5e:46:d0:2b:5e:95:f8:10:
48:b8:b1:de:7f:0b:ff:10:7f:39:78:36:31:ee:d3:
d2:ba:ef:e6:b8:0e:74:50:52:e3:7e:d7:6c:f3:96:
ac:79:4b:b7:63:1d:47:72:bc:64:9d:9c:0f:81:a6:
95:02:a9:6f:2e:c4:81:d1:88:0d:ac:90:07:4c:82:
48:a7:71:b7:2a:63:1e:18:73:95:2f:b4:ea:82:e3:
a0:25:4a:6a:24:f9:4f:9b:db:db:35:31:68:f9:61:
f0:54:9e:a2:48:52:dd:a5:a3:88:0f:d5:2b:22:6c:
3c:be:7e:0f:a9:e7:fb:57:14:e1:14:0e:8a:45:49:
d0:29:18:fc:0c:7e:35:59:1c:8c:e2:24:b1:be:c9:
e9:ef:39:a8:b9:03:a8:c3:7f:8c:d2:27:19:d8:46:
5f:d2:bc:7c:ec:65:2b:71:a3:75:8d:f3:e1:6a:21:
03:1c:b0:9e:e8:7f:43:56:a5:7c:16:69:e0:f7:54:
bf:74:35:6a:31:08:64:e0:8d:b6:54:30:d3:66:24:
0e:cc:2f:fd:32:83:4e:33:55:98:bb:3c:19:13:75:
6f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:12:55:09:FC:53:C2:AE:08:42:CF:57:51:E2:D9:D2:7D:89:49:73
X509v3 Authority Key Identifier:
keyid:46:54:F3:E6:92:7E:C4:C7:C9:7D:0F:23:6A:8C:24:53:4A:7F:CD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7ff4a3-d191-4c6b-835a-b8050622aa96/1/RlTz5pJ-xMfJfQ8jaowkU0p_zdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:68:9b:f5:49:64:65:8a:0f:44:6e:19:ec:68:3a:6e:dc:68:
94:19:d4:c6:60:e9:c9:22:0e:48:41:be:6b:69:c6:a8:e9:75:
b4:ba:2e:88:db:57:ca:1a:52:79:5c:03:ff:de:12:c8:35:fe:
b0:d2:b5:95:1f:5c:ad:0e:2c:d1:80:42:60:38:5e:04:6f:36:
76:b5:85:9d:a8:79:7a:54:bc:5a:f0:5d:35:af:78:b0:31:52:
9a:af:5e:3e:ef:68:15:60:23:b5:e2:e7:da:14:0e:74:c5:30:
ca:b4:be:6e:1a:86:47:0d:9e:79:73:5c:6e:4b:86:95:7f:76:
71:21:b0:b8:d7:90:9f:3f:01:c4:55:0a:b0:ab:ac:bf:30:47:
e7:a0:6d:fa:63:0f:ed:a0:ac:3f:d5:0e:7e:fc:8f:e4:7b:ea:
c8:7e:67:cc:b0:01:6e:55:b8:d5:43:59:72:70:9f:5c:10:eb:
ff:c6:b8:18:45:26:3f:56:e3:8e:eb:5d:c3:03:34:f2:f3:22:
c3:d6:48:34:a3:3d:b8:2b:5c:67:da:c4:dc:c7:9c:70:dd:15:
17:61:d0:a6:5d:5a:4d:42:ca:8d:51:f5:83:64:6d:ff:6c:55:
73:b2:97:4e:41:0d:30:57:78:5b:e9:3f:b7:ef:1b:72:87:6d:
23:c0:9b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:35 2025 by rpki-client