Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
File: w49sR0pKRBSpySd75Naqrivt6ks.mft (raw, json)
Hash identifier: D/5bvgQUODDm4WOxiG/Ak92fR+UJ5BQZftk8B7aP60A=
Subject key identifier: EE:DF:81:89:99:99:6E:2C:A6:00:33:61:8D:B0:26:4F:C4:FF:86:F6
Authority key identifier: C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
Certificate issuer: /CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Certificate serial: 0199FE46F3117B628DA09C83D5868F312171
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
Manifest number: F0
Signing time: Sun 19 Oct 2025 21:01:26 +0000
Manifest this update: Sun 19 Oct 2025 21:01:26 +0000
Manifest next update: Mon 20 Oct 2025 21:01:26 +0000
Files and hashes: 1: w49sR0pKRBSpySd75Naqrivt6ks.crl (hash: FYE9zpal+hsP1AWewexcaspjs0Qs4HIxSEp7Ep39s7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:f3:11:7b:62:8d:a0:9c:83:d5:86:8f:31:21:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c38f6c474a4a4414a9c9277be4d6aaae2bedea4b
Validity
Not Before: Oct 19 21:01:26 2025 GMT
Not After : Oct 20 21:01:26 2025 GMT
Subject: CN=eedf818999996e2ca60033618db0264fc4ff86f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:72:55:e4:7a:cc:77:24:fd:62:bc:c1:25:30:
cb:be:6d:8c:01:16:1a:6f:9c:a6:77:2d:dc:5b:3b:
ff:dc:d7:fb:8b:4f:b8:43:9f:19:e5:97:54:36:b8:
82:6a:6c:80:5d:20:8a:ce:66:5d:e1:72:5d:ba:32:
ce:9a:6f:5c:03:7b:6c:db:32:e7:dd:14:38:df:90:
6e:89:70:16:13:e3:25:a0:a2:ce:ae:2e:ba:be:bb:
91:3a:12:15:9a:29:76:c3:e6:85:66:5c:2d:3b:b0:
3d:00:13:82:86:8b:6a:04:22:55:88:e7:30:c5:8f:
1f:f3:0c:26:65:c9:a0:57:a0:fe:87:85:66:7c:a0:
00:e1:fc:a1:20:3d:f0:fd:2e:e4:03:81:96:3e:e1:
f4:e4:82:6b:99:f2:08:ef:97:a6:81:0b:83:6e:e8:
fb:ff:39:f7:6a:97:fc:d5:0f:52:60:d6:39:d7:c5:
0a:75:f2:6a:8e:57:73:ca:b9:a1:88:1e:e5:5d:24:
81:97:ec:86:2f:3f:e7:ba:6e:3b:e3:21:bf:d8:21:
0b:c2:28:7a:3e:71:30:92:e8:4c:50:f6:06:44:92:
8f:9d:7b:9b:2f:de:24:c0:e4:dc:33:29:b9:56:9e:
aa:66:29:75:a5:e1:6c:cd:54:6e:55:fa:25:d4:e3:
83:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:DF:81:89:99:99:6E:2C:A6:00:33:61:8D:B0:26:4F:C4:FF:86:F6
X509v3 Authority Key Identifier:
keyid:C3:8F:6C:47:4A:4A:44:14:A9:C9:27:7B:E4:D6:AA:AE:2B:ED:EA:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w49sR0pKRBSpySd75Naqrivt6ks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8d99c5-b7c8-4895-af18-ae840028f6b1/1/w49sR0pKRBSpySd75Naqrivt6ks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:cc:86:81:5b:85:fe:29:00:e8:31:51:c5:a0:d4:22:02:cd:
e7:04:81:71:1b:a6:a8:d2:64:99:5c:eb:7b:b1:c5:ae:8e:7f:
3e:0e:be:09:a2:63:c2:01:76:b4:60:98:8a:2d:be:81:f3:ee:
75:8a:a7:87:d8:19:96:31:3e:8a:05:fd:cd:a9:8b:1f:01:0b:
25:c4:a7:b7:fd:38:e0:85:60:06:30:d0:f4:b9:7a:35:ca:59:
65:f5:6b:a0:40:ac:ca:75:bd:f6:5b:f7:3c:ee:42:e6:55:23:
fd:19:e7:81:6a:5c:17:43:cf:e4:75:52:37:2f:74:88:71:92:
f6:55:06:17:31:79:90:cd:ff:ef:a5:cb:e9:9e:bf:06:ff:02:
22:c0:3b:79:4a:91:4d:f9:f3:03:c6:4b:58:b0:01:97:d4:11:
8d:5d:01:c1:d1:86:39:90:ae:3e:04:a4:17:b9:c4:31:6e:b6:
a5:f0:20:f7:42:b9:ba:c0:14:10:4e:90:e6:a6:c9:37:0f:48:
aa:22:9d:1f:9e:35:6e:90:f4:13:6f:84:c0:e9:b8:d5:c7:8e:
94:6e:2f:bd:e3:c1:65:0e:d7:b9:80:e5:0f:d7:04:af:4c:2f:
57:71:24:e4:54:d1:85:da:b6:4f:4a:27:c4:50:cf:dd:4c:48:
96:86:d7:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:01 2025 by rpki-client