Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
File: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft (raw, json)
Hash identifier: 3yRYWyqnSTShzVH1MYtDnwfxLjlJ1FXIzqy5DbOMvoc=
Subject key identifier: B9:76:A3:16:CE:97:AB:6A:35:99:FD:30:EC:10:46:54:CF:B7:F0:C3
Authority key identifier: 47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
Certificate issuer: /CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Certificate serial: 0199FCFDA6526A487BF27DB71E9EAB09667A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
Manifest number: 039E
Signing time: Sun 19 Oct 2025 15:01:45 +0000
Manifest this update: Sun 19 Oct 2025 15:01:45 +0000
Manifest next update: Mon 20 Oct 2025 15:01:45 +0000
Files and hashes: 1: R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl (hash: KE6OmeZF7HiV5JDfpsZUGZXn9eTlWNV6HUieuj9XWXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:a6:52:6a:48:7b:f2:7d:b7:1e:9e:ab:09:66:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a63d4fe10a346b812fbf359c9b33778cd4311
Validity
Not Before: Oct 19 15:01:45 2025 GMT
Not After : Oct 20 15:01:45 2025 GMT
Subject: CN=b976a316ce97ab6a3599fd30ec104654cfb7f0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:c8:c0:5d:74:c1:67:44:1e:1f:59:0a:86:
5e:22:52:bc:bc:fd:3a:bb:45:41:a4:5a:bd:cb:d6:
71:c9:a0:50:10:e2:36:e9:c5:40:f4:e3:cc:70:99:
c9:01:eb:aa:4c:15:95:cf:26:0b:bf:e8:42:61:71:
ce:27:ef:83:2e:70:2a:fe:ed:88:4b:40:9d:c8:67:
8d:4c:ab:43:29:84:f6:ff:83:f1:26:cb:66:61:e2:
13:67:f4:f5:e4:3a:9b:56:3f:d9:f2:38:5b:56:31:
39:16:52:f0:67:d1:1b:06:bd:f5:d5:ce:fd:d9:1c:
f3:1a:6f:92:bf:58:69:a4:45:87:f7:3b:83:7c:05:
72:9d:47:05:3f:c2:55:ef:e9:f5:3f:34:07:a7:9e:
1a:23:36:3f:4c:a9:a9:4a:a6:2f:a0:2f:5f:29:bd:
f7:4a:b8:78:78:9c:50:ff:81:e0:15:da:d8:30:f1:
8b:98:e0:d3:cf:ee:1a:bb:74:f0:19:d7:01:7b:99:
03:1f:23:8a:99:4e:14:b7:ae:a3:bf:03:8e:85:c3:
8d:ec:77:64:39:50:c6:4f:50:f7:6e:42:63:3f:ad:
e7:d6:f3:b7:31:57:c8:62:50:a7:6b:f7:ae:c6:27:
1a:d3:26:56:a1:da:6d:81:5e:3d:05:11:e5:2b:0c:
a2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:76:A3:16:CE:97:AB:6A:35:99:FD:30:EC:10:46:54:CF:B7:F0:C3
X509v3 Authority Key Identifier:
keyid:47:4A:63:D4:FE:10:A3:46:B8:12:FB:F3:59:C9:B3:37:78:CD:43:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8f3c2f-c185-4ad8-9181-7b7fc7aab144/1/R0pj1P4Qo0a4EvvzWcmzN3jNQxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:45:de:e2:4e:ae:1a:e2:d9:2c:c6:f9:1f:90:01:96:5a:6c:
9b:ae:28:ee:22:9e:6a:11:cf:f8:14:01:22:c8:ac:06:2c:ca:
5f:c3:1d:2e:a5:9e:b1:1a:ec:6d:96:3e:3a:63:d2:fb:80:b0:
1b:9e:cd:f6:42:92:cc:97:57:ee:05:dc:e1:db:dd:63:82:c4:
80:3d:05:f6:a0:c8:81:1c:6e:55:04:b6:92:2c:c3:bd:91:c5:
78:88:bc:25:82:b1:01:47:df:d1:ec:1b:12:f5:78:bb:49:bf:
21:af:22:da:a0:ea:f8:4b:de:45:41:82:19:e3:32:79:5f:e7:
52:fe:c3:61:66:40:4d:c6:6e:8d:68:6b:54:29:c9:98:5a:a7:
f3:37:3c:95:ea:e1:c7:52:1a:75:ba:83:85:e7:f0:ca:25:9b:
80:f6:0f:09:c2:12:68:9a:2a:16:e3:ee:71:5d:98:d3:f3:37:
21:ec:8b:5e:21:43:a5:7d:33:89:b2:93:43:97:c1:6b:57:19:
45:18:bc:27:63:e3:4b:d6:25:a3:a5:ef:85:8e:08:86:b2:0d:
99:27:f1:74:38:05:a9:85:42:31:1e:43:d8:91:dc:39:2d:9b:
c5:bc:5c:1e:e2:f7:df:4e:2d:42:74:69:55:23:04:d9:f5:e7:
41:e6:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:27:59 2025 by rpki-client