Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
File: f35evW-kacXjcL_BBsTUqtHh25Q.mft (raw, json)
Hash identifier: x3uiSd3Zcf5wO7j8vt8znISrmFDiQzXsDpQc/oTZjOE=
Subject key identifier: 06:25:E5:D4:DC:EF:13:99:06:C4:E3:AD:F8:BF:12:19:03:F4:F4:06
Authority key identifier: 7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
Certificate issuer: /CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Certificate serial: 0199FC58EC376FF1A349081D7BE52B7CCA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
Manifest number: 0F4A
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: f35evW-kacXjcL_BBsTUqtHh25Q.crl (hash: an+EbmBpQHlXLlxDcIdfEzaMX/HIUPMwxDfIRENjpeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ec:37:6f:f1:a3:49:08:1d:7b:e5:2b:7c:ca:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7e5ebd6fa469c5e370bfc106c4d4aad1e1db94
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=0625e5d4dcef139906c4e3adf8bf121903f4f406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:76:34:97:15:ca:01:72:e4:14:68:0b:68:b2:
75:83:07:3e:87:46:fd:71:85:b8:f2:c3:1b:27:fe:
87:34:d8:02:ce:f6:92:40:05:56:a8:77:1e:15:25:
14:c8:94:8e:d5:eb:ae:5d:05:13:05:19:74:18:7f:
47:80:cf:cd:2f:16:9b:3f:11:01:9e:f0:12:eb:ed:
ce:76:1c:96:d6:34:dd:6e:75:cc:74:67:ce:52:a1:
ae:2e:4a:6d:af:0c:cd:0b:0e:25:55:25:50:e4:ce:
02:f8:b8:26:07:5e:dc:05:59:75:d2:52:46:a4:d5:
f2:3d:88:73:a7:cf:49:20:43:86:ed:b9:1a:6f:1a:
20:f3:b9:f9:03:30:bd:30:f7:c8:bf:bc:15:ca:83:
fe:11:03:a8:9c:00:e6:b6:4e:d5:ae:38:5e:90:69:
07:bc:2a:3d:1b:f8:59:b2:9d:dd:00:66:1a:4f:de:
7a:47:08:12:44:df:d6:49:6f:cf:3c:49:80:e9:20:
6f:7a:b2:93:d3:5e:4d:fd:b4:64:e8:b6:95:8e:86:
cb:b7:4f:22:d7:8f:8b:5c:ee:b1:45:1d:03:7d:a9:
8f:d9:b3:6f:7e:69:51:d0:ae:e4:f8:4a:41:c0:3a:
e6:24:e1:42:3f:0d:8d:85:4f:66:9e:ff:a8:89:c6:
9e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:25:E5:D4:DC:EF:13:99:06:C4:E3:AD:F8:BF:12:19:03:F4:F4:06
X509v3 Authority Key Identifier:
keyid:7F:7E:5E:BD:6F:A4:69:C5:E3:70:BF:C1:06:C4:D4:AA:D1:E1:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f35evW-kacXjcL_BBsTUqtHh25Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c3e8ed-597a-485a-94a3-982cfb359aee/1/f35evW-kacXjcL_BBsTUqtHh25Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:11:7c:be:24:2e:87:bb:bc:e3:c6:a0:ed:e3:30:92:1c:ab:
dc:ab:2c:7d:ac:55:d1:03:4e:be:be:30:80:0c:9e:70:71:28:
ed:bb:0c:eb:1c:ff:ed:73:93:7a:8c:2a:97:4d:18:c4:40:52:
41:b5:17:d6:de:d3:5e:0b:8f:4b:10:91:8b:04:b7:49:15:77:
c1:88:a8:49:8a:ab:a5:45:fd:17:a5:95:4f:3d:74:ef:b8:b9:
a7:27:49:fd:b0:d1:dd:93:c4:5d:50:6e:7a:fc:94:51:65:f8:
d4:8e:f1:32:a3:14:91:6d:97:b3:fc:bf:b4:31:fa:c0:48:69:
a3:6c:e9:54:e2:d2:43:3c:33:aa:87:c5:84:8d:22:f5:c8:84:
40:69:8b:a8:d7:27:27:f5:d8:30:87:0b:80:f9:02:1f:e8:52:
59:27:6f:b7:42:ad:65:ca:db:12:34:7d:d4:f8:a4:01:08:08:
90:fa:75:c1:8c:27:9f:ee:12:e3:05:97:04:75:52:62:aa:94:
44:06:ad:c3:f3:a1:7e:dd:6e:86:4c:b7:d0:89:15:0a:85:21:
9e:4a:ea:d0:b7:9c:db:79:68:9e:10:dc:71:b2:d6:75:45:f9:
c5:45:d3:18:e1:74:f0:3f:c2:bb:70:b8:1c:d4:9b:7e:24:c9:
57:ef:b1:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:40 2025 by rpki-client