Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
File: 493Ty2SL60JR1HzEtlvNZLCajUs.mft (raw, json)
Hash identifier: YxUhwfSoTvcGQik+iuV27Rwdb/L5A/xfLXY+OLln3UE=
Subject key identifier: 53:50:94:3F:F5:2E:15:4B:9B:6E:A8:87:29:78:EE:60:FF:B9:AF:28
Authority key identifier: E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
Certificate issuer: /CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Certificate serial: 019A0222F4E6CFAE2C0454CC726E4A5C272A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
Manifest number: 0F4D
Signing time: Mon 20 Oct 2025 15:00:36 +0000
Manifest this update: Mon 20 Oct 2025 15:00:36 +0000
Manifest next update: Tue 21 Oct 2025 15:00:36 +0000
Files and hashes: 1: 493Ty2SL60JR1HzEtlvNZLCajUs.crl (hash: kZ+Z/44PNTmIZkFReyzxiAkkt+5hTaaLezPtZElQlB4=)
2: VaNHYKd7fkf8MUmIAFzRDiRSuAg.roa (hash: kArqpkPgXwbWfVfsCGeziL2LJL/J3oK8UFUA3DsKS6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:22:f4:e6:cf:ae:2c:04:54:cc:72:6e:4a:5c:27:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ddd3cb648beb4251d47cc4b65bcd64b09a8d4b
Validity
Not Before: Oct 20 15:00:36 2025 GMT
Not After : Oct 21 15:00:36 2025 GMT
Subject: CN=5350943ff52e154b9b6ea8872978ee60ffb9af28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:22:29:a5:eb:a2:55:3b:51:7c:7d:e2:64:cf:
34:7d:01:e6:d1:a6:b4:b4:3c:d0:d9:fe:0a:58:f3:
2c:27:53:52:c5:51:8c:c3:5a:91:84:a0:68:58:e6:
27:58:63:c5:23:57:2f:36:5f:c6:7e:70:92:5d:e4:
a2:44:eb:aa:8d:6b:70:76:86:93:fc:13:89:e5:47:
30:73:cd:db:6d:12:14:0d:1a:d4:dc:df:cd:44:9a:
17:fb:98:6a:15:a5:8d:99:1b:3e:dc:ad:96:e9:37:
30:b6:32:b6:c8:3f:67:a5:8e:a3:e9:b3:a8:83:9a:
e7:7a:e6:aa:b6:1d:41:5e:45:92:fd:a3:16:f5:2b:
ef:8f:5f:82:0c:de:7f:f6:6d:ab:9a:1f:1c:da:47:
1d:d4:b3:e1:64:86:12:af:de:b8:ec:0c:db:50:38:
03:54:26:50:6c:88:ec:c1:43:de:ad:d1:34:58:99:
90:a4:91:6e:d1:1b:81:17:0d:c4:2b:f5:0d:85:e1:
e2:9d:71:61:4b:41:84:fc:d3:d6:77:80:6d:74:b1:
21:5c:91:3a:99:d6:81:94:92:1f:a5:8e:e9:fe:8d:
36:cb:e8:b6:ac:db:ac:91:8d:c9:c2:b7:60:88:85:
62:98:75:74:fa:54:c0:18:c6:1b:13:ce:4b:45:31:
ce:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:50:94:3F:F5:2E:15:4B:9B:6E:A8:87:29:78:EE:60:FF:B9:AF:28
X509v3 Authority Key Identifier:
keyid:E3:DD:D3:CB:64:8B:EB:42:51:D4:7C:C4:B6:5B:CD:64:B0:9A:8D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/493Ty2SL60JR1HzEtlvNZLCajUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc147a-83fc-4a53-a912-b6b76e22ffac/1/493Ty2SL60JR1HzEtlvNZLCajUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:e1:a0:88:13:9e:ad:97:e4:51:fb:6b:fa:b6:93:0d:b3:66:
d0:8e:08:9c:fc:84:16:bc:1d:9c:61:ec:52:8b:77:e0:20:24:
46:4c:ea:8b:10:6d:2b:db:98:fb:f0:14:35:05:b1:50:04:2b:
43:85:14:07:08:90:5b:82:2c:dd:29:e9:0e:d7:58:a1:4d:8e:
ee:b0:2a:51:f8:b3:b9:b8:b8:4a:3b:a0:54:93:90:1b:8f:00:
d0:92:2b:f4:35:0d:d5:a4:eb:32:e0:ad:b8:49:50:ff:35:44:
ad:e9:03:d6:3d:27:82:ad:c3:95:ee:42:0d:2a:23:fd:5a:8a:
fc:18:05:ee:a0:f0:6d:71:78:86:39:1c:a3:d9:c6:8b:ec:1e:
6a:b2:f8:08:48:55:a4:c9:43:4c:dd:25:95:b2:d8:4b:b6:25:
42:9b:d3:af:dd:2a:78:37:bf:f0:92:4f:9f:08:f1:d0:6f:e1:
e2:07:58:72:48:95:d9:c0:cf:f4:6a:e0:00:e2:bf:22:c8:fd:
57:47:0f:49:3f:13:14:1b:f6:2c:aa:67:3a:7e:3d:2e:07:e2:
cc:37:38:30:53:74:4d:72:de:02:c4:63:0b:a9:16:97:20:07:
bf:b3:f6:14:8b:a6:7f:d9:f2:44:41:03:17:cb:6f:51:6c:85:
0f:6d:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:16:23 2025 by rpki-client