Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
File: sjQvyZcw8qNNCe5LXukheHVs1NE.mft (raw, json)
Hash identifier: 0Unj/GbQtyDJ0qxvm5gdZ8Y7kcz+rxrtw8NX5hBz2KQ=
Subject key identifier: A3:09:83:2D:86:C3:FE:42:50:97:65:A6:6D:88:65:3B:8F:DB:13:47
Authority key identifier: B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
Certificate issuer: /CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Certificate serial: 0199FDD917DC2195461E1AE54128DA9C4D2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
Manifest number: 078F
Signing time: Sun 19 Oct 2025 19:01:26 +0000
Manifest this update: Sun 19 Oct 2025 19:01:26 +0000
Manifest next update: Mon 20 Oct 2025 19:01:26 +0000
Files and hashes: 1: sjQvyZcw8qNNCe5LXukheHVs1NE.crl (hash: ttMLHtC0MyNhZhKRto2EMgIb+gRtIw7i2x/auL2EOtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:17:dc:21:95:46:1e:1a:e5:41:28:da:9c:4d:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2342fc99730f2a34d09ee4b5ee92178756cd4d1
Validity
Not Before: Oct 19 19:01:26 2025 GMT
Not After : Oct 20 19:01:26 2025 GMT
Subject: CN=a309832d86c3fe42509765a66d88653b8fdb1347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:aa:8c:11:f9:24:10:17:bf:5a:40:dc:df:
09:f8:0b:c3:cd:67:99:14:c0:05:26:fd:0c:3f:0b:
91:66:0f:ee:5a:c5:62:8d:3a:80:af:90:77:43:e6:
7b:40:2a:dd:2c:d4:5d:c5:05:42:53:5f:72:2c:70:
8e:76:44:d0:ac:41:a9:fa:54:72:0a:76:c7:90:fd:
e5:a9:18:8d:b0:d5:d9:47:e6:92:62:b6:e9:ec:a8:
a3:c4:22:7e:60:27:f1:d4:34:c1:3b:bf:73:0f:14:
78:1d:f2:ef:96:aa:d5:ab:56:bd:46:f2:50:4a:e9:
8f:da:b3:6c:bb:9c:09:be:6e:d1:52:72:a8:91:a8:
58:36:3a:f4:5e:e9:11:91:95:2f:11:5d:b1:38:ff:
b6:6d:5e:be:97:d8:bd:5e:62:72:bc:f0:4f:04:8d:
aa:9d:55:57:d0:16:87:e1:a7:32:25:4b:20:c3:6a:
da:06:61:fd:73:8e:49:76:22:2e:f1:25:93:54:9f:
93:0f:8d:70:a9:3f:9d:5a:de:fb:22:36:72:8a:7b:
ca:50:48:d7:03:4d:c4:a2:bf:7c:fb:db:20:34:e5:
38:02:a2:21:3d:00:db:a3:80:41:43:cc:bb:ab:1e:
c0:f4:a8:a4:1b:ac:d3:63:4d:7d:c7:71:a7:9a:fe:
b7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:09:83:2D:86:C3:FE:42:50:97:65:A6:6D:88:65:3B:8F:DB:13:47
X509v3 Authority Key Identifier:
keyid:B2:34:2F:C9:97:30:F2:A3:4D:09:EE:4B:5E:E9:21:78:75:6C:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sjQvyZcw8qNNCe5LXukheHVs1NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/584c0d-885c-44a0-9bef-7a8e38920250/1/sjQvyZcw8qNNCe5LXukheHVs1NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:2d:74:4f:40:fa:60:49:ba:12:e4:18:02:32:3a:aa:ac:98:
a6:2f:d4:7c:df:a8:67:db:2f:62:53:e4:f0:1b:35:44:91:9e:
aa:54:0a:6d:46:47:0d:d8:89:71:54:c0:3b:e9:ff:07:83:09:
aa:2d:12:c2:4b:94:e8:9d:13:8c:b0:6a:7b:20:81:9e:91:48:
15:2b:33:68:2e:74:b8:2b:21:c8:fb:af:b2:31:39:a4:85:5a:
c1:e4:de:b8:98:7c:e2:fa:e6:d0:35:a2:fd:b5:88:b3:64:ff:
46:9e:91:d3:81:00:cd:2a:79:43:b6:ca:21:fe:d6:8c:4d:f1:
2d:f5:2d:7e:d9:81:59:fe:6a:e5:c7:07:9b:86:eb:d8:d2:62:
6a:22:0f:98:6f:c2:ae:c5:33:dd:65:80:57:92:00:5a:26:0e:
66:01:9d:24:7b:5e:cd:77:a9:c1:b4:60:1d:00:d5:10:49:02:
4e:46:f0:2b:5f:da:c4:42:08:be:91:31:29:dd:3c:ff:a2:f2:
bf:20:3e:bb:e6:2a:ca:76:9f:be:7a:74:9c:b7:ce:af:fa:72:
d3:d9:54:63:ed:f2:0f:97:4e:0d:78:aa:b7:e0:3b:13:4b:50:
46:a9:5b:71:3f:87:01:d1:87:85:79:3a:d1:46:71:1a:83:82:
10:f1:8c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:12:59 2025 by rpki-client