Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: KDZLOGa1ecE+Er/8cP9i/NvUPnOJCyYUu1VshKII3jE=
Subject key identifier: 3C:C4:C3:4B:33:F6:5F:20:7A:DB:80:B0:FF:71:D6:36:CB:8B:09:06
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 0199FFC773F0E79FF089D05905DDD6D21ADE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 08F9
Signing time: Mon 20 Oct 2025 04:01:25 +0000
Manifest this update: Mon 20 Oct 2025 04:01:25 +0000
Manifest next update: Tue 21 Oct 2025 04:01:25 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: Dlh/yGzFRgmvnBFu0mQq3vFo8wuXc/uSeb/GWuEbKR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:73:f0:e7:9f:f0:89:d0:59:05:dd:d6:d2:1a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Oct 20 04:01:25 2025 GMT
Not After : Oct 21 04:01:25 2025 GMT
Subject: CN=3cc4c34b33f65f207adb80b0ff71d636cb8b0906
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c3:7e:ac:7c:2a:83:4d:0a:15:2a:87:8a:93:
ab:eb:75:e3:79:a3:fa:c4:a0:b4:48:11:04:bb:7f:
f9:25:cc:76:a3:06:95:f6:02:08:e3:94:2c:fa:d9:
a9:ce:68:ae:b6:11:36:81:c8:70:5c:56:e4:cb:7a:
28:aa:22:f2:b6:52:2d:1f:ba:02:0b:e1:d0:bb:e7:
e9:c1:ca:95:48:70:48:bd:0e:a6:a5:2a:6e:60:3a:
37:50:3f:51:86:4c:cf:90:14:8a:28:5d:85:d5:0d:
6b:56:1f:40:35:d2:68:5e:43:23:97:d2:0f:a3:37:
bd:0e:49:7e:75:1a:02:29:ab:1f:02:26:c8:c0:cf:
85:18:27:57:6f:bb:58:60:d1:9d:6c:3d:49:1b:12:
50:78:ee:cd:87:01:cd:ea:28:e7:ef:42:88:67:39:
e2:97:50:64:f8:53:38:73:7a:b7:e2:a7:2a:da:3f:
cd:49:29:e0:08:71:d7:e0:47:4f:e0:a7:a8:cf:a7:
2e:6f:ed:a0:c7:9a:25:2b:a6:5a:d9:91:ce:f2:d0:
23:c7:47:42:30:8f:0a:75:3c:62:eb:3c:e2:bc:6c:
ab:e0:c7:41:72:8d:13:4a:7a:cd:69:fb:b1:05:63:
3e:33:b7:aa:f2:85:09:92:97:78:27:a8:bb:37:7e:
c5:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C4:C3:4B:33:F6:5F:20:7A:DB:80:B0:FF:71:D6:36:CB:8B:09:06
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:bc:91:e6:61:e0:57:4e:78:5b:15:1a:a7:64:c7:bd:8a:de:
13:7e:96:40:91:3d:b8:67:63:09:b3:1c:95:bc:43:40:a6:e7:
02:88:9b:f3:b3:78:df:60:e0:04:a4:ef:ec:65:1d:cc:48:31:
f2:0c:63:fb:1c:96:68:c2:63:86:99:da:09:f1:31:63:2f:d8:
3c:28:23:8a:73:0a:3d:31:94:e3:7f:c6:f1:f6:99:18:d7:6e:
04:fa:98:b8:75:a4:c2:b9:b3:5f:b7:9f:2d:ef:8b:2e:01:2d:
ec:92:2d:a5:4f:4e:e5:2c:2a:db:40:c5:78:76:c6:da:b3:cd:
9b:12:3e:c6:b2:99:b9:06:fb:79:ea:76:a6:03:12:ec:11:7a:
5d:a8:d8:9c:8a:77:49:47:06:f0:18:8e:d2:7e:0c:32:4c:93:
ef:08:40:f7:9d:6c:70:7d:97:38:16:6d:81:5c:0d:4e:6f:23:
ac:a5:f0:f6:61:a6:6b:d6:02:aa:8d:d3:71:b9:06:da:96:d9:
15:60:86:2a:d7:c9:dd:81:91:12:00:06:29:a6:2b:5d:6d:f4:
0c:d7:6c:84:41:79:6f:6d:10:ce:39:12:42:b8:70:07:28:d6:
67:06:c0:ef:e9:10:69:8f:41:2d:ca:49:66:dc:28:dd:be:ef:
58:96:45:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:56:51 2025 by rpki-client