Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
File: 47jYb67zk4HWmiGCWVgq8oXquN8.mft (raw, json)
Hash identifier: 4lwW2AM72//ihzmsPc9yYVpGUmwlWTA/H8mtkAN+OLU=
Subject key identifier: E4:73:35:70:ED:48:CF:FE:C1:7B:9E:8D:0D:64:EF:34:38:86:27:E6
Authority key identifier: E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
Certificate issuer: /CN=e3b8d86faef39381d69a218259582af285eab8df
Certificate serial: 0199FC2183BFB3DA5E681D35E0DEB6AFDA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
Manifest number: 0CE0
Signing time: Sun 19 Oct 2025 11:01:18 +0000
Manifest this update: Sun 19 Oct 2025 11:01:18 +0000
Manifest next update: Mon 20 Oct 2025 11:01:18 +0000
Files and hashes: 1: 47jYb67zk4HWmiGCWVgq8oXquN8.crl (hash: KBM+6OmTxe0HPy1C/809aOcAK/6kEuop1vwmxikBgZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:83:bf:b3:da:5e:68:1d:35:e0:de:b6:af:da:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3b8d86faef39381d69a218259582af285eab8df
Validity
Not Before: Oct 19 11:01:18 2025 GMT
Not After : Oct 20 11:01:18 2025 GMT
Subject: CN=e4733570ed48cffec17b9e8d0d64ef34388627e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f2:82:c4:ba:9e:35:ea:33:6a:0c:e5:06:20:
60:9f:f9:66:85:e8:bd:1a:c1:1d:1f:1b:64:81:9a:
ef:bb:30:3b:a1:37:57:15:2c:2d:64:9a:31:d6:f3:
b5:af:3d:75:ba:79:fd:94:a5:f2:11:fa:c6:26:64:
aa:74:c2:b6:e3:b0:1f:ba:c1:18:9b:d2:52:98:1b:
54:ee:83:9c:59:64:76:b7:bf:04:71:ed:30:73:51:
26:27:3b:62:e6:fc:41:b0:f0:06:f3:79:12:9f:7c:
87:72:74:5e:35:fa:37:9b:bc:a1:fc:98:24:12:2b:
28:c5:4b:f6:c8:40:b1:10:82:f5:71:76:1e:cd:9f:
2e:7a:5a:70:ed:4c:09:3c:4e:c6:79:0a:84:17:1b:
29:4f:d1:de:62:70:18:c3:2b:60:88:16:c5:05:81:
3e:09:d0:1e:02:b3:02:be:8d:5d:1d:02:70:2f:cd:
12:bd:4e:59:23:96:51:e1:1c:1c:00:cb:ea:37:8f:
7f:f6:6c:83:43:eb:2b:54:f9:12:b1:88:cf:67:ff:
e7:09:c5:df:65:54:85:fb:c0:d2:0c:34:27:bd:05:
05:06:4f:29:23:fe:2e:c6:d5:52:4d:fe:64:74:07:
ca:2b:4b:29:30:5e:70:c7:fd:cc:20:71:87:d8:b5:
92:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:73:35:70:ED:48:CF:FE:C1:7B:9E:8D:0D:64:EF:34:38:86:27:E6
X509v3 Authority Key Identifier:
keyid:E3:B8:D8:6F:AE:F3:93:81:D6:9A:21:82:59:58:2A:F2:85:EA:B8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/47jYb67zk4HWmiGCWVgq8oXquN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/658375-42c8-4fe2-8508-c25a2c828c5f/1/47jYb67zk4HWmiGCWVgq8oXquN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b9:9f:e3:a1:ca:62:96:a7:1f:1f:27:15:e7:63:b6:9e:1a:
5b:b6:01:5a:bc:b2:fe:5c:53:ca:43:5f:fa:1e:2f:eb:23:5d:
39:b0:38:da:53:f9:c3:7c:d5:57:68:f6:6f:89:31:d3:eb:63:
e4:17:5d:ef:d8:29:3b:4f:d5:61:37:2c:4d:5b:21:c9:02:12:
57:c3:78:df:37:36:06:46:a8:b0:38:a7:fe:4a:82:34:76:6d:
a0:d1:ab:e2:50:d6:e0:1a:03:c3:6d:06:e6:2f:0a:f9:26:91:
50:ef:03:9a:bc:1d:4c:d0:11:b1:20:44:f5:fd:d2:72:2c:cc:
eb:1d:60:08:7f:67:86:7a:45:1f:dd:2b:d1:08:b8:42:c2:44:
fe:83:ed:ac:65:91:ef:d0:5b:16:52:1f:9e:c1:36:de:6b:ef:
28:3b:19:b5:26:95:f5:6c:26:d6:aa:16:61:c1:5f:11:9e:b8:
27:30:8a:b3:66:5c:fe:eb:37:c3:54:a0:3f:04:39:70:87:2f:
9d:6d:5c:9b:c2:0a:84:bc:f9:b2:d9:63:75:58:56:6c:b8:07:
1e:d7:d9:8a:5d:d7:6f:22:63:0e:b2:e6:90:bb:c0:dc:39:ff:
65:b3:7c:bd:72:5c:c3:0b:a6:34:06:95:8f:a5:b5:10:79:8c:
a3:1e:40:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:52:26 2025 by rpki-client