Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
File: 04SkGZfu6k0F_MfNQLEhE6W7aeg.mft (raw, json)
Hash identifier: qkKKd9OAoYhbZv0TZz9Vk+4qd6k/ORfh96Cn4zTS8Q0=
Subject key identifier: D2:61:23:09:A6:38:47:0A:1B:B0:A9:18:DE:B3:D9:82:F1:8B:0F:82
Authority key identifier: D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
Certificate issuer: /CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Certificate serial: 0199FBEBD6C98AC831B4F65120F2A785DD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
Manifest number: 0AEE
Signing time: Sun 19 Oct 2025 10:02:41 +0000
Manifest this update: Sun 19 Oct 2025 10:02:41 +0000
Manifest next update: Mon 20 Oct 2025 10:02:41 +0000
Files and hashes: 1: 04SkGZfu6k0F_MfNQLEhE6W7aeg.crl (hash: rEiqgI9CwZAI4sEbzpsKxkIC7aDcYelc2rSeAwmYWg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:d6:c9:8a:c8:31:b4:f6:51:20:f2:a7:85:dd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d384a41997eeea4d05fcc7cd40b12113a5bb69e8
Validity
Not Before: Oct 19 10:02:41 2025 GMT
Not After : Oct 20 10:02:41 2025 GMT
Subject: CN=d2612309a638470a1bb0a918deb3d982f18b0f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:fd:94:ab:95:1d:ae:bd:e6:ca:58:ac:58:cb:
a5:3a:a0:84:78:96:c8:f5:05:c8:b0:f7:63:1b:7d:
81:8f:bd:9e:22:85:27:03:79:c1:8c:41:24:8a:b2:
ce:2f:d6:c6:e9:49:35:5e:1b:5f:80:76:fd:9c:2d:
b5:1e:9a:dd:c3:00:25:9f:2a:27:12:3e:d7:8a:05:
70:87:2e:8a:70:4d:ee:d9:ee:46:c8:33:25:c1:91:
56:35:58:1c:32:59:26:df:6d:27:95:e2:77:05:9a:
ed:bb:8c:d0:d5:c7:ac:1b:94:15:07:4f:d3:b7:26:
29:eb:3c:a0:08:0e:63:cd:62:51:d4:f3:a1:e4:eb:
b0:38:f1:22:de:63:c6:2e:fd:77:35:2d:38:9a:b9:
b5:66:98:e7:d3:c8:e1:38:06:ee:d1:8b:82:c9:d9:
aa:43:e5:26:b3:0c:3c:c6:6f:2f:62:7f:05:79:8c:
0f:59:c4:8c:99:dd:7d:47:9f:6e:63:95:72:5b:08:
36:45:b9:2e:14:e9:9a:7c:52:fd:81:6c:99:b5:27:
fb:16:4d:3c:fc:b6:29:a6:e4:e7:36:35:27:97:b5:
a2:8a:be:8e:fa:af:5b:a6:85:0f:10:d9:3d:06:a3:
6d:35:b6:0a:f0:3b:4f:c1:73:68:69:06:de:c4:ac:
23:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:61:23:09:A6:38:47:0A:1B:B0:A9:18:DE:B3:D9:82:F1:8B:0F:82
X509v3 Authority Key Identifier:
keyid:D3:84:A4:19:97:EE:EA:4D:05:FC:C7:CD:40:B1:21:13:A5:BB:69:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04SkGZfu6k0F_MfNQLEhE6W7aeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4906ff-9e20-4118-9aae-f6d0ff458648/1/04SkGZfu6k0F_MfNQLEhE6W7aeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:56:2b:dd:07:c2:57:c1:29:68:27:dc:f0:3c:dc:e2:c8:28:
d0:e0:66:39:04:76:03:3d:ac:5d:99:bf:f0:55:69:6d:16:c4:
22:08:6d:46:51:9d:4c:cd:e7:07:f4:38:44:71:5c:65:2f:04:
55:ab:5b:e4:97:b7:8a:27:36:12:8e:9e:52:51:71:7e:7c:0c:
b7:a5:1e:dd:31:eb:48:38:5f:80:6e:18:fd:dd:15:af:24:06:
d2:d3:98:03:18:6b:c9:b0:78:0d:83:5b:d2:5d:be:97:86:69:
79:b0:b0:50:bc:9c:e5:11:78:39:41:01:84:f1:7a:de:65:e0:
cb:72:83:e1:b3:62:72:7a:02:30:8a:d8:1c:d6:2a:59:36:4e:
7d:1f:5e:76:a5:34:e1:2d:86:f5:2a:a6:5b:94:e2:f2:c2:b0:
9d:19:c9:42:6b:41:24:78:6c:86:d0:11:70:a1:d1:2a:3a:5d:
80:f3:af:97:d3:a6:e2:1d:8e:e0:0d:6e:80:35:27:47:0f:5e:
e8:03:a5:59:ed:36:0e:fd:f2:64:4c:c2:03:32:ed:67:d5:31:
78:bc:1c:e2:be:1e:91:b0:0b:ac:5f:52:11:36:74:03:93:b5:
e2:67:a8:92:36:0b:f3:53:bf:ce:e9:27:8f:e6:d8:ee:28:13:
17:ec:86:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:39:47 2025 by rpki-client