Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: pdUIcMLD389DNCx5QCYh1j/z9S5LpGwAbRItO9hoXg4=
Subject key identifier: 24:D5:9F:8A:62:DB:E4:9E:5B:AB:38:CB:C3:4A:B0:53:6D:01:44:5C
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 0199FCC612EA1CEEE3D19811818AAC3F1B89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 142F
Signing time: Sun 19 Oct 2025 14:01:03 +0000
Manifest this update: Sun 19 Oct 2025 14:01:03 +0000
Manifest next update: Mon 20 Oct 2025 14:01:03 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: 6/hRZ1ZZ/CYwQ5qQw1o/tSOOZ3Q+r9CJq6+UmN7scW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:12:ea:1c:ee:e3:d1:98:11:81:8a:ac:3f:1b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Oct 19 14:01:03 2025 GMT
Not After : Oct 20 14:01:03 2025 GMT
Subject: CN=24d59f8a62dbe49e5bab38cbc34ab0536d01445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ff:f6:4b:62:4b:b3:78:37:c5:80:6c:cc:65:
ff:28:dc:2f:f6:56:57:5a:d7:e3:b0:f7:23:d4:ff:
75:a2:3f:eb:d0:b7:62:3a:da:83:23:82:67:53:df:
ce:35:2d:a7:a5:4a:bd:45:39:83:ec:36:27:a9:f4:
d6:54:3a:3c:14:f2:27:8e:44:01:50:5c:3d:bb:0e:
da:f3:f6:cb:e1:74:71:b8:59:71:90:c1:23:bf:91:
f4:68:6b:9c:c0:55:c5:7c:01:8c:86:33:69:fe:d7:
f0:89:13:1c:80:86:dd:e6:cf:8e:ab:eb:7f:07:72:
33:16:73:f5:8a:5a:47:f9:ea:5a:82:b5:29:87:0f:
42:3f:2a:9e:4a:5c:a2:f9:13:2c:12:30:46:86:30:
57:89:7f:fb:3a:b2:fd:ba:80:92:a8:ca:96:17:7c:
42:45:8f:98:78:8d:cb:15:68:09:bf:80:c2:48:b4:
94:b1:17:f7:17:7d:38:46:a0:4f:2c:b7:f1:cc:0f:
e4:b5:e3:41:54:40:8a:c3:10:42:a6:9d:0e:e6:3a:
b9:85:0d:d1:e1:1e:e9:64:6a:e5:ac:0a:7a:ce:74:
81:8c:d3:9d:e5:7c:1d:1b:22:40:d1:15:b0:47:1f:
95:53:15:46:9b:48:03:3e:ae:2f:7b:cc:14:ae:43:
2e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:D5:9F:8A:62:DB:E4:9E:5B:AB:38:CB:C3:4A:B0:53:6D:01:44:5C
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c1:5d:22:ab:7e:cb:00:f9:e9:fc:2f:61:b8:05:4d:84:b8:
a5:80:7a:b0:62:b6:d1:60:c8:b8:9a:17:98:c1:a0:ac:1b:54:
80:06:2e:f8:12:d1:7e:0e:da:7e:52:c2:eb:2b:18:ef:bb:46:
67:d8:d3:0d:de:83:c2:87:fe:f9:cb:30:02:27:5e:1c:f8:c5:
39:5c:0e:b4:54:9d:f1:bd:6c:95:aa:c2:a5:b5:df:5c:7c:10:
35:f5:65:28:5d:b7:0b:fb:b8:0d:e3:90:4a:dc:2a:63:cf:68:
c0:7f:2d:eb:24:32:9f:f6:7f:a1:0e:47:07:9c:75:51:4c:12:
5f:8d:4f:c0:a7:ab:4b:03:6f:c8:e1:d9:d6:12:fa:05:76:42:
d1:3c:b3:7e:f6:97:01:85:62:13:d9:a5:d9:d0:86:99:91:56:
2d:fd:49:b8:e4:1a:9b:bc:38:64:03:ec:bd:96:a8:76:71:f2:
8a:c2:53:25:44:48:d8:bd:84:2e:7f:a1:20:ab:83:40:29:ed:
a8:53:db:8c:3a:0e:4d:cd:57:2e:d1:a2:68:16:b7:75:50:2b:
14:af:94:d4:b8:4d:a8:36:ba:78:d4:7a:18:13:c0:17:c3:56:
53:0d:9a:0a:46:11:64:9b:b4:19:7c:ec:46:cf:83:db:00:6b:
5c:03:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:35 2025 by rpki-client