Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
File: rfjUKjroBc6WqpT66fW0QG_0VZk.mft (raw, json)
Hash identifier: Q46gpe88Zh3uWTz2CQycLF48wPWr7+dYooRuH3jBfJU=
Subject key identifier: 27:4F:A8:C4:49:4F:91:CA:7A:0E:AD:56:84:DB:F8:8E:87:BE:62:C6
Authority key identifier: AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
Certificate issuer: /CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Certificate serial: 0199FC8FB175B9E115D12AF5065934F00761
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
Manifest number: 0449
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: rfjUKjroBc6WqpT66fW0QG_0VZk.crl (hash: /RmQWcCP7E7/GAnqJGtAku0TuORFC/JPEU+TVoK8dNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b1:75:b9:e1:15:d1:2a:f5:06:59:34:f0:07:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adf8d42a3ae805ce96aa94fae9f5b4406ff45599
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=274fa8c4494f91ca7a0ead5684dbf88e87be62c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ed:32:4f:4b:78:de:be:9b:9c:15:7f:00:c0:
44:64:e9:d0:fd:89:13:57:db:99:4e:7b:e7:1e:ed:
e3:e5:da:a2:63:4a:77:a1:ea:2c:c8:11:28:d2:8e:
98:fd:39:56:84:b3:99:49:fc:cb:4e:cb:a0:70:d0:
70:41:70:61:a2:ef:7e:ce:ca:1a:e1:15:c8:27:ca:
a0:ec:ca:2f:d4:e3:ef:b8:86:99:f5:f2:86:59:ca:
7f:83:f8:6e:0e:29:bb:e5:93:62:56:cf:1f:e9:98:
d0:6e:2b:5e:d3:7d:5d:d9:d5:2c:1c:da:7b:29:ca:
4b:61:97:78:76:25:8e:46:e5:11:67:a6:64:53:55:
9c:2a:c8:f3:65:75:a1:7b:6e:6d:44:b9:2b:78:09:
28:47:05:19:b4:f1:7f:e2:43:49:97:a0:33:b0:66:
59:2b:42:68:37:92:a9:00:46:9a:b3:88:c9:98:50:
38:c9:91:e4:9a:36:35:e4:27:a1:30:4c:28:b4:69:
55:b3:d9:73:59:22:06:bf:ea:a0:94:54:99:aa:77:
6d:46:64:ed:54:db:24:bd:24:0a:b3:a9:41:1d:df:
48:1c:9a:c6:a9:0a:02:dc:88:d0:a3:77:ba:5a:ab:
5b:e4:a8:33:38:92:c2:b2:35:de:00:ab:64:ad:82:
ef:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:4F:A8:C4:49:4F:91:CA:7A:0E:AD:56:84:DB:F8:8E:87:BE:62:C6
X509v3 Authority Key Identifier:
keyid:AD:F8:D4:2A:3A:E8:05:CE:96:AA:94:FA:E9:F5:B4:40:6F:F4:55:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfjUKjroBc6WqpT66fW0QG_0VZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/5b2305-97fd-4730-b1a0-a779b993df58/1/rfjUKjroBc6WqpT66fW0QG_0VZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a6:17:ec:6f:cb:f4:64:a5:e1:bd:0a:e4:e1:7a:fd:0d:a4:
c2:e1:55:6f:98:eb:97:8c:59:47:4a:d7:50:12:5c:3b:ad:9b:
39:9f:8f:28:2e:0c:b7:e9:37:51:de:b8:26:59:73:b7:5b:58:
cd:41:7f:2f:1b:b2:04:9e:a3:66:51:30:fe:3a:f1:c7:4f:a0:
19:4e:b3:1e:9b:ec:d3:a2:29:7b:1c:32:b5:9a:1b:5d:3d:2e:
2b:fe:5e:68:9c:9c:c6:ad:eb:78:d9:43:ac:1f:0e:a3:f7:5b:
1a:4c:f0:d4:4c:d3:1a:6f:f5:fe:11:a4:1f:6d:9e:e8:26:27:
d0:af:81:32:57:14:1a:06:14:ac:78:ad:37:89:48:ca:5e:89:
8a:1d:c9:c2:3f:1e:08:12:43:bf:ee:da:d3:88:66:d7:f2:3d:
42:a0:ce:b3:e8:fb:27:f9:28:58:98:85:e0:b1:0b:4f:31:9c:
bd:2e:48:69:9a:14:2f:7e:60:2a:eb:93:3d:ff:35:fd:58:1a:
9f:78:a2:47:de:75:66:9f:25:76:6d:ec:ac:fe:0f:f3:63:ec:
ff:e6:f7:70:2c:78:7a:e9:69:ec:c8:b7:a5:81:61:1e:63:58:
2b:bb:0a:68:06:ca:7b:56:80:6c:a2:5b:f1:fd:40:58:f5:b6:
aa:48:76:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:03 2025 by rpki-client