Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
File: St2XYC4ZGOerwfYtz9TaynNJmz4.mft (raw, json)
Hash identifier: vD+UGPqWt+sqnETp1fejD0MYAPgUunLokXoP7Urdc+M=
Subject key identifier: 7B:F4:41:FC:39:E4:77:FD:E3:56:E3:02:46:35:E3:AB:85:41:E1:18
Authority key identifier: 4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
Certificate issuer: /CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Certificate serial: 0199FC58E64D9B57F6065E8FFF6CE62E955C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
Manifest number: 024E
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: St2XYC4ZGOerwfYtz9TaynNJmz4.crl (hash: h0jVKHDRNzuIkQOdTFi21SvTJWTxIIAlZN2x7gAcBlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e6:4d:9b:57:f6:06:5e:8f:ff:6c:e6:2e:95:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4add97602e1918e7abc1f62dcfd4daca73499b3e
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=7bf441fc39e477fde356e3024635e3ab8541e118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:b8:81:ef:8f:fb:65:21:36:d4:b6:e6:33:
90:48:bc:d6:fa:7b:23:07:1b:ba:ce:78:e3:84:fd:
c3:33:5e:3c:a6:aa:80:52:05:9a:e5:8b:9f:20:87:
7c:ef:bb:08:e6:8e:48:cb:52:37:b7:59:c2:a6:6d:
91:5d:4b:ce:31:fe:8b:f6:38:11:ce:d5:c5:76:ae:
d5:c0:97:c8:a9:12:e2:f0:10:83:8f:e1:6f:ce:bf:
5b:90:e7:fb:c9:a2:fe:26:a3:83:1f:4e:d5:7f:06:
96:c9:67:0f:e4:7f:bb:21:27:38:ae:45:cb:03:eb:
43:77:45:fe:6e:05:9d:48:c1:cd:91:60:d2:67:47:
4d:9d:5f:47:67:76:2a:76:ff:50:fa:8f:37:8c:c2:
53:92:57:45:11:d5:01:e3:1c:8a:ab:8e:33:a4:dd:
ee:c1:0f:47:b9:7f:da:d7:13:1c:4c:c6:6b:6c:9a:
51:6f:c1:77:2c:d7:37:5a:d8:c6:ce:a0:c1:e8:1f:
71:a3:bc:83:b7:ff:eb:b7:56:d2:27:3c:9e:b0:36:
3d:f9:04:31:40:17:de:cf:ed:db:8f:14:db:b7:56:
1a:d2:89:fd:e8:84:2e:25:23:f9:5a:2d:1b:86:d9:
5b:79:c4:de:d2:e3:14:69:a5:3b:9c:75:f4:72:1f:
23:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F4:41:FC:39:E4:77:FD:E3:56:E3:02:46:35:E3:AB:85:41:E1:18
X509v3 Authority Key Identifier:
keyid:4A:DD:97:60:2E:19:18:E7:AB:C1:F6:2D:CF:D4:DA:CA:73:49:9B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St2XYC4ZGOerwfYtz9TaynNJmz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/57542a-e1ac-4014-86fe-12e5e8173201/1/St2XYC4ZGOerwfYtz9TaynNJmz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:b6:39:51:5d:f7:60:ab:1f:11:e8:70:a3:1a:76:78:12:06:
98:63:11:21:af:67:e2:85:88:0b:01:f7:8e:83:01:b2:45:2e:
e0:e9:a2:a5:d2:44:e1:22:d0:41:0f:70:2e:d0:a1:2c:25:58:
f4:87:70:a8:22:de:39:b6:ab:f8:63:41:42:e4:7f:04:7d:8e:
8b:49:97:b3:dc:1f:a5:98:a8:06:80:1d:ac:22:0a:59:71:80:
66:2d:92:21:06:da:1c:0a:15:4f:d6:d6:4c:b9:81:03:42:27:
8d:21:64:27:83:be:65:ec:cf:84:03:47:aa:1b:92:4f:82:2a:
6f:98:a3:cc:16:d3:e2:fd:d3:97:03:95:9c:c7:31:c1:9f:ef:
06:3a:0f:17:fe:3d:5e:e3:d5:2a:a2:cc:fd:b5:b9:57:1b:7d:
f8:b1:ea:8c:cd:37:1c:d0:8b:e9:3c:2c:1b:1e:30:8c:de:e9:
a4:f0:09:f7:ba:38:bb:0f:66:0e:c9:cd:3d:02:f2:3e:b6:5c:
68:61:02:89:41:31:27:ce:4c:8a:c0:7a:92:c6:40:29:ca:2e:
24:da:0d:b3:51:93:68:63:5d:cb:e3:76:74:52:30:97:2f:44:
c8:43:c5:76:33:2b:23:05:85:59:5e:3b:ce:f5:ae:bc:62:bc:
6a:ec:e0:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:47 2025 by rpki-client