Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft
File: rENzvP5MWzcCARWd-W2xNzaYur0.mft (raw, json)
Hash identifier: qVbxHGNPHYSOOjB73uR7lfEDH53DQkZcescuQaLuPnI=
Subject key identifier: 3D:09:82:02:B4:2E:D2:DF:02:B5:E1:8D:83:DD:5A:2D:16:59:E1:91
Authority key identifier: AC:43:73:BC:FE:4C:5B:37:02:01:15:9D:F9:6D:B1:37:36:98:BA:BD
Certificate issuer: /CN=ac4373bcfe4c5b370201159df96db1373698babd
Certificate serial: 0199FC217EE5B66D47D695E01C71D3BC04EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rENzvP5MWzcCARWd-W2xNzaYur0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft
Manifest number: 0B
Signing time: Sun 19 Oct 2025 11:01:17 +0000
Manifest this update: Sun 19 Oct 2025 11:01:17 +0000
Manifest next update: Mon 20 Oct 2025 11:01:17 +0000
Files and hashes: 1: rENzvP5MWzcCARWd-W2xNzaYur0.crl (hash: iVOD6P0t9h0/YqvVpdmxAH8aEFVWu2CPy2VQSVVyszo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rENzvP5MWzcCARWd-W2xNzaYur0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:7e:e5:b6:6d:47:d6:95:e0:1c:71:d3:bc:04:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac4373bcfe4c5b370201159df96db1373698babd
Validity
Not Before: Oct 19 11:01:17 2025 GMT
Not After : Oct 20 11:01:17 2025 GMT
Subject: CN=3d098202b42ed2df02b5e18d83dd5a2d1659e191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:53:46:d0:05:54:54:1a:50:5e:e8:a4:18:bf:
fa:e0:97:f6:55:a5:23:0c:a9:d7:9a:e9:33:99:8b:
c8:4b:1a:25:b7:85:cc:7d:13:1b:7a:72:e6:2a:3a:
32:f2:88:52:eb:1b:ee:07:ac:50:c6:ea:04:5a:4a:
9c:f4:3e:3c:e0:15:fd:f1:69:e0:0e:72:38:32:1d:
37:02:e5:96:df:93:a3:62:99:99:c4:e1:99:1a:8c:
ec:d0:a0:bc:60:78:95:91:c3:69:46:3a:bc:0d:a8:
c1:36:4c:5e:e0:31:b0:33:1f:23:ef:a9:82:f9:89:
0f:b6:68:c7:3d:5d:2d:64:10:f5:37:41:43:e4:aa:
7c:b1:27:96:64:a9:1e:3d:af:cb:22:9d:6f:5f:b7:
67:e2:4b:fc:c6:85:c1:ba:9e:9f:70:10:8f:e5:14:
79:b1:be:b1:51:e7:03:73:0a:af:3b:fd:24:bc:50:
72:10:19:af:b8:3b:9c:d4:3e:9d:eb:80:3b:8c:ed:
2f:2e:e1:04:45:bb:e0:f7:87:50:4c:60:cd:2b:3d:
90:a5:10:72:5b:c1:9a:12:b5:7a:b1:77:eb:ef:87:
b6:24:04:12:90:ce:b0:33:5f:6d:df:0b:72:fd:a8:
90:17:d9:1a:e3:cd:7b:d0:47:db:d4:13:b4:60:7d:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:09:82:02:B4:2E:D2:DF:02:B5:E1:8D:83:DD:5A:2D:16:59:E1:91
X509v3 Authority Key Identifier:
keyid:AC:43:73:BC:FE:4C:5B:37:02:01:15:9D:F9:6D:B1:37:36:98:BA:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rENzvP5MWzcCARWd-W2xNzaYur0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/559200-c501-4ac0-a5f5-e5a35a847273/1/rENzvP5MWzcCARWd-W2xNzaYur0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:b6:13:2c:72:49:0d:3f:3a:c4:cd:d5:9a:34:06:74:a7:78:
c1:2c:40:af:3d:6e:58:7c:57:18:28:f1:e6:83:18:66:08:09:
5e:85:6c:0c:e0:3f:ca:03:04:d5:01:6e:94:97:cd:46:56:13:
d5:7c:a9:e1:10:1e:a8:8c:8c:9b:0a:c3:c0:bf:5d:eb:17:c3:
4a:12:d6:3a:cf:82:73:74:54:0f:d6:6c:de:31:33:97:ac:59:
de:ea:10:c2:4e:d9:27:a8:a9:ed:f4:6e:49:7a:a2:a4:87:66:
f2:94:7d:8e:e3:55:e5:bf:5e:e3:5d:de:f1:85:c5:3b:bf:b3:
2f:a3:cf:f8:1e:6b:5b:f8:66:c9:ce:4e:cb:2c:c7:5c:af:2f:
3d:fb:74:df:45:59:4e:8a:6b:30:94:b0:dd:23:f5:38:cf:5d:
76:74:21:85:c1:fb:33:62:b2:40:da:d0:03:15:97:4d:bd:75:
9d:51:d6:6d:44:18:b2:b3:75:8a:9e:8f:91:77:cf:be:92:58:
b7:9b:ff:f7:fc:91:c8:26:3d:6b:0f:f3:03:79:df:b9:3a:04:
d1:a6:7c:aa:ae:01:3a:6e:45:0e:ec:5d:76:52:88:af:39:0a:
07:41:22:d9:dc:1b:3e:be:39:85:81:2b:07:55:e6:98:09:3a:
86:09:e1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:05 2025 by rpki-client