Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
File: Sv7PZkKkULU7B21EZILZwaid7XQ.mft (raw, json)
Hash identifier: 6xFIbkCUFaW0Kc9vN85R7GJl1pTqAolt4yLnQC2Fzeo=
Subject key identifier: AF:19:03:AB:4E:A4:F3:19:6C:52:C4:B1:B9:48:A6:4D:AE:00:A0:1F
Authority key identifier: 4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
Certificate issuer: /CN=4afecf6642a450b53b076d446482d9c1a89ded74
Certificate serial: 0199FD33FDA1AC614024E3B63D1006DD68F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 16:01:06 +0000
Manifest this update: Sun 19 Oct 2025 16:01:06 +0000
Manifest next update: Mon 20 Oct 2025 16:01:06 +0000
Files and hashes: 1: Sv7PZkKkULU7B21EZILZwaid7XQ.crl (hash: JvATkW1EKGt6GYzkBtX6bWkn1WAE5Q48bpc5vT5w1KI=)
2: p61VML8uLf1Dr4htLC12P2Sv8GU.roa (hash: RPd5GMtMlOZE/03iU2ovXiDZPGo3A/MLaIBoa6BmxD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:fd:a1:ac:61:40:24:e3:b6:3d:10:06:dd:68:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afecf6642a450b53b076d446482d9c1a89ded74
Validity
Not Before: Oct 19 16:01:06 2025 GMT
Not After : Oct 20 16:01:06 2025 GMT
Subject: CN=af1903ab4ea4f3196c52c4b1b948a64dae00a01f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ff:85:b1:d9:f0:b8:65:45:91:12:b4:7b:be:
63:0c:7b:63:62:c4:bd:d0:b8:b8:1f:a4:0b:e0:06:
7d:92:8a:65:f6:05:f2:ed:7a:60:34:e1:ff:f6:b9:
5b:2f:f3:2f:de:20:d4:9a:5a:1d:88:c6:36:dd:49:
3c:93:69:19:7a:5a:fb:7e:39:f5:a6:fe:a8:c6:a7:
23:92:03:bf:f3:51:5b:70:c2:5a:5d:3a:77:3a:59:
4e:d1:d1:6d:d9:dd:2c:12:f1:13:99:32:93:1a:29:
fb:80:a0:be:e9:dd:d1:29:43:0c:94:e3:b2:11:31:
0c:67:4a:1f:38:19:53:6a:3b:6a:c0:42:f7:3b:91:
02:92:c0:d8:7f:62:63:35:3f:b9:94:df:d1:b2:45:
c7:9c:03:98:fe:5b:9a:77:f0:e3:a8:7e:aa:e8:9f:
b5:43:4b:3f:f5:c8:e2:e4:09:70:86:47:9b:9c:bf:
13:cf:5c:82:1a:00:88:8b:78:29:f9:1a:a0:9a:c6:
d1:34:4b:1a:c8:1c:1f:53:46:3e:14:34:f6:f5:66:
f9:f9:6f:a9:bc:3d:76:88:10:f3:b5:3a:b5:18:e2:
da:1c:d5:d3:c9:82:1c:83:77:c0:b8:9d:8c:e2:38:
1c:57:4d:67:fb:0e:b0:a5:d5:29:41:dc:6e:fc:c7:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:03:AB:4E:A4:F3:19:6C:52:C4:B1:B9:48:A6:4D:AE:00:A0:1F
X509v3 Authority Key Identifier:
keyid:4A:FE:CF:66:42:A4:50:B5:3B:07:6D:44:64:82:D9:C1:A8:9D:ED:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv7PZkKkULU7B21EZILZwaid7XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/5d6f6c-b006-4563-91ad-428a111ac5e0/1/Sv7PZkKkULU7B21EZILZwaid7XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:b4:58:ed:50:65:f8:4c:51:33:24:e2:47:4f:8b:39:b4:83:
60:ad:6f:bf:35:a0:7b:29:54:e1:81:85:66:4b:7f:96:a3:0a:
34:8f:0e:01:3d:52:6f:25:a2:1a:aa:4b:78:e8:47:56:3a:97:
78:1e:d1:88:58:b2:5e:ac:cf:f0:fc:48:6a:a6:c2:2e:e7:02:
4b:54:c0:0d:c7:46:03:3c:8d:bb:7a:09:c7:af:ec:d2:c8:9a:
92:da:a7:a2:5e:ea:83:be:d4:25:fe:a1:ef:ad:c9:7b:1e:b4:
f9:b0:28:fb:31:5d:90:24:42:a7:7e:9f:bb:6d:42:64:30:7d:
37:6e:a0:fa:ef:37:d9:1a:33:5b:b7:6d:ca:18:23:09:2d:ab:
c9:dc:3a:e3:b1:02:5e:f0:79:24:86:82:9c:a2:2c:e8:9d:17:
20:73:f9:be:4a:2c:0f:69:56:3a:ad:99:55:cc:c2:13:ef:95:
ec:48:9f:f4:8f:f0:f7:db:9d:6b:55:56:fe:55:d9:23:b5:92:
bc:75:f8:eb:6e:43:a5:ca:52:26:be:8f:d3:b6:7c:c3:e4:c0:
1a:4e:34:03:de:9c:ac:67:f9:8c:4d:43:60:dc:93:d9:11:3a:
1d:97:6b:97:a8:9a:47:2c:eb:51:10:17:11:14:24:e8:03:77:
a3:8b:05:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:53 2025 by rpki-client