Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: uG1fDNleNRBtAlRC06VARTarRrO0sbXlOQaDfddqKYE=
Subject key identifier: CF:43:B0:CF:0C:85:78:A0:B4:9F:AC:32:B5:66:C2:3F:B4:55:35:D8
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 0199FFC7D79F7694A3DFD66738E40B4CC446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 127D
Signing time: Mon 20 Oct 2025 04:01:50 +0000
Manifest this update: Mon 20 Oct 2025 04:01:50 +0000
Manifest next update: Tue 21 Oct 2025 04:01:50 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: RNyEVrHwsYHrDbJDiqYfmXvffAcgbWtWdMxr3qQOtz4=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:d7:9f:76:94:a3:df:d6:67:38:e4:0b:4c:c4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Oct 20 04:01:50 2025 GMT
Not After : Oct 21 04:01:50 2025 GMT
Subject: CN=cf43b0cf0c8578a0b49fac32b566c23fb45535d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:2d:2f:35:10:66:8a:20:01:f3:19:9e:9a:
2c:89:4d:17:bd:80:80:0e:21:28:a5:4f:94:da:bf:
91:95:1d:8a:0d:2e:a2:38:43:ac:7d:a8:ff:72:da:
d2:a5:a5:6e:8a:40:ef:7a:92:8f:4e:5c:82:8b:34:
93:06:18:34:69:17:7c:0d:39:17:af:d5:5d:60:a7:
93:4b:84:c5:0f:a3:8e:88:01:ef:84:fa:0f:51:31:
41:13:dd:0a:d2:ae:ac:7c:81:b9:39:16:f4:92:fe:
30:c7:81:71:bc:ba:6b:23:d8:02:1e:b9:c5:db:b4:
da:03:de:17:ce:3d:94:a9:b7:6a:1f:af:55:0d:e1:
36:db:50:4a:e3:52:79:33:6b:f9:42:4f:3d:df:6e:
68:6b:4c:1d:a9:8d:df:0e:d7:20:4c:cb:f7:24:41:
64:ed:c2:60:2c:05:12:b0:36:c4:dd:f4:b6:d5:31:
c3:9f:2e:89:1f:e2:36:7a:35:1f:13:93:53:96:e7:
27:0e:51:df:74:a1:33:81:2e:08:00:5e:ba:45:75:
ff:48:bc:41:1e:18:d1:63:e7:25:16:65:8e:3c:7e:
ac:cd:08:3e:f6:ed:c1:b8:68:55:65:18:45:c3:01:
1a:cf:91:9b:03:9c:f6:b4:3d:76:08:18:2a:89:a9:
ad:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:43:B0:CF:0C:85:78:A0:B4:9F:AC:32:B5:66:C2:3F:B4:55:35:D8
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:db:2c:36:d3:d8:f3:ad:48:82:60:7a:03:74:5f:68:07:dd:
8b:0d:d7:5e:6c:cb:c0:40:a7:38:4a:53:ca:94:2a:48:8d:11:
ea:25:ac:c9:3f:b6:c3:cc:f9:f9:99:de:d8:69:31:45:ff:12:
7b:cb:0b:43:88:02:1d:37:12:1a:af:71:35:f9:19:8d:a1:e6:
df:dd:25:8e:ae:00:f4:a0:3f:74:95:3f:86:1a:bd:13:d8:60:
d8:67:69:74:97:b2:7c:5d:e0:20:26:4b:3c:b9:54:73:0b:82:
3c:ab:3c:b3:ae:58:c7:9c:bb:76:7e:30:18:b5:e6:b5:16:b3:
49:db:5a:51:c4:86:42:f7:d1:49:72:f0:2d:a1:a3:7b:73:a5:
d8:63:fe:8b:69:f1:93:49:ab:80:04:94:de:bc:a7:74:cb:27:
93:00:1d:0a:80:e5:33:5b:1c:ef:81:5b:b4:31:ae:30:a0:67:
20:c1:4b:1e:02:a5:79:3e:47:5d:a6:76:2c:c6:40:fc:27:a7:
a2:ee:91:f4:3f:a1:c1:58:95:db:bc:b1:32:5e:bf:ef:e2:cc:
24:1a:88:19:b7:9f:24:77:a5:58:8e:95:36:ad:17:9c:60:22:
44:8b:a4:60:74:f0:54:fb:5a:fb:f0:ab:94:82:99:8c:18:c3:
ae:af:dd:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 11:39:55 2025 by rpki-client