Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: sP6b+LtADW/1Hn8+wTBcwJFn9xpygRPhM4wLKvkZ+TE=
Subject key identifier: 2D:44:63:FC:A5:50:7D:A4:8B:8D:D3:99:EB:D5:BE:7D:E6:E9:38:A2
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 0199FBEC55FE094B52E9EA09797032088620
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:03:13 +0000
Manifest this update: Sun 19 Oct 2025 10:03:13 +0000
Manifest next update: Mon 20 Oct 2025 10:03:13 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: Q4+Ll8XYIh8OBMNdFsJtQOhwvsjOstwT3JWyCXrf3Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:55:fe:09:4b:52:e9:ea:09:79:70:32:08:86:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Oct 19 10:03:13 2025 GMT
Not After : Oct 20 10:03:13 2025 GMT
Subject: CN=2d4463fca5507da48b8dd399ebd5be7de6e938a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:d8:41:5d:6f:e2:6f:d4:04:b8:b8:37:0a:
2d:5b:1e:39:3d:f6:99:4c:b5:f9:18:16:8b:c0:9b:
3e:7a:fa:31:34:36:ca:73:f6:50:1f:a0:92:55:39:
7a:e8:54:2d:d8:f7:4a:7a:cd:29:44:48:80:5b:a7:
29:a7:21:4f:39:10:b2:b8:a0:ec:0d:13:c5:e4:51:
8b:0d:d1:17:53:7f:a0:21:43:ad:7d:01:90:f0:06:
db:6e:fb:ce:a7:ec:50:bb:40:1e:45:28:5a:1b:63:
05:54:7e:e2:8b:71:4a:2d:8a:79:ff:7d:bb:72:c6:
f3:0f:3e:73:56:66:e7:30:23:f9:d0:52:ac:a4:da:
57:80:f0:37:53:a7:c8:6d:f2:56:54:f1:aa:fa:e2:
8a:e9:85:cf:3a:ab:a4:f7:8a:ff:4f:b3:cc:c7:0b:
a4:f8:c4:c1:74:bf:04:cc:37:d1:0b:86:8c:1d:eb:
8f:d7:ef:de:eb:1f:d4:2f:38:66:31:a1:09:21:f8:
4f:8a:55:b6:f6:b7:da:76:9a:ec:77:3d:c0:0c:1e:
48:42:03:4c:89:b3:57:83:3b:e7:c1:2a:3d:9b:1b:
02:92:79:5b:ae:38:90:a8:e7:09:7b:99:85:a9:97:
a1:73:72:e0:ff:4a:1d:80:9c:b8:12:dc:0e:3c:47:
46:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:44:63:FC:A5:50:7D:A4:8B:8D:D3:99:EB:D5:BE:7D:E6:E9:38:A2
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:c1:85:6b:a7:8c:78:45:fd:16:c1:00:05:b8:70:f1:94:28:
68:62:91:e1:cc:5c:84:4d:df:f9:27:7c:22:86:bb:12:ab:0a:
87:04:22:ab:5c:5a:84:2e:b4:d8:d2:b7:3f:f4:f2:32:cc:86:
2c:cb:7f:58:86:52:4d:ea:f6:e4:1c:aa:5d:8a:26:6c:60:ea:
3a:8e:88:8b:8a:51:3b:41:5f:d0:0b:ab:4c:3d:36:62:6b:04:
8a:27:9c:52:79:53:15:fc:9b:d2:32:54:cb:7c:46:93:1e:90:
b4:ed:08:63:e1:44:21:2e:ab:af:5d:f6:96:90:0d:c1:72:2c:
9d:6b:4b:5d:f8:63:8f:db:6e:47:af:dd:f2:6f:29:60:0a:ba:
ca:dd:2d:15:14:91:3e:9d:79:6c:1e:8a:dc:22:8d:b8:f1:3a:
bd:3b:a4:ea:49:c1:31:05:ef:56:0c:0e:a9:30:5a:f1:5c:30:
75:6d:d9:60:35:45:db:16:1b:1f:17:4b:70:9a:7c:2f:fe:9f:
8f:34:87:62:2f:4e:ba:7d:63:a9:dd:52:37:5e:74:36:88:9a:
3d:1c:fe:42:b1:9f:6c:33:8c:13:f8:17:96:72:2a:45:18:2e:
fc:13:5d:db:14:b5:60:11:43:e9:c2:1d:a7:3f:48:d5:d8:ce:
43:ff:43:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn77FX+CUtS6eoJeXAyCIYgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz
ODc0YzYwHhcNMjUxMDE5MTAwMzEzWhcNMjUxMDIwMTAwMzEzWjAzMTEwLwYDVQQD
EygyZDQ0NjNmY2E1NTA3ZGE0OGI4ZGQzOTllYmQ1YmU3ZGU2ZTkzOGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG/YQV1v4m/UBLi4NwotWx45PfaZ
TLX5GBaLwJs+evoxNDbKc/ZQH6CSVTl66FQt2PdKes0pREiAW6cppyFPORCyuKDs
DRPF5FGLDdEXU3+gIUOtfQGQ8AbbbvvOp+xQu0AeRShaG2MFVH7ii3FKLYp5/327
csbzDz5zVmbnMCP50FKspNpXgPA3U6fIbfJWVPGq+uKK6YXPOquk94r/T7PMxwuk
+MTBdL8EzDfRC4aMHeuP1+/e6x/ULzhmMaEJIfhPilW29rfadprsdz3ADB5IQgNM
ibNXgzvnwSo9mxsCknlbrjiQqOcJe5mFqZehc3Lg/0odgJy4EtwOPEdG4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1EY/ylUH2ki43TmevVvn3m6TiiMB8GA1UdIwQY
MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt
Y2U1OTUyMmVmNjZmLzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm
LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8GFa6eM
eEX9FsEABbhw8ZQoaGKR4cxchE3f+Sd8Ioa7EqsKhwQiq1xahC602NK3P/TyMsyG
LMt/WIZSTer25ByqXYombGDqOo6Ii4pRO0Ff0AurTD02YmsEiiecUnlTFfyb0jJU
y3xGkx6QtO0IY+FEIS6rr132lpANwXIsnWtLXfhjj9tuR6/d8m8pYAq6yt0tFRSR
Pp15bB6K3CKNuPE6vTuk6knBMQXvVgwOqTBa8VwwdW3ZYDVF2xYbHxdLcJp8L/6f
jzSHYi9Oun1jqd1SN150NoiaPRz+QrGfbDOME/gXlnIqRRgu/BNd2xS1YBFD6cId
pz9I1djOQ/9DPA==
-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:52 2025 by rpki-client