Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
File: r03WWsHW2oS6m4HCCeCnYXNF6iM.mft (raw, json)
Hash identifier: UjdktElYpKSf31FU/dU4bEunghXJ+7Ai9OYWVilDU0U=
Subject key identifier: 71:27:45:95:B7:39:A3:8D:27:C6:E6:F3:8D:52:7C:8C:7D:E1:AD:87
Authority key identifier: AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
Certificate issuer: /CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Certificate serial: 0199FDD94A9169FEB023E4BF6FED73A81D20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
Manifest number: 0A15
Signing time: Sun 19 Oct 2025 19:01:39 +0000
Manifest this update: Sun 19 Oct 2025 19:01:39 +0000
Manifest next update: Mon 20 Oct 2025 19:01:39 +0000
Files and hashes: 1: r03WWsHW2oS6m4HCCeCnYXNF6iM.crl (hash: 6AA5cV2esDMhURTP8/5lyLS6RTztg2ZgQnAoURd5RDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:4a:91:69:fe:b0:23:e4:bf:6f:ed:73:a8:1d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af4dd65ac1d6da84ba9b81c209e0a7617345ea23
Validity
Not Before: Oct 19 19:01:39 2025 GMT
Not After : Oct 20 19:01:39 2025 GMT
Subject: CN=71274595b739a38d27c6e6f38d527c8c7de1ad87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:b6:64:86:7f:a0:67:ad:d3:27:05:f1:5f:
da:bb:28:a7:1c:ee:83:a3:9e:c6:7d:8a:b0:74:8d:
53:a1:36:a0:21:5f:55:08:6f:4c:5e:fe:44:5b:70:
32:07:f1:a0:4e:67:da:47:fd:3b:a0:86:0e:33:95:
fb:79:51:cb:9e:ef:fb:f1:11:2c:f8:75:46:18:78:
2b:89:1c:cb:a2:5b:14:a1:98:5b:4d:33:0f:94:de:
12:f0:87:8d:56:1c:82:4e:8e:22:1d:5a:0a:b8:aa:
76:35:ca:c5:93:24:13:42:dc:0c:65:9e:1f:72:4d:
a9:a4:46:2a:9b:a4:38:c7:1c:dd:63:66:46:b7:c9:
ca:c2:a0:8d:f4:94:90:39:8b:ae:92:5b:0c:17:83:
36:26:4a:88:fb:90:01:90:c4:1f:a0:a7:16:d9:68:
15:1f:ea:e7:9e:8d:b9:24:b3:82:24:b2:3f:82:31:
4e:9a:60:4b:32:b3:fe:fe:29:14:2c:d2:90:1c:f4:
19:6e:8b:72:8d:90:bb:90:34:64:de:c1:8b:4e:89:
6b:61:31:e5:5d:cb:3f:96:7e:0e:44:d5:e5:c5:1f:
ae:9d:86:98:70:93:bd:8e:c4:1e:82:38:90:3c:c2:
c7:24:9f:a5:32:64:e7:08:85:bf:b8:86:e7:a9:b2:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:27:45:95:B7:39:A3:8D:27:C6:E6:F3:8D:52:7C:8C:7D:E1:AD:87
X509v3 Authority Key Identifier:
keyid:AF:4D:D6:5A:C1:D6:DA:84:BA:9B:81:C2:09:E0:A7:61:73:45:EA:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r03WWsHW2oS6m4HCCeCnYXNF6iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9abde0-db5b-4564-bd85-8f96d729f084/1/r03WWsHW2oS6m4HCCeCnYXNF6iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:dd:e9:e1:e6:41:94:f6:4b:ef:56:6f:aa:a2:8d:80:59:4f:
fd:a8:cb:10:49:e6:c5:06:13:a6:b7:1c:20:ce:d9:97:42:2f:
be:40:12:91:85:2b:19:4d:32:71:81:a6:b7:68:5c:8d:ef:53:
31:d4:a8:68:81:4a:56:8c:01:e5:ed:62:95:9a:cb:c6:a1:31:
ba:84:ea:b0:db:b3:4a:bf:c8:ad:f4:ba:a3:17:40:22:ec:f5:
35:da:05:a5:d8:45:51:65:29:d4:ae:a9:28:ed:95:46:39:1f:
97:3c:8a:55:ee:67:fe:33:6b:8a:5d:bf:70:50:4f:b6:f5:83:
dc:59:b7:82:ea:59:59:65:79:0c:57:86:5f:81:8d:09:89:17:
85:b4:b1:45:78:73:4f:af:c8:1c:e0:06:c9:0b:ed:71:40:3c:
57:18:de:a6:b0:15:c9:fe:7c:ff:27:ed:37:7c:51:c0:0c:cf:
44:0c:f6:c7:c9:a4:14:0d:ee:fd:d5:01:4d:19:66:9d:7a:66:
87:55:f3:94:8c:7b:7c:88:39:36:20:de:35:da:0b:5a:e0:8b:
69:31:e4:4f:bf:a0:ad:97:ca:13:a5:fd:ee:07:a3:32:85:2e:
1e:3b:9a:e7:ee:c4:af:19:fe:2b:3d:5f:64:c5:36:a0:fa:76:
e5:28:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:09:54 2025 by rpki-client