Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
File: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft (raw, json)
Hash identifier: OxRE8Qo6qRtyVIQe/SUIiejrbL1kTpO6Y78HeeZLv3k=
Subject key identifier: 33:B8:4E:0E:0F:A5:F1:42:85:61:DE:7C:77:90:AF:41:CA:DD:23:27
Authority key identifier: FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
Certificate issuer: /CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Certificate serial: 0199FD33F90FF89674F3A6E0E1805681653A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
Manifest number: 0DEB
Signing time: Sun 19 Oct 2025 16:01:05 +0000
Manifest this update: Sun 19 Oct 2025 16:01:05 +0000
Manifest next update: Mon 20 Oct 2025 16:01:05 +0000
Files and hashes: 1: _P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl (hash: 22dV9vCWJgInSUVVU/4dk7TLk1sfGuqH7Gd3/E4AGY4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:33:f9:0f:f8:96:74:f3:a6:e0:e1:80:56:81:65:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcfe26f9a7b23fbf1182de62c3ad522760c316f4
Validity
Not Before: Oct 19 16:01:05 2025 GMT
Not After : Oct 20 16:01:05 2025 GMT
Subject: CN=33b84e0e0fa5f1428561de7c7790af41cadd2327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:17:3c:fa:8e:d8:3c:83:be:aa:30:96:50:
67:ec:44:54:6b:2a:1e:21:fd:58:06:3c:87:7f:55:
39:bd:31:06:e9:d5:01:74:36:df:1d:31:3c:5a:99:
9b:bf:7d:80:27:6b:10:9c:d3:50:7a:53:f0:45:0e:
5d:45:38:57:88:df:97:af:cc:af:46:e2:47:d1:62:
49:24:e6:3a:77:3a:18:a2:f5:1c:c7:f0:5c:2a:38:
54:a8:27:44:50:6f:84:b6:99:dc:7f:11:90:d6:28:
ac:19:a3:b2:49:72:28:a0:09:ad:a8:14:a7:d8:d1:
a0:96:a3:2a:0c:5e:04:57:51:79:6b:b9:78:e0:fd:
e5:b3:8b:bc:c1:13:3f:48:eb:9d:ae:ba:40:f4:6b:
61:01:61:6f:69:f3:3c:c0:c4:c7:7c:67:83:a2:fc:
b0:85:f9:0a:87:c8:dd:b3:c6:d6:19:11:47:57:d8:
ec:72:dd:eb:89:26:d3:3f:3f:3d:58:6b:f8:b6:15:
cb:d7:ad:60:65:5c:16:a4:62:67:47:6f:fe:00:19:
ba:ff:90:51:19:ea:a8:3c:4e:97:8a:3f:a7:b1:64:
0f:e0:0a:c1:97:e5:fa:b6:87:31:29:06:23:6a:2f:
f6:91:61:1a:e0:e3:ac:ee:45:29:f2:2f:37:fa:de:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B8:4E:0E:0F:A5:F1:42:85:61:DE:7C:77:90:AF:41:CA:DD:23:27
X509v3 Authority Key Identifier:
keyid:FC:FE:26:F9:A7:B2:3F:BF:11:82:DE:62:C3:AD:52:27:60:C3:16:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/e78ded-e890-40d2-98e0-31a35db201f9/1/_P4m-aeyP78Rgt5iw61SJ2DDFvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2c:00:8c:6b:61:92:28:fe:6c:f5:e9:6c:4f:83:93:8c:73:
d7:98:d0:c1:75:b4:1e:eb:28:72:54:6b:d4:f0:ac:4b:40:54:
52:36:04:8e:a1:fc:61:f8:7d:0c:76:fb:2e:cd:9d:da:a1:29:
d3:8e:8b:8f:76:b4:58:81:0d:60:dc:5d:21:24:c0:b6:ec:17:
1d:83:91:2f:bd:7b:5e:83:4c:62:55:ed:40:cf:88:94:72:f3:
99:7e:25:a5:7c:98:81:8f:78:2e:fe:5b:a7:e4:a3:47:8e:01:
38:f3:26:98:c1:2a:57:b2:09:5e:cd:10:ec:9c:1c:51:b8:bb:
cf:e7:72:5c:f1:e9:36:2e:85:8b:8a:5c:ed:66:e1:dd:12:ab:
d0:a4:ef:03:d3:48:a4:fd:13:52:fa:8c:ac:4f:7a:6a:d7:11:
9e:50:65:2c:aa:5c:c5:27:ac:ff:67:62:d1:58:18:34:c3:fd:
56:4f:1c:1a:d6:82:c7:8c:b0:42:b2:74:67:b0:76:dd:39:fa:
9d:15:48:95:de:79:ec:e5:65:32:86:6d:c0:dc:f0:39:1d:33:
47:4b:cc:dd:80:cd:6b:01:c5:09:08:43:48:93:e0:f7:73:aa:
1a:9b:b2:f1:42:d1:f1:d6:a8:b9:4b:0a:86:ab:87:7b:14:a0:
ef:c5:0b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:11:15 2025 by rpki-client