Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: HNu8+DLOGovWpaalbTBtWNMHDYPWBAHJY9XBxE9fj5Y=
Subject key identifier: 38:FC:D7:DB:4B:96:06:AF:E3:0F:7B:30:47:BB:3B:DA:FB:72:9E:BD
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 0199FC8F713497E18678F823293C4FCD3017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 0B2F
Signing time: Sun 19 Oct 2025 13:01:22 +0000
Manifest this update: Sun 19 Oct 2025 13:01:22 +0000
Manifest next update: Mon 20 Oct 2025 13:01:22 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: iq3uzZ8SlPAmhAQlm9cnzlTVmgRSWLplLBvfVpF6tMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:71:34:97:e1:86:78:f8:23:29:3c:4f:cd:30:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Oct 19 13:01:22 2025 GMT
Not After : Oct 20 13:01:22 2025 GMT
Subject: CN=38fcd7db4b9606afe30f7b3047bb3bdafb729ebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:5b:67:5b:db:77:b7:bc:11:d2:0b:83:3a:
90:91:62:24:63:17:22:93:f7:44:99:41:f1:79:e4:
fd:3c:fa:87:c1:bd:29:ac:2a:fc:3d:e4:61:48:8c:
1f:07:84:4d:4f:8e:cc:65:4f:c7:aa:bc:c4:08:55:
b1:83:68:48:5a:27:7a:d8:b8:02:af:39:d8:18:ac:
d5:7d:74:03:47:d6:18:36:c8:6a:91:9c:1e:e8:17:
db:77:e5:2f:0e:97:33:46:ac:b9:98:5d:ca:bd:ca:
a2:28:92:2d:8c:92:25:1a:4f:c8:45:cf:60:c8:ff:
7c:9e:01:1b:02:19:99:b3:0a:e4:32:72:67:c1:41:
18:c4:65:16:e2:44:eb:dd:94:20:9f:37:f8:6b:b8:
fd:eb:c8:d8:da:2f:bb:4c:46:a8:91:69:0f:12:a8:
f9:30:bf:1a:9e:08:9b:9d:b5:a9:2c:73:0b:01:8d:
80:f7:36:f7:54:e4:b5:59:74:99:88:5f:85:2e:48:
e6:6d:8d:59:0c:c2:58:25:d7:59:34:9a:e5:83:bc:
db:56:ba:8a:de:c2:3c:0d:b2:e3:40:7a:e6:0a:1e:
4b:41:5b:e6:54:d7:fd:bf:10:3e:2c:da:50:b8:f0:
f8:cd:e9:bf:73:ef:3a:27:71:32:3d:57:6f:3e:2e:
2c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:FC:D7:DB:4B:96:06:AF:E3:0F:7B:30:47:BB:3B:DA:FB:72:9E:BD
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a0:bc:81:d3:ad:e6:16:82:fb:77:e3:c4:a3:31:c8:53:3e:
98:f2:ae:5a:93:b8:c7:e3:b4:f8:08:63:84:9b:07:f4:0d:4b:
2a:00:15:ae:8e:d5:1f:f2:8b:6d:3c:32:9d:d0:4a:ab:49:78:
d6:19:2b:05:47:1a:67:f1:67:44:17:00:2b:9e:0a:9d:9d:7a:
93:be:14:25:7e:62:15:98:ee:d2:32:50:73:9f:b5:0c:d8:4f:
fd:ee:7b:cd:60:f8:41:22:44:23:8c:eb:e6:4d:d1:a8:4a:c2:
2b:a7:c2:ba:8b:87:d8:8c:81:9a:8e:f7:02:8c:94:3b:9d:0c:
4b:a8:98:34:fc:8f:29:50:5b:7b:46:2d:6c:8f:ef:ef:2c:2c:
22:22:65:8f:3c:83:6e:a8:43:e9:ff:aa:0f:f7:95:da:3f:47:
7c:d0:a4:df:28:0f:8e:b7:de:42:a9:5a:f1:5b:41:c9:e3:63:
c4:ed:d6:73:1d:7b:00:6d:ca:5c:04:f0:fb:e6:48:ea:1c:08:
33:1c:de:af:c7:c4:c0:1d:2f:83:e0:35:5d:f5:5f:39:42:5b:
a0:67:a8:4f:cc:b5:1c:b7:ef:68:91:35:1d:02:cd:52:23:30:
1f:79:88:1d:54:2a:40:88:80:fc:82:77:c7:05:f2:98:87:99:
1c:14:c7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:44 2025 by rpki-client