Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
File: tRFbXBJF3DDhIwQHnslKNe1SfGY.mft (raw, json)
Hash identifier: btBfAr0qTwUdVwpyN8f1QLepaFgWORq3ycA6GU9lDmI=
Subject key identifier: F0:04:A2:B9:A3:34:21:9F:61:5D:27:16:48:1F:7F:AF:76:68:DE:9A
Authority key identifier: B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
Certificate issuer: /CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Certificate serial: 0199FD6B3D3A27B357F2BF2A71F2AB762470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
Manifest number: A4
Signing time: Sun 19 Oct 2025 17:01:27 +0000
Manifest this update: Sun 19 Oct 2025 17:01:27 +0000
Manifest next update: Mon 20 Oct 2025 17:01:27 +0000
Files and hashes: 1: tRFbXBJF3DDhIwQHnslKNe1SfGY.crl (hash: KJFVj0YxK6RtX9fr0YSdSTMggJXhUn4YqwGw0B07Hdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:3d:3a:27:b3:57:f2:bf:2a:71:f2:ab:76:24:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5115b5c1245dc30e12304079ec94a35ed527c66
Validity
Not Before: Oct 19 17:01:27 2025 GMT
Not After : Oct 20 17:01:27 2025 GMT
Subject: CN=f004a2b9a334219f615d2716481f7faf7668de9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:51:d0:82:00:45:d5:8e:3f:9b:35:6b:7f:
7a:99:b6:7d:01:ff:a1:b8:8b:ef:15:d3:ff:4a:35:
48:9f:38:5b:e4:d2:0b:6f:aa:76:61:43:52:aa:ab:
0f:f6:59:b9:b0:8d:37:4e:3d:a1:7b:bd:79:96:42:
e5:9d:cf:d2:3a:df:fe:50:cd:0b:e5:ab:0f:5f:25:
81:e7:ea:37:83:f0:44:7d:ec:2c:c8:ba:db:64:87:
9f:9c:7a:6c:06:3d:16:cb:26:11:e4:df:70:c4:ba:
00:5d:8d:6e:c3:63:ef:75:f2:d7:2f:fb:31:1b:78:
56:1b:ca:ed:8a:f6:95:86:db:39:c7:3d:12:53:0f:
ae:3a:ab:7a:f4:f5:98:d3:de:c1:11:f2:ed:85:5e:
3a:2f:b9:74:fa:4f:df:17:3e:27:6e:c2:40:72:a0:
3d:f7:2f:f2:e4:85:71:c7:92:5c:fe:87:69:18:72:
da:d7:d9:a1:b1:ea:d2:2f:78:10:33:37:13:9b:ba:
65:85:c4:2d:11:63:1b:95:c1:81:2d:83:68:f8:00:
f5:af:2e:52:a6:35:8e:3e:f9:93:19:1f:65:d3:ac:
47:66:56:b1:b7:7f:0f:3f:b8:a4:51:dd:d8:da:a6:
9f:f5:4d:a2:fd:4a:77:28:29:80:74:05:d1:55:63:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:04:A2:B9:A3:34:21:9F:61:5D:27:16:48:1F:7F:AF:76:68:DE:9A
X509v3 Authority Key Identifier:
keyid:B5:11:5B:5C:12:45:DC:30:E1:23:04:07:9E:C9:4A:35:ED:52:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRFbXBJF3DDhIwQHnslKNe1SfGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/a36a67-542b-4f8e-81f0-6e2da60e2834/1/tRFbXBJF3DDhIwQHnslKNe1SfGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:99:61:12:4d:5d:73:61:17:af:f2:c4:d9:26:bd:2b:ea:49:
eb:67:5d:c7:90:d3:4b:e6:40:84:a7:ce:b0:ae:78:f6:ec:8c:
a4:c8:46:8f:86:ba:dc:c8:c5:09:45:36:3b:17:91:8b:8d:c7:
11:a0:3b:69:c4:41:2d:92:cc:5f:dc:60:36:ec:7d:61:8b:f5:
e7:d0:20:c1:f4:86:98:13:60:c0:dc:c4:f8:4b:60:b4:3e:c4:
61:5d:bf:4a:21:27:ea:c2:a9:e3:75:6d:e8:5a:60:49:8c:f0:
cc:4d:9b:1f:e5:8c:5c:63:1f:ef:39:5a:b5:c8:8f:39:0f:e7:
ac:45:f8:e6:82:65:c6:a1:43:93:2b:97:65:53:a9:7f:46:98:
3f:62:c8:91:eb:af:19:15:e6:dd:d2:35:92:3c:93:d2:e9:d0:
63:e5:69:4b:fe:ce:70:12:29:e1:a6:5c:f4:ac:9a:46:a0:dc:
34:d6:5c:45:6f:b3:8f:71:2e:c4:dc:52:b5:59:31:8b:68:fd:
5a:a3:23:54:4e:af:cc:19:62:19:8f:0b:31:35:4f:66:ec:5d:
08:23:93:c4:35:ce:58:c6:c5:12:a8:fb:2f:96:93:d6:17:6c:
a2:80:9f:7c:d4:31:e8:a7:64:1e:b4:a5:e1:6a:dd:e3:60:b0:
3e:f9:84:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:36:30 2025 by rpki-client