Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
File: rIpdP4uUYpQnOEoSDHdHYFY611o.mft (raw, json)
Hash identifier: PpJAAfApxDC7dtcnJwcb3+epV2ojyOix2YvwyrERsRM=
Subject key identifier: 47:E4:15:CB:71:24:52:4E:03:4E:81:6A:A8:96:93:B1:EF:31:97:2E
Authority key identifier: AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A
Certificate issuer: /CN=ac8a5d3f8b94629427384a120c774760563ad75a
Certificate serial: 0199FDD999893E091D2D5C1E8C71C47F78C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
Manifest number: 10C0
Signing time: Sun 19 Oct 2025 19:02:00 +0000
Manifest this update: Sun 19 Oct 2025 19:02:00 +0000
Manifest next update: Mon 20 Oct 2025 19:02:00 +0000
Files and hashes: 1: rIpdP4uUYpQnOEoSDHdHYFY611o.crl (hash: twkmictmC2EnN9sKI2Y9LeVx9UUXsSil1V+PxC26wnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:99:89:3e:09:1d:2d:5c:1e:8c:71:c4:7f:78:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a5d3f8b94629427384a120c774760563ad75a
Validity
Not Before: Oct 19 19:02:00 2025 GMT
Not After : Oct 20 19:02:00 2025 GMT
Subject: CN=47e415cb7124524e034e816aa89693b1ef31972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d5:18:9d:97:c3:61:69:04:61:07:c6:b7:f9:
7b:3c:38:fe:b8:b0:1a:87:dd:99:53:1c:6b:91:1a:
85:c1:ed:c6:a9:29:67:6f:7f:36:ab:34:ef:e9:93:
1d:a9:f5:60:15:e2:7f:f7:71:3b:c3:9f:6b:a4:7e:
62:12:f0:fd:2d:e8:47:81:5b:89:11:fc:8a:10:b9:
6b:eb:0a:97:6c:0c:93:60:50:74:83:e3:04:88:2e:
a4:bd:ab:bc:41:3c:9a:c6:66:7e:da:21:d0:9f:44:
b6:1b:cf:c9:50:d9:b0:1d:0e:44:87:5a:42:04:37:
d6:fd:88:2f:c8:89:ab:29:65:92:6f:37:fb:d0:8b:
13:3f:46:50:de:01:45:92:6b:a3:34:44:65:eb:c8:
db:30:9b:a6:7b:5e:35:4e:c1:50:78:36:ab:dd:38:
58:97:c3:11:cf:c8:45:4d:c1:ae:8f:5e:39:8f:97:
ec:9d:d1:27:c2:99:4e:6c:55:99:61:65:0b:b0:3c:
16:6a:55:29:2a:94:81:ca:ca:a9:b3:31:1f:de:57:
d0:52:23:94:04:94:d2:04:91:92:f4:fb:6a:b8:d3:
6f:ba:e3:14:5c:e9:f3:4a:ce:3f:0d:04:80:c7:2d:
f1:6a:96:96:88:1d:c5:7a:9e:55:56:37:1e:43:88:
cc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E4:15:CB:71:24:52:4E:03:4E:81:6A:A8:96:93:B1:EF:31:97:2E
X509v3 Authority Key Identifier:
keyid:AC:8A:5D:3F:8B:94:62:94:27:38:4A:12:0C:77:47:60:56:3A:D7:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpdP4uUYpQnOEoSDHdHYFY611o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e24bb6-7363-4442-b568-c80dec87cd09/1/rIpdP4uUYpQnOEoSDHdHYFY611o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:31:ba:40:62:19:99:e2:59:bf:d6:dc:a9:22:8b:93:9c:52:
83:92:da:4c:04:c1:2e:e2:f1:4a:d3:ae:e0:1e:46:14:c6:ec:
26:95:66:67:7d:74:ea:ec:a3:65:90:51:bc:6f:d6:93:88:83:
89:c8:07:1f:98:9d:90:d0:be:8f:c5:13:80:bc:ef:32:32:8f:
80:10:b6:b3:62:c1:4e:2c:d1:c5:6f:27:c7:ad:cd:85:00:b6:
f6:d9:54:e7:a0:84:3b:85:f5:aa:01:87:a4:d8:6a:68:27:16:
2e:d9:e8:ee:e1:0c:53:dd:17:d1:29:67:86:28:03:f1:d2:b0:
82:45:1b:58:6a:28:02:82:24:3b:30:3d:19:a1:34:ff:2f:bb:
6b:e0:eb:7d:35:4f:a5:9f:cd:36:24:96:d9:8d:84:2c:e8:6c:
0c:85:64:aa:24:1a:05:de:a7:53:bd:0c:d1:fd:c3:c4:f7:11:
d5:7d:d9:95:b7:10:95:8d:29:0c:28:bf:db:66:29:65:3f:b7:
4c:40:83:8d:8f:ff:d8:ee:02:90:bc:22:d0:8d:a2:e4:a8:ed:
59:46:66:11:bb:cb:a4:7c:6d:1e:ba:85:5a:7e:45:33:a9:80:
2a:df:2d:51:73:88:01:9d:e6:ca:bf:11:01:4e:de:df:dc:02:
60:d5:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:21 2025 by rpki-client