Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
File: Rji3uq3cnWWuMsgX_meX7zeZaaM.mft (raw, json)
Hash identifier: Eqlwtr3qdbsyxv9WvHkEChhL9FcwkOpSIgBlKlDAYiE=
Subject key identifier: AF:84:50:B2:F0:AB:F2:88:C0:2E:CA:6A:2D:44:7E:FB:57:C6:C4:83
Authority key identifier: 46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
Certificate issuer: /CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Certificate serial: 0199FD344D4D71CFAB666E137632FAA5EBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
Manifest number: 15B5
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: Rji3uq3cnWWuMsgX_meX7zeZaaM.crl (hash: RY/2Fd5wbMHLJ4jqo7kRGQCvubYKaj57E9oDmTRReDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4d:4d:71:cf:ab:66:6e:13:76:32:fa:a5:eb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638b7baaddc9d65ae32c817fe6797ef379969a3
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=af8450b2f0abf288c02eca6a2d447efb57c6c483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:e9:d2:a9:3a:2d:91:8c:0e:85:e2:a0:04:
4e:d1:cc:ac:5f:eb:56:19:89:07:e8:d1:15:65:ac:
49:f4:01:a6:7c:4f:65:20:96:81:30:df:a8:79:8f:
bd:08:63:86:15:a0:bb:15:46:75:84:ed:2e:07:a4:
b9:d4:d1:5f:ff:7c:2d:92:8d:02:db:52:76:2f:79:
61:c4:01:64:00:fe:b4:eb:1c:42:09:18:04:7f:08:
93:96:02:b9:dc:08:d3:87:cd:fb:f7:82:0d:26:d2:
cd:d1:ae:69:9b:c7:f8:5b:9c:31:92:61:c8:83:4a:
fa:27:88:e4:52:af:fc:4d:bd:09:87:51:ff:fd:be:
ab:11:a1:01:85:c2:5c:70:3c:d9:29:16:98:cb:aa:
4c:6f:65:15:18:ed:21:4d:3c:82:4b:d7:af:87:78:
59:91:5e:d7:99:05:e7:67:81:fb:a6:2c:e1:c1:c4:
07:99:e4:8e:c6:de:0b:5f:2f:63:62:41:e8:60:83:
30:3a:ec:8b:ce:c2:cd:4c:03:f6:a3:ad:1d:a8:8a:
80:a4:7a:37:e3:c3:b9:c2:ea:66:ba:f5:b6:1c:8d:
42:df:4c:82:3e:25:44:00:bc:59:ee:c8:92:73:ec:
2c:3e:ee:65:b6:c2:44:03:95:b5:10:44:b7:5d:2d:
f3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:84:50:B2:F0:AB:F2:88:C0:2E:CA:6A:2D:44:7E:FB:57:C6:C4:83
X509v3 Authority Key Identifier:
keyid:46:38:B7:BA:AD:DC:9D:65:AE:32:C8:17:FE:67:97:EF:37:99:69:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji3uq3cnWWuMsgX_meX7zeZaaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/43ca4c-b268-4f03-8153-1df758d62375/1/Rji3uq3cnWWuMsgX_meX7zeZaaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:1e:ba:0c:85:e8:c0:41:1a:1b:96:8f:5c:1a:e8:3f:8a:be:
7a:cc:8d:b7:72:8e:79:a8:48:63:e9:5f:e8:7a:2d:27:ec:0d:
cc:1f:d6:e0:cb:de:5d:b1:9e:be:42:7f:6f:ce:a1:b5:21:a1:
ce:cb:72:08:8e:a5:36:25:16:be:a4:dc:24:f3:37:a4:17:7a:
a4:3b:40:8d:eb:9a:57:05:e2:39:9e:cf:2e:dd:bb:ff:69:be:
c3:61:1d:84:30:b7:ca:f6:cb:71:d6:d3:97:bb:2d:ab:ad:dd:
37:b3:66:87:da:eb:9c:11:5a:32:b9:5b:2a:e9:2c:b0:6b:0b:
0c:1c:b7:39:b8:cd:1d:8f:bf:1b:ca:f9:e4:a1:be:f2:1d:a0:
0a:2f:35:f7:1f:40:f0:30:d0:b2:32:b6:15:e9:77:27:8d:3e:
96:0a:57:f8:ea:4b:e2:b6:d6:2d:80:73:6c:c1:a2:9f:c2:43:
f7:10:ae:6c:56:58:39:eb:57:fd:31:8c:a2:48:08:b1:52:c9:
33:38:7a:87:9e:45:ec:3a:c7:5d:a0:80:17:39:7a:35:a4:e6:
62:f9:48:bc:aa:e9:49:55:07:b5:ba:af:26:39:cb:f6:68:aa:
98:ce:65:81:30:fd:a8:8e:05:42:24:19:9e:8f:ce:ce:9d:a3:
e1:bd:3c:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:46 2025 by rpki-client