Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
File: SdWTfY5gK0jLL_UXFtmV0jofPho.mft (raw, json)
Hash identifier: h5ienQvOH1YeUcpL/wpkwRz+ujBt+iCW1qf5vSc91JM=
Subject key identifier: 78:E5:5B:AE:1F:5D:31:FE:E4:EB:CA:89:49:CF:1D:CE:B7:05:8E:D6
Authority key identifier: 49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
Certificate issuer: /CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Certificate serial: 0199FDD9EB5E8411B20E8C0CFA8FD5DBB394
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
Manifest number: 0FA6
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: SdWTfY5gK0jLL_UXFtmV0jofPho.crl (hash: gVJnHpcJXLWJpTu3VD00W50QKraUqKnUlHnawXEiBa8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:eb:5e:84:11:b2:0e:8c:0c:fa:8f:d5:db:b3:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d5937d8e602b48cb2ff51716d995d23a1f3e1a
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=78e55bae1f5d31fee4ebca8949cf1dceb7058ed6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:56:bf:c9:97:11:04:2c:55:56:43:4e:21:1d:
6d:0f:b3:8a:72:1e:a9:1f:b1:3d:75:48:d2:d1:25:
d6:33:1f:3b:53:a5:ba:0b:11:03:7b:d2:6a:de:0b:
b9:ac:f8:77:af:cd:e6:9f:e1:da:b2:f2:2b:b6:e7:
e8:cc:68:5f:ff:9b:eb:3b:79:78:cc:fb:01:a3:92:
5c:bc:93:4d:0f:d3:16:b0:e9:ab:a1:4b:2f:03:cd:
62:cc:8d:fd:1e:dc:a7:dd:ef:bb:c8:08:37:34:db:
a3:fd:01:d2:6e:e0:c0:ed:f4:c8:65:d7:24:75:51:
40:0c:22:d6:9b:f6:c6:79:ae:2e:b4:60:cb:3b:5b:
83:f9:cf:ff:6b:98:2c:1f:c5:61:90:e0:09:42:d6:
82:97:1e:0d:f8:b4:e3:9f:54:0e:cd:3e:8e:bc:06:
97:98:75:b8:85:ef:54:3b:1b:30:81:56:8f:a0:ab:
49:53:92:96:f7:cc:3d:51:be:cf:8f:f5:34:f8:f3:
ad:87:de:fa:c7:6d:72:ad:06:95:c4:cb:c6:04:d0:
d1:78:13:5d:1f:5f:54:0c:96:f0:3d:2a:53:92:c9:
49:04:96:2a:75:0b:f5:cb:82:1f:e4:13:8f:eb:b2:
7f:c8:81:c2:09:a4:ce:7f:86:20:93:21:89:ea:36:
43:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E5:5B:AE:1F:5D:31:FE:E4:EB:CA:89:49:CF:1D:CE:B7:05:8E:D6
X509v3 Authority Key Identifier:
keyid:49:D5:93:7D:8E:60:2B:48:CB:2F:F5:17:16:D9:95:D2:3A:1F:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SdWTfY5gK0jLL_UXFtmV0jofPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/edaa32-c5d9-4013-84bb-9b2adc74b52d/1/SdWTfY5gK0jLL_UXFtmV0jofPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:1d:39:43:a4:46:7e:a7:89:07:e6:f4:b8:fa:23:06:54:40:
35:45:a0:c6:93:a1:2e:7e:f8:e4:7b:a6:26:20:9a:45:46:6b:
81:f1:bd:02:91:86:88:58:ab:f2:b7:4c:df:7f:06:b6:b6:f0:
bd:61:39:c6:cf:ef:04:ef:97:15:0d:70:a5:e2:0b:c4:f6:94:
f8:6b:a3:ad:2c:20:4e:b6:37:2d:0d:ec:41:63:68:da:fe:9b:
03:da:b8:b5:33:ad:6a:fa:24:82:5b:da:21:34:fe:25:1c:f2:
6a:92:b0:29:c9:16:69:d3:92:1e:e0:aa:9c:ab:ad:04:c3:3e:
9d:16:5f:35:2c:75:35:2d:a7:5f:0b:6e:e1:b2:e6:0e:d3:24:
d6:50:49:b7:39:c2:2b:8e:88:b3:6f:35:dd:19:e6:fd:2c:ff:
16:28:1b:a4:ad:2b:0d:a2:9c:16:9c:ca:13:47:92:3e:19:fa:
22:16:62:06:70:f2:63:df:ae:14:45:2c:9e:8c:fd:84:82:9b:
67:e9:30:96:6a:f5:2d:79:c7:7f:f4:45:2e:44:35:e7:6a:d6:
78:7c:fa:03:06:f5:fa:95:24:11:0d:e4:c9:7a:91:fe:5c:73:
4a:b5:b5:08:37:45:f1:e5:05:3d:7f:36:5e:44:7a:a7:79:06:
d4:93:f5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:56:41 2025 by rpki-client