Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File: B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier: P4pkwADtR/0fpX0ye2oyko3EIR4f7pdhcQfV9Il9THs=
Subject key identifier: 85:63:63:8D:EF:69:B1:32:01:53:A4:20:00:8F:7F:1C:3C:A6:38:B1
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer: /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial: 0199FBEAEB2E9FE0E24CB677E8EF3D15CFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:01:40 +0000
Manifest this update: Sun 19 Oct 2025 10:01:40 +0000
Manifest next update: Mon 20 Oct 2025 10:01:40 +0000
Files and hashes: 1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: UgccRXU0/NMeH3yWi8yQOttd6VETfJLywbNAAFd3mGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:eb:2e:9f:e0:e2:4c:b6:77:e8:ef:3d:15:cf:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Validity
Not Before: Oct 19 10:01:40 2025 GMT
Not After : Oct 20 10:01:40 2025 GMT
Subject: CN=8563638def69b1320153a420008f7f1c3ca638b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e2:4b:ac:e3:fb:95:17:4f:12:cb:b1:ac:ae:
e4:de:0a:a3:0c:51:18:1f:11:24:b7:f9:01:cc:dc:
7d:ab:29:30:92:14:50:c3:a6:3b:02:53:1e:25:23:
7a:8e:13:50:21:1a:c2:b4:17:1c:ed:e7:27:e4:99:
b3:69:08:8c:0c:fe:e8:9e:a7:72:9e:4c:7f:f4:3c:
59:c5:84:1e:e4:f0:4d:d0:fb:05:6a:70:9a:dd:f8:
6a:7e:6a:5f:c7:d3:7c:dc:02:d6:4c:8e:92:e1:80:
ca:95:7f:48:8c:95:12:78:22:2b:24:2e:ce:33:46:
13:f8:71:97:f8:c4:62:1d:24:20:7c:24:9b:9d:c1:
9d:bc:f6:d5:23:7a:e2:a4:1f:ca:2b:b4:6e:c3:ef:
aa:9b:7b:a4:27:df:5d:a5:e5:05:f3:e2:91:ac:5f:
2e:e0:79:66:d4:f5:e1:4e:ac:f5:a0:d2:d0:b0:cd:
92:04:20:6c:85:09:08:c3:07:0c:a8:3f:d0:24:63:
e6:4e:4d:45:46:4a:a2:a7:a0:81:41:4b:97:53:13:
4f:5c:72:f0:50:d1:02:1c:2c:fd:ef:2c:2a:e2:10:
1f:f0:69:7e:60:8e:f9:5b:0c:4a:60:7d:ae:37:46:
da:57:09:d7:a3:95:a1:c5:84:e9:45:6d:e2:8f:15:
73:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:63:63:8D:EF:69:B1:32:01:53:A4:20:00:8F:7F:1C:3C:A6:38:B1
X509v3 Authority Key Identifier:
keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0e:e5:8c:e5:81:d0:70:b3:5c:79:1e:d0:b4:96:c5:b2:a6:
3c:53:86:7d:2d:62:6f:a7:f5:e5:61:63:99:dd:88:0b:f5:18:
94:18:8a:99:92:1a:ea:3f:09:92:04:28:bb:1e:4a:43:f9:c8:
f4:49:3a:2a:1e:fe:38:78:19:1f:95:71:90:ed:33:d5:17:9d:
5b:13:10:67:d6:3a:70:a4:1d:6f:e8:b7:b0:09:df:98:43:b2:
dc:7a:86:c7:59:25:d1:f3:93:c8:80:07:e7:ee:8d:bf:b7:fd:
77:d8:8e:83:e9:c1:83:e6:90:49:6e:aa:ed:a5:a0:03:b3:47:
e7:88:75:81:4f:8d:10:96:8d:dd:dc:8d:30:80:8e:97:b5:43:
f9:71:10:92:c3:4d:57:4e:d8:e9:c7:86:60:b9:84:88:d8:51:
c0:d5:44:2c:59:af:7e:f8:be:f6:aa:97:c6:d9:45:f7:f8:8e:
7c:e8:05:34:c6:e9:83:92:17:7a:62:d2:dc:17:24:9e:9d:c1:
36:a9:57:b7:ad:90:9a:d0:a3:c8:65:12:85:d2:de:19:2d:1f:
34:26:98:68:23:15:16:14:39:41:7b:88:93:2a:c2:6b:46:c7:
e5:ac:32:57:66:3f:a9:c9:8e:94:ef:3d:1e:7a:1d:f5:2a:3d:
99:e6:ac:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:32:49 2025 by rpki-client