Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
File: SxEEihpJFuExuM4Iji1v5OXF49s.mft (raw, json)
Hash identifier: yEejZEWazzc/uHpCg5tQcsOvbjdlWJjF3S3Ds8LZ8nE=
Subject key identifier: 0D:A0:83:3D:95:3F:49:0A:93:E2:8A:DC:5D:37:CC:E3:6B:22:3C:27
Authority key identifier: 4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
Certificate issuer: /CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Certificate serial: 0199FF59C8ECC92DF6C5D97A821B1A2CBF4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
Manifest number: 0322
Signing time: Mon 20 Oct 2025 02:01:38 +0000
Manifest this update: Mon 20 Oct 2025 02:01:38 +0000
Manifest next update: Tue 21 Oct 2025 02:01:38 +0000
Files and hashes: 1: SxEEihpJFuExuM4Iji1v5OXF49s.crl (hash: HsWnFEO0SOjWKcQ3I73XpxzZM6tFkjBwHr0I30yj6Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 02:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:59:c8:ec:c9:2d:f6:c5:d9:7a:82:1b:1a:2c:bf:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b11048a1a4916e131b8ce088e2d6fe4e5c5e3db
Validity
Not Before: Oct 20 02:01:38 2025 GMT
Not After : Oct 21 02:01:38 2025 GMT
Subject: CN=0da0833d953f490a93e28adc5d37cce36b223c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:9d:b4:ce:98:5a:2a:c7:e3:f8:98:3e:89:1c:
80:57:26:38:61:a2:bb:47:4d:4b:47:6b:08:5f:37:
5a:d5:94:68:15:78:bd:21:fa:7b:98:c8:8b:6c:77:
a9:0c:ba:6c:c3:41:4a:4e:9a:74:f3:36:e6:06:db:
73:cb:60:7b:14:82:86:a9:12:35:d0:2d:30:b8:e3:
88:a7:78:7d:a8:e9:7a:c0:72:28:29:dc:8b:c3:d8:
88:52:1f:de:ad:ab:e6:7d:ed:d1:63:ee:b6:43:21:
da:be:89:60:85:c9:80:b0:76:bf:da:cd:ba:76:f1:
78:46:56:8e:aa:c7:ee:bc:69:76:cb:63:f1:f9:f7:
b2:27:9a:e6:33:e5:ac:99:18:51:dd:72:fc:38:f6:
4d:09:72:ca:6c:8d:3d:d4:b7:52:8d:5f:99:72:c1:
55:38:6d:c8:db:63:be:e8:12:f3:19:93:b6:9f:45:
38:1f:85:e6:1c:07:7b:f8:b1:89:3e:40:a7:6d:b9:
a2:bd:7e:99:49:1a:e0:57:cf:1c:dd:59:3b:6d:85:
f0:0f:f5:74:cf:8d:a8:90:24:ed:06:f5:80:7b:31:
89:55:6d:88:14:31:8f:fd:b9:77:37:3f:00:65:11:
cc:8d:8e:75:ed:61:ae:bd:b5:a3:4c:21:86:1b:09:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A0:83:3D:95:3F:49:0A:93:E2:8A:DC:5D:37:CC:E3:6B:22:3C:27
X509v3 Authority Key Identifier:
keyid:4B:11:04:8A:1A:49:16:E1:31:B8:CE:08:8E:2D:6F:E4:E5:C5:E3:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxEEihpJFuExuM4Iji1v5OXF49s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/d3a228-fc4f-40b2-88b2-e484611a9621/1/SxEEihpJFuExuM4Iji1v5OXF49s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:fa:be:fb:06:13:40:57:b0:4f:8f:3a:ac:fe:11:5a:1b:54:
8d:ea:e5:30:93:e3:24:84:ab:8d:ac:fb:ce:54:05:1d:fe:dd:
03:57:d3:28:48:12:18:15:9a:c3:72:55:ef:e8:13:d0:fb:dc:
3b:3f:63:6f:63:35:f1:1b:48:75:ce:9b:88:65:cc:e2:7c:fe:
74:ee:bf:5c:f9:82:fa:1a:99:77:5a:d1:4e:59:7f:16:4e:c7:
32:6d:94:1d:63:42:48:8b:7e:0a:1e:5a:98:f3:06:44:48:cb:
ef:56:95:4d:51:5a:3c:5f:f4:c7:33:e1:41:bd:2a:47:2c:54:
1d:c3:e9:0d:68:81:52:65:67:d3:23:b1:d6:20:4b:0e:38:f0:
c3:b7:2c:bf:b8:f3:64:98:0c:9d:88:40:f6:26:1b:5f:ce:80:
a8:6b:63:89:06:43:0e:df:4f:d9:c7:08:16:7d:17:32:f2:21:
8b:ca:34:72:a8:4e:75:1f:ed:08:8a:4a:7f:41:57:39:ae:46:
e1:c7:85:4b:9d:ca:2e:0a:aa:a9:11:e5:ae:53:59:3a:54:2d:
e9:5b:11:ca:a6:74:e1:70:82:b4:60:2c:c8:9a:7d:a8:aa:29:
36:89:f2:a4:14:bf:d4:6d:2e:0b:12:bd:67:93:06:5f:d3:7f:
f1:aa:4f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:07:57 2025 by rpki-client