Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
File: SRHEgJhyKUvlgXsVnlnynlBgljY.mft (raw, json)
Hash identifier: 2yGpfCBqJv20Vj2qYC2Na31oVqktmU5ZFsoupPoTfGY=
Subject key identifier: CE:AD:1D:BF:99:09:60:DB:91:AD:19:ED:8A:BB:88:93:29:FF:28:F7
Authority key identifier: 49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
Certificate issuer: /CN=4911c4809872294be5817b159e59f29e50609636
Certificate serial: 0199FE4720441C72770567CE718F719A3F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
Manifest number: 0134
Signing time: Sun 19 Oct 2025 21:01:38 +0000
Manifest this update: Sun 19 Oct 2025 21:01:38 +0000
Manifest next update: Mon 20 Oct 2025 21:01:38 +0000
Files and hashes: 1: SRHEgJhyKUvlgXsVnlnynlBgljY.crl (hash: 6S78LElz9FBoXKxo6vFmbryvnrMimOBiHXGUB1uGVc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:20:44:1c:72:77:05:67:ce:71:8f:71:9a:3f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4911c4809872294be5817b159e59f29e50609636
Validity
Not Before: Oct 19 21:01:38 2025 GMT
Not After : Oct 20 21:01:38 2025 GMT
Subject: CN=cead1dbf990960db91ad19ed8abb889329ff28f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:3b:b2:f1:b1:4f:90:dc:3a:9a:e4:b7:a0:
d1:fb:b6:5c:1b:fc:74:21:7c:d2:c7:c4:15:ba:c8:
14:fd:47:b6:4b:93:c1:79:99:55:21:0e:7b:51:52:
2a:6a:2d:dc:20:14:9b:ec:88:ee:31:b1:97:de:56:
bd:65:b1:39:13:64:0f:85:6d:a7:3b:64:d0:ab:93:
18:4b:87:10:46:8d:d2:19:e9:23:56:ba:92:2f:78:
d9:1d:5d:a1:42:cf:38:83:de:06:0e:a4:8c:22:6f:
cb:32:c7:50:35:10:62:f1:37:fc:89:b3:66:51:28:
1b:83:f5:59:6f:05:0d:39:2f:7d:61:1a:d5:ec:9d:
e4:ff:6a:ec:21:5f:e1:0f:8a:a8:04:52:41:2a:27:
88:8c:74:1a:d9:66:0e:1c:57:07:00:9f:2a:1f:2b:
1a:0c:9e:2d:2f:0f:25:30:28:f2:cb:1d:ed:ff:4b:
75:9b:4a:b7:f1:a4:8e:d3:1b:e6:8a:64:61:70:1c:
0b:8d:80:de:16:0b:20:f9:0d:14:f8:02:fb:b0:6d:
9a:13:61:ac:ca:14:ee:17:98:67:7e:80:c8:06:0d:
0e:93:b3:b4:3d:22:5c:8e:09:68:47:5b:e1:ca:72:
9d:6a:18:95:66:65:24:e6:ad:8f:50:97:bc:fb:5b:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AD:1D:BF:99:09:60:DB:91:AD:19:ED:8A:BB:88:93:29:FF:28:F7
X509v3 Authority Key Identifier:
keyid:49:11:C4:80:98:72:29:4B:E5:81:7B:15:9E:59:F2:9E:50:60:96:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRHEgJhyKUvlgXsVnlnynlBgljY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/79b797-0922-4df6-827d-3681f5b7f86b/1/SRHEgJhyKUvlgXsVnlnynlBgljY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:69:f8:70:bb:e8:7f:55:e3:92:54:f5:d5:67:9b:52:a5:5a:
34:07:d0:b8:9c:88:03:be:a5:dc:17:2d:99:04:78:25:a0:2f:
c9:ea:0c:a3:e3:58:da:66:69:52:2a:e4:48:34:5c:da:ef:a6:
2d:6e:92:8a:f9:62:30:55:46:d3:94:c2:73:48:10:a9:d7:a0:
55:bb:c9:9f:ba:98:7c:89:b8:14:ce:e4:fe:f7:f9:0d:9e:a9:
4f:35:da:82:73:bf:0a:78:a8:f3:1e:53:09:65:a2:d2:ef:d8:
86:2f:73:1d:37:07:1d:2f:90:76:b2:2b:f7:7e:c1:52:86:45:
c5:97:a8:8a:c4:01:11:af:be:f9:8e:49:85:9c:40:7d:8a:6f:
d7:ac:ba:12:8b:a4:ea:fc:f4:ae:e8:96:60:8c:ec:b5:1f:c9:
d1:3e:2c:9b:b3:50:87:47:b3:c7:e8:a2:b9:d2:4b:0b:e9:97:
4c:b8:9e:e4:61:5c:2b:1d:ff:69:7c:af:5d:44:a2:71:aa:93:
84:5a:fb:b9:bf:e1:3f:71:79:e2:13:c6:c4:68:f6:bb:57:95:
50:e3:27:7c:a4:7a:0c:28:24:d7:24:0e:ac:57:9c:a9:7b:3f:
f2:c8:82:45:c6:4c:b8:90:80:2a:ab:a3:49:02:58:be:d6:68:
a3:68:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:55:19 2025 by rpki-client