Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
File: V25aWVM8ptDwtIgH0Md-FWhgTl4.mft (raw, json)
Hash identifier: 4dYs+zjaqgJg2bGFsuqoA7LDfvwcXbh+sr6prtdYjBc=
Subject key identifier: 4B:C5:7A:41:FD:69:A8:21:CE:9C:90:AF:30:8F:39:28:26:ED:15:3D
Authority key identifier: 57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
Certificate issuer: /CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Certificate serial: 0199FC5868F843E29E0CF62DE25CB9E270D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
Manifest number: 0723
Signing time: Sun 19 Oct 2025 12:01:16 +0000
Manifest this update: Sun 19 Oct 2025 12:01:16 +0000
Manifest next update: Mon 20 Oct 2025 12:01:16 +0000
Files and hashes: 1: V25aWVM8ptDwtIgH0Md-FWhgTl4.crl (hash: BA5zEA8c10EavELH3WKPNRaK6AThZ2FA+WlE8Ih3qtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:68:f8:43:e2:9e:0c:f6:2d:e2:5c:b9:e2:70:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576e5a59533ca6d0f0b48807d0c77e1568604e5e
Validity
Not Before: Oct 19 12:01:16 2025 GMT
Not After : Oct 20 12:01:16 2025 GMT
Subject: CN=4bc57a41fd69a821ce9c90af308f392826ed153d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:30:5e:38:7b:3c:c3:9e:ca:e2:36:79:69:15:
eb:40:dd:43:e3:84:c4:93:5b:93:1e:a4:89:e6:f8:
85:82:23:99:d9:79:48:b3:56:d7:96:32:9f:20:16:
0e:c6:66:dd:80:92:c2:83:f3:20:fe:c9:48:b3:0c:
30:88:9a:f6:71:28:24:86:c5:84:04:83:17:db:c7:
34:c0:95:05:a1:42:b4:aa:44:0b:53:53:41:c8:09:
51:9b:52:28:5f:25:6d:2e:bc:42:21:71:1e:c9:7b:
1a:d5:e5:70:37:83:47:2f:b1:55:85:20:e0:05:68:
2b:c4:1a:a5:cd:20:2f:eb:e9:6f:67:a3:4a:0d:81:
57:81:18:fd:d2:54:a9:32:26:14:98:95:66:93:df:
d1:cc:6d:e6:e7:80:14:cb:89:44:8f:37:ad:43:cc:
73:6d:59:0a:66:20:37:6c:19:55:8b:34:82:34:d0:
09:80:2a:aa:9f:0a:f2:00:80:d7:6b:3b:df:5d:f5:
be:14:14:6d:9b:1a:2c:36:26:c8:10:05:36:a9:b7:
22:42:a3:29:b3:0d:3c:c5:ce:54:c1:54:a7:7d:51:
3b:79:4a:90:70:9a:2c:40:ab:c5:f1:1f:71:fe:29:
73:3f:2f:5c:2a:3e:64:6b:5b:a0:f2:55:3d:04:f5:
22:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:C5:7A:41:FD:69:A8:21:CE:9C:90:AF:30:8F:39:28:26:ED:15:3D
X509v3 Authority Key Identifier:
keyid:57:6E:5A:59:53:3C:A6:D0:F0:B4:88:07:D0:C7:7E:15:68:60:4E:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V25aWVM8ptDwtIgH0Md-FWhgTl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/8d2113-3ec0-4445-8dfe-7adb40dca7bd/1/V25aWVM8ptDwtIgH0Md-FWhgTl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:1a:60:90:52:b1:58:a6:b4:d0:47:b1:35:da:4f:79:66:25:
92:ab:8c:d1:38:54:0b:a8:ee:51:67:5a:37:a0:05:bf:1c:6a:
fc:dd:39:c8:6e:30:c0:5b:cf:d9:dc:81:32:22:8b:e7:25:08:
b1:97:b8:b5:05:ce:8b:d4:45:a3:55:76:56:27:20:a0:fc:b8:
37:58:02:35:ef:36:47:d9:0a:d7:5c:5b:8e:52:53:58:f2:88:
6e:55:1f:47:2b:3e:f7:28:86:6d:5b:39:be:db:b7:34:3a:7e:
60:c7:43:96:01:1e:43:e2:06:54:b8:3c:ab:b5:8f:34:8b:93:
cd:31:0b:af:4d:d6:05:29:c2:67:d9:97:1e:f2:b2:0d:7d:05:
38:62:5a:f7:d3:3c:6b:08:cc:98:ad:fe:bb:bb:86:10:01:9e:
4f:f1:5b:08:37:a9:48:a8:24:13:4d:26:19:71:dc:62:93:2e:
e7:e0:fb:b9:0c:e4:5c:fc:91:df:76:c9:62:87:68:d3:44:0b:
8e:ce:20:64:52:f4:0d:e1:79:79:73:23:c6:51:6d:70:b4:7c:
ac:e3:a4:26:9d:69:4b:7a:80:86:85:db:1a:07:36:d0:5a:4e:
3c:31:55:25:6a:d1:7d:ad:5f:34:f9:e0:4c:51:c2:43:4c:fa:
34:ea:0f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:08:32 2025 by rpki-client