Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier: 4EFzBy5FiPSR28HcK1hpFN4v130cXVcR+wDBRvLtYsc=
Subject key identifier: 2E:E9:A2:1A:E8:A6:83:AD:65:11:1F:15:BE:F9:6B:70:28:0A:78:35
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer: /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial: 0199FBEAC2FB2BF617454BA8E6A512A5A0D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number: 1072
Signing time: Sun 19 Oct 2025 10:01:30 +0000
Manifest this update: Sun 19 Oct 2025 10:01:30 +0000
Manifest next update: Mon 20 Oct 2025 10:01:30 +0000
Files and hashes: 1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: iS8PTuOVAM9AJemZLVXhqfHIkxQe+ytcob57DbB1k24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:c2:fb:2b:f6:17:45:4b:a8:e6:a5:12:a5:a0:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Validity
Not Before: Oct 19 10:01:30 2025 GMT
Not After : Oct 20 10:01:30 2025 GMT
Subject: CN=2ee9a21ae8a683ad65111f15bef96b70280a7835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:f9:e8:60:55:ab:82:98:cc:35:dc:19:ac:
15:8d:c7:5f:e4:11:ea:7b:de:ee:3e:1f:01:d2:6e:
5e:af:f7:1b:c0:2a:d3:98:cc:57:5a:b6:d0:92:c6:
89:6f:f4:76:91:89:21:7c:93:b5:0c:39:25:49:49:
19:85:e1:7a:df:76:07:66:17:13:d9:b6:eb:03:6f:
26:96:9f:68:7b:a6:eb:3a:35:af:7d:97:22:9c:42:
9c:1f:78:cc:81:e9:00:60:5f:45:67:f9:57:84:66:
a4:f0:8d:5d:70:ab:65:81:ba:78:ac:da:24:b8:c8:
89:64:9e:8f:f1:c9:a4:1c:5e:ba:f9:3b:2c:d4:2a:
75:7b:96:e3:1c:cd:14:47:cf:9e:ad:e8:21:f6:bc:
15:85:75:35:c8:db:00:f2:f2:57:06:df:b7:3a:23:
d8:84:a5:20:27:d4:b2:46:fc:26:7d:a5:77:ab:ba:
9e:ab:76:7d:6d:e7:97:c8:ef:9e:b9:d5:95:bd:ee:
86:b7:b6:07:93:9d:13:f9:e9:33:80:8f:60:1a:7d:
17:ff:12:2c:b8:12:e9:63:8d:16:6a:64:4c:1c:e9:
4e:13:a5:2d:3b:12:d9:39:72:75:31:58:fa:9d:28:
d8:a2:32:da:0c:1a:1a:49:0c:cf:ab:fe:f1:61:5f:
b0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E9:A2:1A:E8:A6:83:AD:65:11:1F:15:BE:F9:6B:70:28:0A:78:35
X509v3 Authority Key Identifier:
keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:bd:b7:c1:cb:b3:b2:1f:6c:f5:58:c8:7c:ee:8e:4e:66:1f:
e5:7a:83:98:1a:52:72:d1:e8:e8:99:2f:30:29:46:b4:30:9b:
e1:58:2f:14:bf:95:a8:c8:bc:ed:1d:0d:8c:f4:6f:9f:78:cc:
26:d3:a3:f4:1b:d7:21:d6:ea:93:e9:43:08:a9:c7:9c:31:19:
fc:2b:bb:c2:b8:63:71:74:29:7e:17:9b:6f:e2:94:43:fa:2f:
7d:8f:65:bc:fd:99:81:36:3f:4d:d5:38:e5:6d:fa:ca:54:0f:
b1:23:63:19:f5:99:06:06:9e:80:85:68:a1:a3:6e:58:dd:17:
3f:4e:1c:e4:a5:8d:de:eb:b4:6d:61:de:e6:d5:0d:ef:fe:df:
1d:eb:89:93:3f:b0:0b:3a:6b:13:8f:2c:1f:5a:9c:df:4d:22:
06:9b:59:5a:0c:b9:8f:5f:c5:a1:1a:9e:0d:37:49:8e:22:92:
0b:85:e3:0e:89:8b:0f:9a:6f:35:63:9d:e1:b0:86:71:0d:47:
5c:0c:2e:72:88:84:0b:9c:a5:87:46:96:2a:50:dc:fc:70:b4:
57:7a:21:f3:c4:02:ec:6b:d6:11:de:c3:57:a8:5d:8f:cd:51:
26:c5:d5:73:c6:86:d1:b1:e1:d9:df:a1:31:c1:d6:3b:dc:3b:
3c:35:72:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:14 2025 by rpki-client