Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: JWbT63TbRI5jJgyy+7Rz/lWwO4bm8OIfhvv1bbzgVgs=
Subject key identifier: 99:CF:25:55:3C:B2:85:F4:0B:52:AE:DE:5D:D2:F5:61:6B:3E:78:36
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 0199FDD9D2599288A51B4FACE73727E6C522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0A3F
Signing time: Sun 19 Oct 2025 19:02:14 +0000
Manifest this update: Sun 19 Oct 2025 19:02:14 +0000
Manifest next update: Mon 20 Oct 2025 19:02:14 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: tAc4GlOtuIf0OCC3gDoiQWZt2qUVh3CpTYOjSSAM6mM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:d2:59:92:88:a5:1b:4f:ac:e7:37:27:e6:c5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Oct 19 19:02:14 2025 GMT
Not After : Oct 20 19:02:14 2025 GMT
Subject: CN=99cf25553cb285f40b52aede5dd2f5616b3e7836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1f:40:01:52:67:e4:03:00:48:fa:74:c2:52:
3f:99:8f:11:0b:14:ee:9d:e2:f9:a8:86:42:29:62:
90:d7:70:32:4f:d1:86:7a:af:52:db:b9:4c:43:5d:
0c:60:af:dd:ac:b8:22:3a:10:fc:b4:7a:66:12:ce:
a8:ab:b5:82:1f:62:93:46:b6:6e:60:03:2d:de:56:
a8:8d:7a:19:3b:40:0a:24:5b:9a:08:5f:f7:af:e6:
f6:1f:f5:02:bc:99:45:69:c7:61:ce:3f:53:fd:2e:
87:43:72:50:8c:2f:97:46:5a:90:43:55:29:32:ce:
72:8a:df:30:89:16:2a:d3:a1:4e:87:4f:79:ad:01:
14:58:2c:c5:c8:06:65:ef:d1:dc:11:4d:18:b3:97:
35:24:2f:58:84:3d:f7:06:bf:e1:f5:ec:43:27:9b:
64:58:63:e0:4e:4c:cf:43:f4:07:8c:bb:39:5b:62:
22:38:f4:8b:c4:c2:09:5c:59:51:18:2d:32:7c:7a:
62:88:f3:35:0c:fb:62:58:b5:16:40:5a:aa:dd:99:
62:18:82:ae:f6:55:29:0c:0d:6e:52:c5:08:01:b0:
75:6e:24:cc:6a:8e:81:46:03:99:30:4d:21:18:0a:
1c:e4:fc:88:ed:24:ff:3d:01:db:d5:83:f8:01:44:
7f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CF:25:55:3C:B2:85:F4:0B:52:AE:DE:5D:D2:F5:61:6B:3E:78:36
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:08:b8:3f:ff:df:40:8b:75:68:72:3b:2e:f9:17:b5:ce:52:
8a:bd:1f:7e:95:32:3a:bd:20:bf:1a:39:c9:27:c0:23:34:e6:
d3:26:64:88:37:4f:17:ce:96:e0:7e:ed:53:ca:f8:f3:f5:c5:
96:ab:3f:8e:af:fb:70:46:9c:ec:e5:73:d2:f1:1a:27:b3:b4:
37:91:03:23:9b:46:97:84:c5:2e:1a:00:e3:1a:8b:6c:10:14:
fa:70:a9:cf:ab:b5:6f:ff:4d:80:6a:d9:4a:b5:ff:5c:84:a2:
b2:a0:5b:fa:8e:1b:8d:a0:a0:d1:0b:e6:25:da:56:93:56:cc:
5e:a2:af:79:ba:c5:6c:35:c5:68:41:54:91:ba:02:55:94:20:
2d:22:61:b2:1a:96:fb:14:9e:58:3e:b0:e5:32:88:79:b9:9f:
08:fe:8d:e8:b4:52:f5:25:fe:7f:01:2f:ad:c2:b7:0a:2b:4a:
1c:c4:fd:7f:bf:c3:e0:71:94:c6:94:35:d1:e6:ee:fd:2d:3d:
d8:34:fc:b0:87:5d:ac:50:04:fc:80:40:a1:e7:7c:87:bc:58:
87:7f:bb:22:4e:2d:c3:a6:9a:25:81:ae:f3:d7:f7:4e:0b:7b:
29:c6:98:f7:61:01:77:76:92:7f:9f:5d:66:de:43:e6:50:4b:
2e:6f:7a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:26:05 2025 by rpki-client