Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
File: sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft (raw, json)
Hash identifier: 7chT4ORYmHB1yfiZ/sVRLsIEYML12uK89IoEcxcswA4=
Subject key identifier: C9:27:73:22:30:3B:E5:82:05:C9:37:CD:6B:AC:20:25:89:27:57:63
Authority key identifier: B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
Certificate issuer: /CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Certificate serial: 0199FDD947C45351720762D69CAEA8618BD2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:01:39 +0000
Manifest this update: Sun 19 Oct 2025 19:01:39 +0000
Manifest next update: Mon 20 Oct 2025 19:01:39 +0000
Files and hashes: 1: sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl (hash: vGd2g5+aWajc/KD1pSJqnwa5i51K9EUMlcK4wO06AdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:47:c4:53:51:72:07:62:d6:9c:ae:a8:61:8b:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0bb87d20cc420df41e090c33b4c40efcb0dd878
Validity
Not Before: Oct 19 19:01:39 2025 GMT
Not After : Oct 20 19:01:39 2025 GMT
Subject: CN=c9277322303be58205c937cd6bac202589275763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:c3:c2:c9:33:33:ae:ab:b2:b2:a0:24:cd:
23:fd:c7:c8:b1:13:fa:6c:94:d8:5c:d7:ae:57:42:
52:95:f7:b3:3c:1c:85:7a:94:0d:35:b7:b1:6a:60:
a0:02:43:e2:0d:27:e7:b4:0b:c4:52:54:7e:97:46:
90:65:82:28:7c:28:58:b9:87:3e:ec:fb:3e:1b:3a:
77:9b:f4:77:58:34:04:f5:79:ab:40:74:03:1d:3c:
1d:bd:cf:87:ed:bf:56:a6:ef:12:65:46:20:f5:1c:
3e:47:f9:55:40:f2:8a:8e:99:68:3e:4a:ae:4b:fc:
0a:4e:b8:53:dd:49:06:9a:8e:8d:53:61:ed:b7:2f:
5e:c2:6f:47:5a:91:3b:2c:59:85:dd:a4:b8:c6:1a:
43:25:a2:94:96:3e:69:11:7d:d2:82:b6:c5:96:1a:
85:78:9d:15:84:cf:f0:05:47:ce:b6:30:eb:42:ec:
e1:de:d4:f1:95:b6:12:f8:25:82:a9:9d:a3:7a:ac:
aa:eb:d5:6a:c9:e9:04:fa:b1:72:f4:ed:6d:24:e5:
c2:5c:5c:ce:67:37:3f:83:5c:fd:49:f6:b0:15:9c:
96:28:1c:1a:b3:42:5e:f4:d9:ce:dc:3e:68:90:d4:
f5:f4:a4:46:94:a3:cc:27:7d:ac:d5:34:fe:bc:16:
4e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:27:73:22:30:3B:E5:82:05:C9:37:CD:6B:AC:20:25:89:27:57:63
X509v3 Authority Key Identifier:
keyid:B0:BB:87:D2:0C:C4:20:DF:41:E0:90:C3:3B:4C:40:EF:CB:0D:D8:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLuH0gzEIN9B4JDDO0xA78sN2Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/4813f2-4c63-4aa0-9b22-37bc8e656eb1/1/sLuH0gzEIN9B4JDDO0xA78sN2Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:7e:21:4f:f1:7c:89:5c:eb:e4:ef:81:83:1e:bf:80:16:5e:
cf:8e:b8:9d:95:35:42:b0:42:33:4d:9e:ab:37:c8:b4:a1:32:
62:16:73:fb:e2:ab:fd:7c:93:33:6e:3f:9e:cb:02:0e:81:31:
82:28:31:56:19:28:c5:89:48:a4:5b:c4:50:cd:cd:aa:d7:04:
a8:76:0a:32:fd:1d:33:54:e1:28:89:ee:a4:c5:89:11:4d:46:
08:6f:a1:5b:dc:49:fa:74:61:79:64:8a:e4:c3:23:af:33:fd:
54:5f:36:50:03:3c:8d:24:c1:c3:9a:8b:04:59:2d:37:a9:3e:
db:1b:c7:bb:8a:f9:ef:ef:18:cd:8a:49:41:02:7c:93:b0:83:
09:ef:6e:93:84:75:f9:13:7a:de:1e:a1:9f:3a:b7:67:86:65:
2f:21:d6:83:3d:bd:8c:0e:4f:45:69:02:23:a8:8d:30:bd:83:
78:f7:10:b6:72:f2:17:32:bc:41:04:54:52:f1:82:be:8d:12:
27:ce:d2:88:09:a1:5a:53:3b:8f:92:87:f6:d8:2a:4d:fe:b3:
08:11:7b:81:d6:c6:eb:82:f0:93:b4:a6:e6:62:88:51:3b:fa:
f5:f9:aa:db:10:b5:5d:de:a4:e9:15:8a:69:b2:f4:3f:e6:91:
ac:73:fb:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 21:00:40 2025 by rpki-client