Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft
File: sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft (raw, json)
Hash identifier: +IUcS75QlYg+G1dL3LR1NlKVq22mPK7KvHTx87qdq2o=
Subject key identifier: E1:F0:BA:2D:D4:FC:E9:E4:02:4F:B0:7A:AE:63:03:28:50:E2:91:E0
Authority key identifier: B1:33:80:79:04:86:DC:37:6D:04:DC:54:1E:98:02:CB:02:F7:52:5A
Certificate issuer: /CN=b13380790486dc376d04dc541e9802cb02f7525a
Certificate serial: 0199FC21A3D494C5C09FD308CF6E968F200D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft
Manifest number: 31
Signing time: Sun 19 Oct 2025 11:01:27 +0000
Manifest this update: Sun 19 Oct 2025 11:01:27 +0000
Manifest next update: Mon 20 Oct 2025 11:01:27 +0000
Files and hashes: 1: sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl (hash: ablm0dc5I3/wSTqzei/OHvw3BElwy5oAy/07mr5Xe0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft
rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:a3:d4:94:c5:c0:9f:d3:08:cf:6e:96:8f:20:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b13380790486dc376d04dc541e9802cb02f7525a
Validity
Not Before: Oct 19 11:01:27 2025 GMT
Not After : Oct 20 11:01:27 2025 GMT
Subject: CN=e1f0ba2dd4fce9e4024fb07aae63032850e291e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b6:4b:13:65:f1:4e:50:d3:c4:07:e2:bb:e8:
2a:d1:5d:c0:52:aa:88:c7:1d:ef:d2:86:80:33:28:
c8:78:bd:05:ba:4c:37:7d:1f:20:69:c3:cd:8f:86:
86:2a:5d:89:51:6c:92:df:b5:65:59:2c:a0:81:8a:
94:29:a0:d4:16:85:32:08:63:10:5c:f5:a7:b6:65:
d6:17:3b:db:57:dc:1e:96:8e:32:b9:f4:68:c2:4b:
d1:4b:e9:27:11:cd:a2:90:f8:1f:6e:91:76:c0:7a:
a5:c2:88:02:b1:92:f7:f7:0c:e1:01:bd:74:59:be:
2a:bf:cf:07:8c:f6:6d:cb:07:16:42:dd:5a:26:e1:
48:d1:06:79:0f:2c:b9:ed:99:86:ce:d0:43:c4:2e:
85:14:f9:4e:50:02:62:8f:b9:46:11:ce:e7:49:45:
75:f4:36:e1:c7:8b:2a:34:8f:40:07:7c:76:45:fd:
6a:2a:30:0e:99:92:07:e2:66:06:d9:90:8a:63:0e:
89:c1:fa:dc:34:0f:03:36:3c:88:b2:75:02:17:b2:
1f:4f:2a:d8:22:19:a8:e6:f1:82:f6:3a:54:91:0e:
d5:c4:cd:46:1d:da:bd:4a:24:2d:16:56:6d:70:9f:
dc:98:13:dc:6e:32:bd:2b:b5:d1:64:f9:a4:a5:86:
32:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F0:BA:2D:D4:FC:E9:E4:02:4F:B0:7A:AE:63:03:28:50:E2:91:E0
X509v3 Authority Key Identifier:
keyid:B1:33:80:79:04:86:DC:37:6D:04:DC:54:1E:98:02:CB:02:F7:52:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sTOAeQSG3DdtBNxUHpgCywL3Ulo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/32eab1-c31b-47b4-aa2a-e52956c48006/1/sTOAeQSG3DdtBNxUHpgCywL3Ulo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:09:86:86:22:16:06:28:eb:99:f7:04:3f:e2:19:3d:da:31:
17:e7:24:a8:bd:f5:96:88:4b:96:45:32:60:9c:f9:1e:9d:24:
96:d5:89:11:4a:ba:e3:07:6d:06:5d:d5:27:e5:b7:43:95:1a:
24:2c:ae:f3:3a:af:b7:39:b7:98:3e:23:4c:25:0e:62:49:45:
d7:0e:84:98:25:db:0f:98:53:b8:1d:99:89:16:3b:62:34:0c:
91:57:25:a1:87:25:8a:e7:c4:e4:46:3f:e4:87:c1:ed:62:69:
1b:d8:dd:a5:22:5b:63:33:53:82:f7:59:72:1b:9e:cc:10:15:
a8:50:13:ac:93:55:29:9a:df:e3:b2:e0:fa:41:ba:e9:10:30:
1b:eb:e1:77:d6:02:63:15:65:9c:c6:86:74:cb:7a:7d:00:72:
6a:46:52:e7:c3:76:3b:a4:52:54:ea:c5:79:81:22:89:f1:86:
67:f7:48:2e:29:80:08:0b:95:7c:ff:e0:76:36:24:69:82:7f:
96:8b:95:b1:59:3a:a6:1a:93:df:72:60:78:6b:bc:05:ae:a5:
da:d5:f8:21:1b:1f:d1:5e:4a:67:bf:dd:8d:93:27:ef:69:1f:
13:94:95:71:15:b9:f9:5c:40:fc:c3:53:d1:d8:5a:b8:4c:63:
90:04:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:05:14 2025 by rpki-client