Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: ZaJ1ubnYJsnqwxXmI6jnC/6jtsH+sJjunBv9OK9pUKI=
Subject key identifier: A4:8E:80:1D:88:B0:1A:E6:C8:12:01:8A:D8:A5:7A:CB:94:FB:55:CE
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 0199FDDA283FA5D6E5E6B39891EAA23C73B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0DF2
Signing time: Sun 19 Oct 2025 19:02:36 +0000
Manifest this update: Sun 19 Oct 2025 19:02:36 +0000
Manifest next update: Mon 20 Oct 2025 19:02:36 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: cMoVjHrPhRiAHN9dXlEAUAh8wDkWYCD4pYkx3lsYsXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:28:3f:a5:d6:e5:e6:b3:98:91:ea:a2:3c:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Oct 19 19:02:36 2025 GMT
Not After : Oct 20 19:02:36 2025 GMT
Subject: CN=a48e801d88b01ae6c812018ad8a57acb94fb55ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:6f:6c:10:b2:18:3a:e9:89:df:25:8b:22:a1:
a7:78:8c:95:13:a8:31:11:0a:7e:17:83:ba:2c:bb:
fe:8f:59:ff:02:90:8b:d4:c6:45:7c:75:fe:17:10:
47:6a:e9:83:d2:5b:8c:f6:2c:49:2d:9e:86:48:f3:
08:4f:d3:04:36:1d:94:9b:d0:75:5c:0b:ff:6b:83:
63:63:79:18:1a:38:27:5d:d0:a5:a1:db:d7:7c:26:
7f:d4:75:a7:ab:d8:b4:51:62:53:26:fe:b3:e7:4b:
69:92:8d:52:cc:3e:4b:65:48:a9:4f:8d:31:23:06:
d2:66:9e:d9:d2:7a:2b:be:f9:47:8e:20:40:cc:7e:
50:de:9d:3e:f1:46:bf:fa:0a:ee:d7:10:e3:91:b8:
24:a8:f8:9c:58:01:66:d1:a5:1a:92:96:26:3c:5e:
c1:b9:e2:47:c2:23:19:0f:60:38:c6:82:e3:5d:30:
30:49:1c:a9:d5:63:b0:f2:66:d4:76:d6:22:ad:ba:
35:ce:b9:12:a7:0d:06:9c:ec:5e:b1:b0:c0:9f:0d:
f4:9b:6c:ca:e3:07:3d:b3:a9:85:0d:4d:d5:d4:a8:
72:bc:04:f1:86:c4:05:4d:02:18:52:f3:d7:fa:5d:
93:1d:97:63:69:a3:70:c8:c3:a2:f8:e3:63:a7:2d:
85:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:8E:80:1D:88:B0:1A:E6:C8:12:01:8A:D8:A5:7A:CB:94:FB:55:CE
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:64:ef:e3:5f:74:c2:5d:8e:dd:f2:cd:c6:cc:eb:1a:62:d6:
89:fe:91:78:71:85:71:cd:09:03:aa:47:75:98:ce:8f:6a:40:
3c:1a:e9:f6:34:d6:ce:49:9b:1a:98:f7:98:04:a3:54:b7:cd:
4a:cc:47:0d:19:4e:34:98:4d:98:f2:45:41:08:42:2c:7c:30:
9d:b7:0e:f8:e8:c1:69:28:96:72:b7:d5:a7:6e:c6:c0:a8:7d:
ac:e9:21:25:81:d5:e0:7b:ef:be:57:4c:25:31:27:77:20:88:
54:1e:51:df:e9:2c:0f:8d:d8:96:1d:f2:bd:3e:bb:65:ac:79:
36:8c:98:17:a7:4c:7f:33:bd:a1:4e:a3:0b:a2:bb:81:36:70:
cd:5a:10:2e:68:20:bc:87:68:2f:7b:a9:4e:5d:74:29:4a:f7:
4d:e5:18:10:9e:c7:65:12:0d:9d:5d:74:91:f1:cf:32:07:31:
35:cc:13:d2:af:b6:a3:09:fd:8a:9a:47:10:24:15:66:4e:16:
76:7b:d6:78:26:1b:06:33:84:7d:ac:82:96:98:35:d7:80:e1:
03:af:3a:6f:38:dc:de:34:94:0e:af:7e:ff:03:4b:d1:e6:0e:
28:d3:ca:8e:19:e2:18:e2:de:d5:c3:94:7b:5b:90:0d:98:94:
c9:4c:7f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:05:57 2025 by rpki-client