Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
File: SVfItkDqWWxdEac7PSZu54w_Cds.mft (raw, json)
Hash identifier: R3ReQ71deZezF/hBSRS114WvHCIfpcMd512LXumCx1w=
Subject key identifier: B2:58:89:42:13:FE:3D:7F:1C:3A:E9:07:C1:1B:C8:8A:AE:82:B0:35
Authority key identifier: 49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
Certificate issuer: /CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Certificate serial: 0199FC8F89A7312E57226280F51F1F6BD5D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
Manifest number: 0970
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: SVfItkDqWWxdEac7PSZu54w_Cds.crl (hash: QvaIbDmJVqpgPoylH+jQNikpipO4tH867VVy+G0DYvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:89:a7:31:2e:57:22:62:80:f5:1f:1f:6b:d5:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4957c8b640ea596c5d11a73b3d266ee78c3f09db
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=b258894213fe3d7f1c3ae907c11bc88aae82b035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b2:02:f5:52:d2:56:5d:9b:c5:df:50:78:32:
68:9e:d8:32:12:85:ac:d3:63:ca:c9:a0:7b:ac:17:
38:3e:6b:8d:ab:d7:d7:16:96:c2:6d:bf:f6:dd:e6:
51:22:28:29:84:75:58:d7:54:10:bf:70:12:3a:42:
a6:bc:d6:b1:56:e7:df:e4:29:d4:aa:3b:05:d6:9c:
0b:7c:c1:6f:b5:78:3d:6b:4e:45:85:03:9f:a8:45:
c3:bc:c2:50:83:ac:65:22:4e:99:7f:7b:b4:af:56:
81:08:c6:2b:5d:75:8e:85:dc:76:32:62:d9:61:ee:
04:dc:62:be:a9:1e:ad:e4:c5:af:7d:c1:c5:27:0e:
89:bf:7a:69:1f:61:34:1a:4d:ac:1d:30:be:33:ec:
4c:8e:a8:e1:ad:34:f4:4d:3c:ec:b5:b8:04:a4:e5:
c1:3c:b7:9b:12:45:68:35:3f:48:a1:58:c5:93:dd:
c4:60:7a:34:d4:ad:33:34:6f:fd:1f:af:54:84:02:
f7:f0:b9:90:04:fe:79:57:31:99:99:c7:ca:ea:e6:
5a:9d:42:ab:26:11:2b:71:01:8f:e8:0e:36:a6:57:
d2:ec:a8:86:2a:4d:fc:ef:77:87:23:18:54:3b:10:
22:ec:58:05:d4:36:fb:36:96:80:57:90:dd:cb:62:
7b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:58:89:42:13:FE:3D:7F:1C:3A:E9:07:C1:1B:C8:8A:AE:82:B0:35
X509v3 Authority Key Identifier:
keyid:49:57:C8:B6:40:EA:59:6C:5D:11:A7:3B:3D:26:6E:E7:8C:3F:09:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SVfItkDqWWxdEac7PSZu54w_Cds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0ceec3-482a-41a5-97eb-bfe1e173d8f0/1/SVfItkDqWWxdEac7PSZu54w_Cds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:48:87:7c:91:39:28:16:fc:41:dc:92:0d:c1:b2:03:72:6c:
07:11:ed:fa:53:64:22:86:75:ca:e0:09:ae:6b:50:aa:e5:be:
0e:5b:99:ec:a5:f4:de:10:49:b6:ba:bf:72:31:ca:86:2e:1f:
1c:0d:2c:b3:cd:56:55:e8:87:4c:ea:a7:0a:11:7f:2d:7f:0f:
66:88:71:82:fc:59:50:d5:03:28:fa:6e:43:2c:ef:bb:bf:92:
d6:1a:db:29:12:f0:64:15:ab:a9:57:82:a0:6b:8f:cb:64:a5:
c4:36:36:cc:c8:b1:c0:dd:82:48:02:38:33:2d:1f:5a:c8:4c:
79:9d:2f:26:e1:73:4d:64:50:c5:4f:d9:8b:04:3f:2b:34:3a:
20:4d:8e:d9:c6:c6:3b:47:57:cd:e6:47:9f:9b:7b:94:2b:97:
68:45:4f:7f:9f:98:0d:3c:2a:f4:37:3e:54:97:ac:3d:29:58:
4e:35:ed:8c:28:b1:6e:9e:c0:5f:a6:08:40:27:7a:97:ce:23:
74:9b:0a:f6:97:ed:51:fb:a0:4c:c7:da:69:98:65:a5:a8:f8:
e7:77:db:c8:73:0b:7c:45:0f:61:23:1b:e5:dd:3a:13:2e:e2:
00:7d:90:85:bf:ad:a4:8e:30:b3:9e:48:c5:6f:30:ef:fe:72:
1e:15:7b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:24:06 2025 by rpki-client