Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
File: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft (raw, json)
Hash identifier: ijgnpP2z7V+q8GEjuCQxb6HWCNVPOJub0P4WnJM7IIo=
Subject key identifier: D4:8F:59:02:1B:39:08:0B:A3:ED:E4:6F:7E:81:3D:B0:60:23:91:3D
Authority key identifier: FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
Certificate issuer: /CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Certificate serial: 019A04ED0EF680816120DB1002FD11AACCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
Manifest number: 16E4
Signing time: Tue 21 Oct 2025 04:00:35 +0000
Manifest this update: Tue 21 Oct 2025 04:00:35 +0000
Manifest next update: Wed 22 Oct 2025 04:00:35 +0000
Files and hashes: 1: _tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl (hash: Tyt71ZcVJOu1F6xyz1P072jxwn/y8hy7jxy04A3r2u8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 04:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:ed:0e:f6:80:81:61:20:db:10:02:fd:11:aa:cc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed4a96fe1ed028d5912d77a500b09478bd18322
Validity
Not Before: Oct 21 04:00:35 2025 GMT
Not After : Oct 22 04:00:35 2025 GMT
Subject: CN=d48f59021b39080ba3ede46f7e813db06023913d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:35:d6:c7:3e:21:96:85:9b:ed:8a:0e:16:08:
86:22:8b:71:79:c3:82:a9:9b:3a:c1:9f:3b:70:33:
0e:3f:a7:40:71:b2:b9:61:2b:66:52:4e:61:0c:ca:
8a:4f:b5:56:39:49:2f:90:56:30:cf:8a:31:f9:0b:
2d:9b:1f:07:96:8e:ad:a6:39:8e:2b:99:e3:8e:20:
2a:70:da:6b:65:d1:42:33:37:45:87:8c:34:69:e4:
28:bb:91:11:46:b9:d9:af:80:53:18:3f:53:cb:eb:
c1:7b:07:f3:a8:52:b1:be:1b:a6:1b:7c:fd:ca:2a:
95:77:f5:59:d0:8f:e3:79:34:4e:0c:d7:06:dc:f8:
bd:3c:13:90:b4:14:61:50:ab:63:61:23:43:c1:f1:
1d:52:5c:53:8b:27:40:75:33:36:a9:ee:1a:cc:bf:
bf:48:70:87:d3:b9:50:c4:bc:11:6e:1a:06:6b:c5:
ac:36:3c:ef:cf:db:7f:38:09:80:17:c3:37:0c:e0:
fd:f1:76:af:1d:27:4d:00:05:46:ea:fd:af:1f:34:
a9:b9:85:70:f4:c7:7f:f9:9e:b5:4c:66:af:03:1b:
dd:d7:b8:04:eb:31:92:13:4f:67:52:67:ea:8a:d0:
7f:fb:01:d0:66:b0:dd:7d:44:ae:c2:48:8d:85:03:
f8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:8F:59:02:1B:39:08:0B:A3:ED:E4:6F:7E:81:3D:B0:60:23:91:3D
X509v3 Authority Key Identifier:
keyid:FE:D4:A9:6F:E1:ED:02:8D:59:12:D7:7A:50:0B:09:47:8B:D1:83:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/98183c-edc4-464d-bf45-8899d1058b64/1/_tSpb-HtAo1ZEtd6UAsJR4vRgyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:c4:c7:27:39:26:f9:e6:89:2d:7d:3e:d0:b0:62:cd:50:
78:3b:06:df:27:11:0a:da:f4:44:da:ea:96:78:b9:1a:4e:72:
a5:53:72:1a:94:2d:2e:a3:5b:33:b4:03:bd:77:af:74:22:56:
4c:57:a8:48:7e:26:16:29:ad:6e:ce:3f:23:30:86:6b:79:97:
5a:1c:c6:fc:1a:bb:66:93:44:51:c3:4e:78:2e:e0:e3:30:f2:
aa:b1:78:62:0b:16:0a:07:f6:7b:21:d9:81:9c:79:ec:8e:ce:
98:ec:ec:42:e4:46:17:32:2d:8e:8b:90:16:20:d9:3e:96:3a:
7e:dc:6d:a9:07:65:a2:22:78:bc:cf:f3:01:f2:3c:d2:88:2d:
51:c4:b6:2f:fc:8a:44:1e:11:9a:bc:f9:d0:0d:da:3f:2d:29:
62:76:64:9f:54:66:b2:8a:fa:92:e8:9d:bc:f2:4c:43:e0:b0:
8b:1d:f3:22:6d:6e:aa:17:84:90:de:06:42:34:30:55:a0:d3:
38:cb:dc:7e:10:0c:47:50:bb:77:21:6a:d4:2e:9d:62:63:14:
9e:2b:48:13:34:d3:c4:6e:7b:0c:89:4e:ad:5b:df:77:e8:fe:
8f:11:e9:42:4e:0b:1d:14:a6:9f:97:0f:70:20:bd:13:95:bd:
2d:74:36:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 11:02:51 2025 by rpki-client