Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
File: r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft (raw, json)
Hash identifier: mUvFYZ8E6xmjr++ZQZB4ncu0mUpibh56EOhfBxGIkxE=
Subject key identifier: 35:E6:4A:DC:7B:84:5F:D0:A7:87:23:35:FB:AB:83:FE:21:E8:62:25
Authority key identifier: AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
Certificate issuer: /CN=af85bb8a50443e504c4853cce025ef58341c1d50
Certificate serial: 0199FBEB8C31D9000E73E455DA8D9ECE1507
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
Manifest number: 0B59
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl (hash: z3QiM4fITi7lmNFLxAD6mI3bUrXULQJVOtW5emHnqEE=)
2: toLcHJuza0nk_rSiToUi8cqjpA8.roa (hash: kRROIdBqbwyv0kgRq3rS5l7ig0u7UsDgEiLSwPvEVgQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8c:31:d9:00:0e:73:e4:55:da:8d:9e:ce:15:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af85bb8a50443e504c4853cce025ef58341c1d50
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=35e64adc7b845fd0a7872335fbab83fe21e86225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6d:61:72:61:6c:b9:df:96:04:a6:7c:6c:47:
c9:bf:22:fe:a6:48:12:1f:54:94:a7:97:de:a3:c7:
a5:0f:60:05:7e:80:f5:e0:5b:4d:51:5b:eb:8d:e8:
ed:d6:06:05:6a:94:92:b1:3b:f2:99:ee:30:ca:30:
75:c8:94:95:db:d9:e9:f0:37:09:13:94:52:af:4d:
90:19:8a:ab:fa:41:79:37:33:13:0e:d0:04:17:20:
83:08:97:22:d9:a3:d5:a1:2d:8f:45:e6:9b:0b:22:
72:b4:d5:87:26:7b:15:ed:f4:4e:26:15:a5:94:b3:
4f:01:73:62:a2:9e:8e:c0:9b:48:83:cf:51:c4:d0:
2a:18:17:b2:c5:8a:9e:38:36:76:2c:3c:5e:40:0e:
1e:0a:12:15:22:5a:21:3f:20:71:4f:89:7f:d4:9a:
5a:9e:01:d0:82:09:b4:71:6a:b2:c6:40:51:e0:d6:
2f:e8:16:bd:24:d1:61:8e:9a:bc:9d:b3:c9:91:43:
6b:4d:36:8a:cc:3a:fd:0c:0d:ce:48:fe:47:7d:6d:
6d:2f:ce:79:93:aa:b8:f9:51:dd:18:7e:08:c3:08:
d4:09:3d:bd:b2:e3:6e:ef:c8:63:56:5b:67:38:bd:
09:fc:6c:bc:04:0d:e6:3c:a4:83:e8:89:70:ef:77:
f5:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:E6:4A:DC:7B:84:5F:D0:A7:87:23:35:FB:AB:83:FE:21:E8:62:25
X509v3 Authority Key Identifier:
keyid:AF:85:BB:8A:50:44:3E:50:4C:48:53:CC:E0:25:EF:58:34:1C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4W7ilBEPlBMSFPM4CXvWDQcHVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/3df0b6-47c9-40fe-8358-fdebbc927d40/1/r4W7ilBEPlBMSFPM4CXvWDQcHVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:73:94:86:98:4e:c9:ca:2c:ea:a6:4b:29:fe:a3:93:4d:3a:
50:2d:de:6b:8e:77:b8:70:37:71:d2:25:07:88:67:b3:5d:0c:
ef:6b:da:64:84:b9:a4:04:5c:4a:a1:fb:81:21:5f:a9:60:aa:
5a:bb:38:d4:5a:2b:04:36:ab:0f:14:99:c1:01:71:ce:a0:6a:
d1:26:1e:75:ce:e6:4e:a6:82:02:7e:9c:84:02:70:4e:fb:a0:
37:b5:c7:20:e1:60:c7:7d:c1:81:f1:3a:48:ff:45:87:0a:c7:
00:88:2b:e4:65:22:ab:81:74:97:d9:b5:78:8a:8b:5d:47:1d:
d4:24:c5:62:37:61:9e:f5:cd:27:50:89:35:af:45:9c:47:d5:
ee:63:8e:e6:59:6d:a1:12:a6:09:94:5e:c8:34:49:4b:fb:45:
eb:63:ce:f9:08:ba:4c:70:68:cb:5d:1b:88:0c:3c:7e:8d:89:
b2:79:75:1c:71:af:d7:f3:47:5e:7b:b4:d9:05:f0:44:0f:9e:
79:85:68:ce:2e:c1:8e:f5:db:9d:aa:34:e9:e2:66:56:6b:76:
a6:68:23:54:b4:cb:06:21:cd:1b:97:ae:4a:05:7b:fd:b5:08:
40:7a:92:d0:ed:bf:9e:21:a7:d3:d3:e6:f6:d7:0f:b0:cb:b8:
64:95:1c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:00 2025 by rpki-client