Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
File: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft (raw, json)
Hash identifier: ypE+/v4Q94dXMZubaGZeMfjoX/aI+qpoUQh0st4iWdU=
Subject key identifier: B9:91:D0:5B:1E:89:93:4E:F0:FB:84:BE:7C:42:AD:4D:05:88:F9:F3
Authority key identifier: 49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
Certificate issuer: /CN=49f9b880f259b88190702c22bf832171b7597434
Certificate serial: 0199FBEC3A902D058FA39AF83C16224955EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
Manifest number: 1335
Signing time: Sun 19 Oct 2025 10:03:06 +0000
Manifest this update: Sun 19 Oct 2025 10:03:06 +0000
Manifest next update: Mon 20 Oct 2025 10:03:06 +0000
Files and hashes: 1: Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl (hash: C0zMIysBNUH7CDRHjD1fSSgwEbassgA5IKQXhCkU1k8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:3a:90:2d:05:8f:a3:9a:f8:3c:16:22:49:55:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f9b880f259b88190702c22bf832171b7597434
Validity
Not Before: Oct 19 10:03:06 2025 GMT
Not After : Oct 20 10:03:06 2025 GMT
Subject: CN=b991d05b1e89934ef0fb84be7c42ad4d0588f9f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0b:fd:91:1c:33:22:9d:7a:7e:65:3a:4a:6b:
42:f4:73:f4:f8:ac:52:c9:07:be:d1:59:30:cb:a1:
34:81:c1:9f:c3:26:41:a9:5f:e3:27:9f:6d:db:41:
77:8e:51:32:69:cf:ae:de:b7:eb:b0:ef:f7:87:cd:
c9:44:33:eb:44:34:28:02:15:38:87:22:71:c5:e2:
99:96:77:fb:fe:a0:ab:96:0d:53:0c:29:2b:a5:6d:
80:85:2f:aa:ad:65:46:fe:8e:9b:24:70:64:39:33:
30:af:f9:7c:51:75:0e:f4:81:b9:33:13:f3:c0:09:
85:39:d0:74:95:6b:a3:dc:83:b2:e5:25:e1:48:54:
32:d3:50:55:48:76:78:8a:4e:d1:f9:c4:fb:76:9b:
f6:a3:35:d7:25:84:4d:d0:ce:83:2e:38:13:ad:40:
fc:e0:37:8b:bc:8f:11:3f:bf:12:3c:35:91:aa:c8:
d8:03:ca:0f:f3:25:d8:99:e9:f1:eb:60:9a:50:97:
27:c9:34:51:01:fe:10:9a:c9:e5:9e:fb:61:04:43:
8d:60:43:bb:63:d1:c6:7b:f6:b0:0e:4c:ec:1a:bd:
ae:e6:b3:f8:4d:ce:dc:0a:12:c3:cd:9b:31:06:42:
59:f4:3a:b7:58:7a:cf:11:0e:14:80:0b:b1:38:06:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:91:D0:5B:1E:89:93:4E:F0:FB:84:BE:7C:42:AD:4D:05:88:F9:F3
X509v3 Authority Key Identifier:
keyid:49:F9:B8:80:F2:59:B8:81:90:70:2C:22:BF:83:21:71:B7:59:74:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/a998bb-3bc3-4597-8dcc-c4f22536ab05/1/Sfm4gPJZuIGQcCwiv4MhcbdZdDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4a:a4:2c:bf:a8:2c:f7:d5:3a:bf:74:93:17:fe:f6:1b:cb:
e3:b4:45:34:18:83:23:6b:22:67:b4:4a:c9:91:63:4b:4a:ad:
c9:02:b5:b2:48:41:96:fa:13:17:9d:a2:7a:4c:eb:dd:3c:bd:
3a:5a:41:ac:11:19:02:13:a1:e2:02:45:07:7d:f6:fb:9f:71:
08:9a:83:5f:b5:08:5c:4c:c7:91:87:78:f4:73:67:cf:7b:ed:
2d:e5:d0:40:1c:e9:de:88:f9:1c:69:d8:08:e5:ba:37:40:59:
09:70:89:c9:60:ea:11:81:98:e9:ab:b6:2f:38:e9:45:23:66:
3c:b7:88:ea:33:69:fa:4a:53:c8:ec:49:e6:de:2c:ad:fa:a2:
54:27:51:79:24:51:a2:d5:e0:09:73:b3:f1:32:40:da:2d:ef:
17:20:2f:e4:de:c6:f8:de:d8:46:a9:52:79:14:5e:b8:0f:0f:
82:13:73:fc:03:eb:9d:6f:5f:f4:64:44:2a:80:93:14:cf:45:
50:22:fc:6e:65:ff:08:62:cb:c5:8e:07:03:40:98:86:18:14:
c2:cd:a6:ca:82:1c:47:1a:b3:1e:00:4f:4c:70:ba:cc:e1:97:
b2:26:49:13:10:47:83:3b:54:b8:a9:7f:7c:65:d9:ca:27:dc:
f4:e8:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:41:48 2025 by rpki-client