Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File: j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier: +gRbVHzHHDVN/qKuA4+u7rUneSwYaQzs7NQXvOWlteM=
Subject key identifier: 45:F4:DE:61:14:B2:D2:C0:3B:FC:37:78:62:B3:96:AE:0E:FE:1D:DD
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer: /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial: 0199FAD7E95A4B0126CF56379F6D7A45606C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number: 16AF
Signing time: Sun 19 Oct 2025 05:01:17 +0000
Manifest this update: Sun 19 Oct 2025 05:01:17 +0000
Manifest next update: Mon 20 Oct 2025 05:01:17 +0000
Files and hashes: 1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: gBuqJgp4qRXuhnkSVdUT+BLGu4PsG2Lid7emKfjXpCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:e9:5a:4b:01:26:cf:56:37:9f:6d:7a:45:60:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Validity
Not Before: Oct 19 05:01:17 2025 GMT
Not After : Oct 20 05:01:17 2025 GMT
Subject: CN=45f4de6114b2d2c03bfc377862b396ae0efe1ddd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b7:0e:38:49:bc:48:95:fd:15:76:7f:20:38:
cb:02:4c:3b:95:64:3d:80:5c:f6:e5:43:38:bf:4a:
c7:69:ce:50:e3:60:1c:a0:67:76:bf:7c:68:06:b8:
ff:52:9d:a1:23:e9:96:65:03:4f:fd:50:c1:f2:92:
cb:8c:b6:e6:67:50:20:b1:58:40:2d:ab:c2:40:f7:
b9:88:d1:bb:8b:3d:1b:8d:c9:90:d0:83:dd:0f:14:
73:f1:e5:ce:a0:1b:34:88:04:dd:37:b8:b2:df:df:
1f:b6:f4:2d:f5:69:d7:d7:9c:1c:94:d4:d3:5f:d1:
52:66:ab:b8:a7:43:24:19:41:34:d9:37:c8:2f:65:
97:b6:72:a1:c3:13:d3:58:3d:07:d2:8d:3e:ed:ff:
81:fe:15:f3:82:d0:44:c0:37:dd:02:39:44:a7:c2:
36:0f:7b:bf:14:79:2f:5f:55:ef:4f:d6:84:ae:9b:
37:38:f8:98:70:1e:96:02:13:2d:0e:a4:ea:b6:a9:
61:40:a2:c9:91:16:da:e0:c2:a7:49:c2:ca:04:22:
f7:af:d1:73:bf:fd:2c:47:e5:f9:d0:00:e1:cc:6c:
bc:29:b7:b9:3b:75:31:9a:01:b6:7a:b2:4c:81:b7:
6c:90:13:63:df:09:ae:f6:ad:8d:56:37:22:e0:30:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F4:DE:61:14:B2:D2:C0:3B:FC:37:78:62:B3:96:AE:0E:FE:1D:DD
X509v3 Authority Key Identifier:
keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:73:b2:89:c4:55:99:ba:af:ff:a3:d7:dc:59:e5:a1:37:2d:
14:57:9f:f1:89:6f:dd:35:9f:12:d1:49:df:2a:c2:b2:9a:a4:
e8:99:6f:f4:38:c2:7a:3f:ec:f4:f2:b9:a3:2a:dd:46:4b:ca:
50:e5:31:47:73:e2:f7:47:0b:60:f3:62:4f:4b:c3:08:25:16:
7a:dd:6c:c1:4f:1b:81:46:7a:30:1c:28:fe:13:d0:62:56:61:
b0:27:df:6d:f7:75:ff:84:27:d5:a8:2f:5e:37:01:4e:04:31:
eb:30:60:af:5c:ba:53:a5:9d:8e:fd:60:46:72:b6:e1:e2:bc:
31:df:4b:19:18:77:d4:20:86:a1:b0:8b:b0:c9:4f:ba:5a:14:
0e:7c:47:a4:70:34:53:e6:53:47:97:a0:19:f4:99:de:79:2b:
77:db:bf:d2:85:ae:a0:a7:be:ed:2f:20:36:b2:f4:69:c5:1e:
e7:06:3b:92:7c:8a:db:46:04:f2:b6:a7:1c:ee:47:72:29:da:
16:f0:3d:ad:8f:5c:81:ca:eb:c7:96:60:32:07:89:a5:62:6f:
26:de:e2:18:2d:1d:17:38:ed:69:8d:34:a7:32:00:c5:3c:a5:
25:e7:4f:98:06:45:ba:34:70:d4:4e:55:2b:d3:16:ed:da:93:
4e:45:22:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:49 2025 by rpki-client