Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
File: R34OvwADKaAhrl6PHYHEBfuNCzw.mft (raw, json)
Hash identifier: HWYQPAGyA6GQp+QRv5s0K0eFfvDwCo1Tukc8gVDdNgs=
Subject key identifier: BA:BC:51:FD:E1:DA:F1:50:F9:2E:46:67:39:18:AF:D3:B0:89:5E:3C
Authority key identifier: 47:7E:0E:BF:00:03:29:A0:21:AE:5E:8F:1D:81:C4:05:FB:8D:0B:3C
Certificate issuer: /CN=477e0ebf000329a021ae5e8f1d81c405fb8d0b3c
Certificate serial: 0199FAA13706E9E55999205266E9FEB01408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
Manifest number: 0E
Signing time: Sun 19 Oct 2025 04:01:33 +0000
Manifest this update: Sun 19 Oct 2025 04:01:33 +0000
Manifest next update: Mon 20 Oct 2025 04:01:33 +0000
Files and hashes: 1: R34OvwADKaAhrl6PHYHEBfuNCzw.crl (hash: De0pVeKsxcgXHDtS7xKbUIsPL9IzCIjpKl8JviqqvEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:37:06:e9:e5:59:99:20:52:66:e9:fe:b0:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=477e0ebf000329a021ae5e8f1d81c405fb8d0b3c
Validity
Not Before: Oct 19 04:01:33 2025 GMT
Not After : Oct 20 04:01:33 2025 GMT
Subject: CN=babc51fde1daf150f92e46673918afd3b0895e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:71:28:a0:29:9f:4e:4f:7d:9a:6e:80:33:bf:
5e:7c:c3:ea:71:33:70:cd:e8:62:a2:a4:6e:fa:ee:
de:c8:59:eb:b0:bf:8a:11:08:4e:38:70:b6:8d:13:
17:5d:87:45:aa:25:52:d5:42:6c:dd:75:53:11:2f:
b4:c7:99:9b:33:17:f8:96:04:41:b8:25:ec:08:5d:
3e:f8:97:4f:5e:ea:a6:d6:29:0d:b0:48:a7:1b:f8:
61:65:67:5b:9b:45:db:59:72:96:a5:f5:58:19:4b:
99:b2:58:4f:13:6c:b4:69:1b:17:a5:72:68:03:d0:
5b:78:24:0b:40:57:45:9f:49:24:d6:48:9f:5e:f8:
75:9f:b6:1d:ba:9b:70:dc:9f:88:cf:e8:74:ad:c5:
3e:16:22:2e:a4:4b:88:a4:96:ce:f5:73:79:4a:bb:
6e:fd:15:bb:66:4b:7d:2a:d4:57:af:49:53:a3:f1:
7e:aa:66:31:be:26:13:88:46:5b:dc:c0:c3:60:70:
89:dd:69:8d:b8:15:63:ff:2e:08:e2:03:90:df:00:
c8:74:29:f9:36:72:0e:c0:9e:c6:51:ff:2c:c8:0d:
d3:0e:a4:68:f5:a8:fa:20:a7:0a:98:05:6c:d1:7b:
52:9f:b3:2b:5b:aa:21:f1:db:1d:58:e3:1e:64:13:
95:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BC:51:FD:E1:DA:F1:50:F9:2E:46:67:39:18:AF:D3:B0:89:5E:3C
X509v3 Authority Key Identifier:
keyid:47:7E:0E:BF:00:03:29:A0:21:AE:5E:8F:1D:81:C4:05:FB:8D:0B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R34OvwADKaAhrl6PHYHEBfuNCzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/a440bc-39f2-45ca-bdda-963ad3027882/1/R34OvwADKaAhrl6PHYHEBfuNCzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e2:58:58:88:57:f1:d8:d3:c5:5b:b0:07:b9:07:c0:f1:99:
70:15:4f:2f:68:08:a0:d6:ed:12:60:5a:30:6d:7e:d7:73:83:
df:64:37:79:10:ca:61:13:9b:eb:9c:87:5c:00:e0:82:51:39:
fd:6c:3a:0d:cf:37:82:8f:fc:b6:07:2f:15:ef:f6:30:d1:9e:
52:a9:58:69:64:fa:c4:5b:81:aa:1e:a9:5a:8c:ef:ab:de:bf:
0c:9e:9e:75:db:f6:a3:40:f0:94:e8:6d:f1:fd:fa:f9:4c:bf:
9d:c0:53:44:d0:05:b0:d4:f7:88:e4:86:55:11:00:7c:4f:e4:
34:a5:a7:07:ad:0e:4d:0c:3c:29:33:dc:d0:d8:c1:8d:ee:1a:
c0:15:ae:ce:68:00:00:35:d0:09:dc:11:af:06:d3:17:29:8f:
90:83:41:fa:d1:35:c2:c9:07:6e:7f:43:92:d4:c2:dd:fa:d6:
79:31:12:4d:51:bf:7c:ce:37:d8:77:39:2f:95:6a:20:d9:7d:
c8:87:ae:b1:c0:b6:85:eb:67:b3:69:e8:2c:31:1f:01:c0:d0:
f5:34:a2:ed:b8:b2:6f:62:56:2a:c7:ca:1c:41:69:3b:9c:e7:
48:95:ad:61:eb:d1:bb:fc:88:f7:93:1e:b9:0b:2c:bc:c3:0b:
94:0e:bc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:02 2025 by rpki-client