Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
File: at5urfJFy3ply0wF09VLzSYKB18.mft (raw, json)
Hash identifier: +OrE/2rfKnU5JGqJiNrTRa007LICnu6clH1bOBxGa4c=
Subject key identifier: C5:B3:28:07:A1:BF:B2:44:75:E9:A6:54:DB:E8:CA:AC:A3:C9:F0:31
Authority key identifier: 6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
Certificate issuer: /CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Certificate serial: 019A02FECEE72EB31B704B16A8B44CC23F94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
Manifest number: 0434
Signing time: Mon 20 Oct 2025 19:00:44 +0000
Manifest this update: Mon 20 Oct 2025 19:00:44 +0000
Manifest next update: Tue 21 Oct 2025 19:00:44 +0000
Files and hashes: 1: at5urfJFy3ply0wF09VLzSYKB18.crl (hash: eJZ3BGyN7Pmb3+1XGlrRv0qPSDZ/ijQlFXioe1dG9LA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:ce:e7:2e:b3:1b:70:4b:16:a8:b4:4c:c2:3f:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ade6eadf245cb7a65cb4c05d3d54bcd260a075f
Validity
Not Before: Oct 20 19:00:44 2025 GMT
Not After : Oct 21 19:00:44 2025 GMT
Subject: CN=c5b32807a1bfb24475e9a654dbe8caaca3c9f031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:54:a0:ca:5f:7e:72:9d:78:70:9e:f8:de:
3e:3b:cf:ca:67:c6:07:53:a1:98:f6:b2:41:79:1e:
22:2e:ec:40:a6:6e:96:c5:c3:e3:d2:09:42:8f:af:
fc:04:f3:9e:44:88:2c:26:80:08:61:e1:fe:a5:de:
c4:5a:29:e1:ce:a7:3d:c6:cc:89:84:28:24:86:02:
eb:b9:d5:50:ab:33:2e:fd:98:f6:17:2c:d7:8d:00:
e9:96:ab:04:96:5e:d7:f9:e0:f0:c4:fc:72:a0:16:
2b:d5:b0:00:fb:7e:80:ac:f7:83:02:0f:80:3b:cb:
51:e0:5b:8f:cb:0a:57:06:03:09:0e:c7:16:69:e7:
dd:be:0e:f3:1e:cf:55:23:f7:ad:23:76:03:4a:8e:
69:cb:6c:8c:6b:bb:fa:d7:6c:3c:10:59:2e:bc:29:
b8:64:56:23:81:18:88:9d:3e:2c:6c:52:af:bf:c7:
17:24:0b:2d:bb:b5:51:9c:aa:6a:17:49:48:01:f2:
16:08:dc:36:43:bd:80:4b:7c:41:f4:01:a0:af:d2:
61:37:60:39:77:01:2b:aa:5b:c5:d2:98:94:be:81:
53:07:8b:d6:f3:72:68:ff:90:52:ce:f3:08:8f:c3:
4c:d2:8f:9a:28:fd:e6:68:c2:f5:b8:ef:b5:67:e2:
8a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B3:28:07:A1:BF:B2:44:75:E9:A6:54:DB:E8:CA:AC:A3:C9:F0:31
X509v3 Authority Key Identifier:
keyid:6A:DE:6E:AD:F2:45:CB:7A:65:CB:4C:05:D3:D5:4B:CD:26:0A:07:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/at5urfJFy3ply0wF09VLzSYKB18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cb5183-d8d8-4425-b0ed-c2097031ed4b/1/at5urfJFy3ply0wF09VLzSYKB18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:7b:e5:f7:00:b2:19:9e:7f:14:c8:0d:6a:43:0b:23:79:31:
7e:9c:75:e7:38:f1:4a:c6:ce:ee:0f:93:db:34:32:97:8a:31:
e0:fa:32:5a:0e:eb:78:60:07:9e:90:92:a9:c8:cd:a6:c7:f8:
6f:9e:3f:16:03:b6:62:56:d5:d3:39:b1:e4:65:83:26:7e:53:
02:26:f8:87:c2:88:6e:f4:a6:d2:8f:36:5f:3b:fa:74:77:fc:
32:8f:ea:45:70:51:2b:34:d6:43:cb:69:85:ef:44:bb:bf:b9:
b5:22:cc:e0:d8:56:b7:4d:34:86:d9:5e:b8:1b:6d:ba:6f:73:
e7:bb:6c:80:35:76:7b:b7:a7:18:fb:1e:73:d6:64:c3:0e:ef:
c8:8d:19:07:8b:6a:51:45:81:b1:45:7e:a1:cf:8f:ed:93:83:
67:a1:c1:bc:4f:e0:2c:1d:5b:37:9d:16:af:d8:16:78:3c:d3:
48:d5:14:d1:cc:b1:66:d5:86:60:7a:ad:c0:d9:4f:27:05:32:
3b:bd:12:89:2f:3e:04:a9:00:8f:6f:17:36:30:9a:d1:f0:48:
83:ce:c8:f8:0a:1e:f9:6c:8e:81:72:15:3b:69:3e:1f:36:f8:
fa:c3:5e:9f:aa:ed:65:56:b3:17:78:7d:9a:99:a3:f5:37:54:
23:99:2b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:39:50 2025 by rpki-client