Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: vOgxIZa7pJGIR66sOIiGSkkVqOIoQ9EGNS2UWjelDEU=
Subject key identifier: 4D:35:7F:B4:65:9F:B5:4C:B4:2A:AD:91:E0:EF:6F:DD:7A:79:E1:75
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 0199FC8F30BB254A4378D55D2719230D6AEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 163F
Signing time: Sun 19 Oct 2025 13:01:06 +0000
Manifest this update: Sun 19 Oct 2025 13:01:06 +0000
Manifest next update: Mon 20 Oct 2025 13:01:06 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: dGM1EefLGhFBPUEoQEFlziB0V2DD59bxGU/KofrFsUM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:30:bb:25:4a:43:78:d5:5d:27:19:23:0d:6a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Oct 19 13:01:06 2025 GMT
Not After : Oct 20 13:01:06 2025 GMT
Subject: CN=4d357fb4659fb54cb42aad91e0ef6fdd7a79e175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:44:ea:9e:6f:57:f6:fa:44:00:45:21:f1:c1:
ba:88:1b:74:cb:89:d1:e5:26:50:6d:70:07:c2:5d:
5e:24:1a:81:e4:2d:6c:10:40:da:7f:43:05:18:66:
28:c0:06:ba:4e:3a:fe:7a:1a:00:72:98:2f:bd:50:
5d:19:2b:aa:c2:b2:65:1b:19:7c:14:a9:b6:12:25:
a5:1f:c2:f8:27:31:ff:e0:63:31:98:3b:06:45:9d:
a9:c3:f4:9d:f8:2b:3f:61:2a:9b:ab:a6:62:70:cf:
d3:1b:47:0d:76:75:59:4d:6d:eb:53:4c:61:e0:3b:
96:92:6c:18:66:57:bf:17:49:75:04:d6:3f:0d:e8:
b7:36:55:b7:a7:87:9a:25:fa:70:7e:52:13:8c:b5:
da:53:78:2c:f8:4f:15:fc:dd:b8:da:9e:32:dd:f3:
d0:fc:dd:f6:bd:d5:5f:56:9b:8b:da:c7:55:1b:6a:
38:da:41:de:c3:8e:ab:8f:e1:d7:40:b7:4e:63:a4:
0e:35:64:e1:70:3b:6f:b6:fc:42:a9:69:b9:10:fd:
8b:6f:8b:07:f1:f0:c7:d2:ca:20:da:e0:60:20:7f:
65:21:a2:58:32:d5:2a:97:39:8c:33:bc:5d:e6:2e:
43:1f:7c:57:bf:3b:46:d9:fd:60:ed:a3:47:3a:83:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:35:7F:B4:65:9F:B5:4C:B4:2A:AD:91:E0:EF:6F:DD:7A:79:E1:75
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ee:9e:9e:ec:c5:2c:5f:c8:67:86:02:f0:b7:b6:47:fc:da:
a3:11:be:81:df:83:52:1d:4d:25:9f:e8:9c:22:39:70:66:44:
af:db:42:29:66:a9:fe:0f:0a:a3:7c:3f:5f:75:d0:41:3a:35:
03:57:ea:db:a3:7a:6c:ca:04:a0:15:54:a9:85:a3:3b:ff:0c:
22:2f:e3:0b:e8:f1:19:fe:bd:2f:c0:0e:e9:eb:4d:13:11:23:
7d:4f:c8:2f:36:3b:8b:b4:8d:7a:86:ea:28:66:13:ea:e6:51:
87:32:10:33:34:63:d9:7d:06:98:52:0e:6c:67:7d:44:5b:ed:
53:e1:55:86:e6:65:74:9f:dd:9c:4e:21:ce:98:96:e4:61:a9:
8e:01:8a:05:91:e7:28:b8:ce:aa:cf:c1:da:40:bd:34:e2:10:
02:5b:37:03:9d:66:f4:4e:5e:57:87:99:4e:f4:c4:cb:1f:9f:
54:38:cc:85:35:68:7b:bb:56:c7:83:45:fe:25:25:3c:47:8b:
a3:de:c2:14:3b:ea:dc:06:62:8f:96:aa:ad:a9:19:3a:83:ce:
76:20:fc:7a:ce:0d:95:a2:c9:98:84:6e:67:12:72:5b:4e:b0:
a0:65:a1:26:8e:29:41:96:76:ac:04:ed:81:fb:3b:b0:81:ab:
8f:ba:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:20 2025 by rpki-client