Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier: L4m5/uOiAy4UedJ5aq5+/BLVHHHY3sCX60/F5RCVK3c=
Subject key identifier: E5:DB:54:B1:38:CB:FD:DD:3A:34:46:22:7F:44:5E:B3:B8:3A:B3:52
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial: 0199FC5839C934DAB1F1206FECB23BD744C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number: 04F4
Signing time: Sun 19 Oct 2025 12:01:04 +0000
Manifest this update: Sun 19 Oct 2025 12:01:04 +0000
Manifest next update: Mon 20 Oct 2025 12:01:04 +0000
Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: pHDA1P79lAGtoLyLuLVonRhhRPFZgMjq3x/hYqvIbbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:39:c9:34:da:b1:f1:20:6f:ec:b2:3b:d7:44:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Validity
Not Before: Oct 19 12:01:04 2025 GMT
Not After : Oct 20 12:01:04 2025 GMT
Subject: CN=e5db54b138cbfddd3a3446227f445eb3b83ab352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:7a:9f:ef:72:11:6d:f6:5a:d9:bf:e0:45:e5:
dc:52:e8:76:f4:f1:19:b9:bd:d1:d3:f4:d3:82:0d:
db:23:a4:65:2f:f0:e3:8c:6f:8a:73:74:dd:8d:fe:
28:85:9b:b9:7a:bc:20:49:7e:81:7c:7a:0c:95:4d:
9c:18:8a:31:51:db:6c:36:21:d7:88:6b:70:85:26:
02:8c:46:5e:1c:f4:ba:59:f1:a5:ce:a2:ff:b6:5e:
35:79:30:96:31:76:3f:28:7c:d2:66:e3:85:7f:04:
4e:60:12:af:70:90:d9:66:d6:7f:00:4f:af:60:31:
ae:26:0e:3a:34:a1:25:b9:9c:6a:f3:9c:5a:ba:a0:
b5:aa:94:56:f4:a6:c0:d3:72:ef:fe:3b:ba:14:5e:
ad:ae:b3:e4:dd:3c:31:92:30:66:0f:9e:ae:c9:5d:
7a:c6:d7:c2:f2:84:dc:4d:80:86:ec:37:42:1e:c7:
2a:a3:69:48:2a:ef:7f:da:d4:2e:9b:69:e7:88:7b:
ad:45:46:44:3a:75:37:00:c1:df:f6:2e:60:66:9a:
98:85:86:a1:b2:43:e3:5e:73:fe:fa:ec:aa:74:3e:
01:c9:d2:71:f3:2c:66:21:36:bf:2d:36:6c:07:d6:
3f:89:44:98:5f:38:19:78:9b:48:b1:c5:f9:4e:c3:
3a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DB:54:B1:38:CB:FD:DD:3A:34:46:22:7F:44:5E:B3:B8:3A:B3:52
X509v3 Authority Key Identifier:
keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:e2:1b:f2:97:5f:57:fc:e1:33:73:cc:9d:00:bc:6e:0c:a8:
3c:ef:36:ce:f2:e8:7d:02:ed:b5:e2:52:41:01:66:0a:84:60:
90:ec:dd:c7:6c:5b:7f:d6:87:e1:1e:a6:f5:50:c1:d4:cc:b5:
45:9c:1c:ec:0b:73:f1:8c:b1:fa:c8:1c:d0:11:61:60:75:37:
4f:d3:da:c4:b2:52:c8:97:97:a6:5d:4d:7e:5e:12:a5:ba:55:
8c:ac:e9:16:65:cb:a3:80:72:e1:28:97:40:5d:94:a3:e9:cc:
51:dd:11:5b:c5:69:2c:a6:1b:e7:64:61:1f:02:c1:ff:09:5b:
d6:e5:37:19:7c:a8:77:45:8b:2f:24:f8:1e:78:0d:d7:b6:22:
b7:29:cc:d6:af:e0:4c:64:27:53:a3:94:57:3a:7a:a2:2f:2a:
e2:23:2c:98:6e:06:42:3b:b0:88:ce:7c:d7:59:05:03:17:d8:
d7:61:3d:f7:c4:84:de:61:cb:e0:db:8c:5c:a1:1b:ca:81:d8:
02:d0:0b:76:7d:05:56:fb:0a:9f:0e:08:8f:bf:07:47:fd:81:
6a:6a:2b:45:ef:5d:99:4e:61:77:3f:a9:8c:63:c0:e4:04:94:
ee:6c:00:74:df:4a:27:61:f9:0e:51:0f:bf:aa:3d:36:94:7c:
ee:ba:24:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:42 2025 by rpki-client