
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
File: s5hg55nVMGYfFSE1RiKOmSmlPJw.mft (raw, json)
Hash identifier: i4bffgxt9tZZ7B00efCZP3tc/PEFPZpg4QMnFls4dv8=
Subject key identifier: 4E:FD:F4:D7:17:AC:59:53:0E:E9:82:91:6A:70:02:D2:FD:C1:63:25
Authority key identifier: B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
Certificate issuer: /CN=b39860e799d530661f15213546228e9929a53c9c
Certificate serial: 01992330E777D93893C2ABCB93B46A22E260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
Manifest number: 0478
Signing time: Sun 07 Sep 2025 08:00:31 +0000
Manifest this update: Sun 07 Sep 2025 08:00:31 +0000
Manifest next update: Mon 08 Sep 2025 08:00:31 +0000
Files and hashes: 1: s5hg55nVMGYfFSE1RiKOmSmlPJw.crl (hash: D475C9W3ZkMgmFt4T3btMv3PJT69fgPzaEr7V7mtOH4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:e7:77:d9:38:93:c2:ab:cb:93:b4:6a:22:e2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b39860e799d530661f15213546228e9929a53c9c
Validity
Not Before: Sep 7 08:00:31 2025 GMT
Not After : Sep 8 08:00:31 2025 GMT
Subject: CN=4efdf4d717ac59530ee982916a7002d2fdc16325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b6:b1:00:e8:02:c4:8d:da:b8:71:40:bb:0b:
e5:cd:78:74:be:b7:bc:f6:70:46:06:bd:f2:6d:e1:
2a:47:df:92:c3:7a:50:de:76:bc:0b:09:b0:47:3a:
6b:d2:bf:73:59:b8:83:80:97:d4:c6:4b:3c:7e:56:
25:14:7e:95:ff:a8:57:e2:d7:18:9f:06:68:e0:e8:
0e:b7:64:be:59:32:4c:0a:4e:8a:32:92:b8:ff:c1:
b5:77:f6:35:3d:ae:b4:61:81:5e:b6:57:20:de:3d:
48:b0:1f:b3:cc:09:8d:81:3e:5a:a7:a0:4a:ec:bd:
c3:d0:17:e0:29:ee:f6:11:95:d4:91:ed:98:49:8b:
2f:2b:dd:bd:92:78:ce:4d:3f:50:30:12:dc:56:9b:
8e:82:e6:69:ec:c8:f1:ae:23:b6:30:42:3e:a5:ea:
9c:97:e2:03:bd:13:9a:f0:61:44:75:62:0d:be:5b:
b0:2b:b3:0d:9f:6d:10:0d:a8:ef:60:b2:66:07:fa:
8f:2d:2f:1b:4e:26:64:a9:f4:cb:76:06:86:f8:93:
f6:43:11:3b:5e:cd:da:0b:cb:21:27:e2:b7:20:fd:
b7:18:02:25:aa:09:38:e5:13:1a:0e:72:54:76:48:
35:ea:36:b4:63:de:91:4d:f7:ad:9a:3a:9d:9d:d2:
1e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FD:F4:D7:17:AC:59:53:0E:E9:82:91:6A:70:02:D2:FD:C1:63:25
X509v3 Authority Key Identifier:
keyid:B3:98:60:E7:99:D5:30:66:1F:15:21:35:46:22:8E:99:29:A5:3C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5hg55nVMGYfFSE1RiKOmSmlPJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/4e206e-0c95-4c8e-847d-c13f30fdcadd/1/s5hg55nVMGYfFSE1RiKOmSmlPJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:05:f2:d7:fa:d3:4a:4f:86:57:f4:54:7f:f6:6b:ad:b5:e4:
10:62:97:eb:8d:0b:6e:e8:4e:ae:d2:1f:1c:23:b0:e5:76:0b:
e4:97:55:b4:3e:e2:42:34:08:54:33:4d:55:af:5a:75:cd:c0:
46:97:99:81:c0:8c:04:df:45:46:32:5b:8a:58:77:ff:e1:e6:
7d:7d:6f:be:f4:f5:a4:5d:0c:f5:9e:69:45:3f:de:df:cc:3e:
f8:8b:e6:a6:9a:29:99:e2:b5:53:7d:61:30:d8:42:70:7f:eb:
e9:97:8a:3c:67:25:79:6e:bb:9e:be:fe:e7:8a:70:86:5e:5c:
57:fe:4d:b2:b9:cc:7e:67:04:c1:68:00:d0:b7:29:0e:ea:b0:
5f:31:ff:3e:3a:67:79:6e:f3:4c:a6:0b:e6:da:3a:f9:86:a8:
16:69:e7:49:81:8a:91:63:76:cc:52:07:a2:8d:0f:ce:7e:93:
a3:22:95:39:6c:43:6a:ba:43:9f:63:9a:d2:25:74:d0:eb:70:
00:89:23:e9:82:72:ce:af:40:38:60:90:64:89:23:42:ea:89:
97:2f:11:75:79:77:ad:1a:dc:20:85:eb:60:3f:f3:89:17:bf:
c3:0e:a4:ea:cf:bd:76:fa:6e:57:99:59:60:00:a7:cc:6d:e7:
24:00:c5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:41 2025 by rpki-client