Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File: SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier: 33mDRelQFoYVRO9u6quIo0PplceSSGHi7uhGw7E3ePY=
Subject key identifier: 51:42:48:E5:10:B6:DC:70:83:2B:05:0D:97:35:6C:5A:57:BF:32:84
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer: /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial: 019935028DDABD817615FD1E20FFB9A8420D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number: 1214
Signing time: Wed 10 Sep 2025 19:03:03 +0000
Manifest this update: Wed 10 Sep 2025 19:03:03 +0000
Manifest next update: Thu 11 Sep 2025 19:03:03 +0000
Files and hashes: 1: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: My1NNExEVluULAJdAMjrnIq2+29lgD29HfT/HujE1Wk=)
2: rKZbB3iW2mhQrV3B7dzkdgnj7Hg.roa (hash: bzWIX1UDDDSaemHwck5e4pimDCRd9S56ZPwPBB+GA2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 19:03:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:02:8d:da:bd:81:76:15:fd:1e:20:ff:b9:a8:42:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
Validity
Not Before: Sep 10 19:03:03 2025 GMT
Not After : Sep 11 19:03:03 2025 GMT
Subject: CN=514248e510b6dc70832b050d97356c5a57bf3284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:92:6c:fa:a5:43:b7:93:ad:43:3f:66:51:b7:
eb:ed:e8:70:59:5f:c2:1f:86:4f:4c:93:35:8a:70:
2d:41:33:92:d8:d2:af:68:c7:3a:c9:9c:c0:66:d6:
4e:13:11:91:8a:cb:f7:5b:9c:86:05:bc:a0:fa:2e:
09:ef:1c:c5:5e:5d:e0:0e:ea:a6:e1:be:e1:52:c8:
6b:50:4d:38:ac:9d:1f:9a:4d:68:15:b2:4c:db:2e:
66:e4:76:f0:f4:88:1f:8b:a2:39:6d:a4:5f:6f:32:
e1:fe:50:58:c1:b7:90:fb:19:2a:99:23:6c:6c:30:
16:3a:f5:13:0e:5e:66:69:26:ec:29:6e:e2:b1:a2:
22:cd:5e:c0:5d:b8:41:e4:1b:df:a5:26:f2:ed:f5:
f5:19:05:9e:4d:1b:99:5e:bd:cf:28:be:b3:ba:fc:
11:4d:c4:0c:b8:ff:82:c9:bd:91:51:58:db:a7:d6:
a8:88:62:b3:ec:be:b4:e8:de:37:05:e3:7a:a4:73:
92:59:f8:be:25:00:b6:91:6b:e6:29:1e:57:de:81:
b4:60:68:30:f7:67:84:e5:d9:52:a0:e8:aa:6f:18:
74:9f:ee:a8:4a:7d:2d:d1:c4:02:29:30:2f:ae:cc:
b0:ef:4e:e1:22:9d:a3:a1:cc:78:6b:30:48:3b:f9:
43:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:42:48:E5:10:B6:DC:70:83:2B:05:0D:97:35:6C:5A:57:BF:32:84
X509v3 Authority Key Identifier:
keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7e:ac:14:c2:e1:1e:2d:92:29:e8:99:54:21:f4:2f:95:da:
74:41:c0:9d:00:2b:b8:63:8c:65:52:f9:c6:67:b7:1e:4c:86:
84:3d:fa:31:4b:93:7a:ba:34:8a:28:41:ed:f2:0a:c9:f9:6b:
60:1a:f2:b2:ca:14:e4:0b:eb:6a:a2:12:3e:6a:3b:4d:97:ee:
c1:be:1c:d5:b9:d3:97:aa:6f:e8:fe:fe:da:b6:cf:82:f8:33:
4c:11:a2:f6:7e:b7:9c:20:a3:ca:d2:a5:f2:95:00:bc:32:d7:
40:1a:c7:23:71:1a:59:80:9e:93:ee:10:e2:35:fb:79:21:a7:
1a:f3:51:ba:5a:a1:4f:f0:41:c9:4a:bc:2b:3b:4f:10:50:b9:
88:26:22:31:d0:81:02:82:c2:93:c2:61:95:03:85:62:49:7f:
92:ea:55:5d:82:ff:8f:df:59:00:0f:ff:a3:a7:c6:28:d2:c8:
df:a4:c9:23:8a:ff:fd:5a:d4:6f:ec:00:1b:58:00:8d:a5:e3:
84:32:09:c6:21:c6:4a:07:b5:f9:7a:33:fb:cb:25:89:d5:20:
ad:89:ee:bc:a6:47:98:52:9e:dd:4a:11:82:c9:4e:95:b7:7f:
38:50:df:72:0b:9e:0a:78:d4:ed:b4:71:ca:44:10:03:ce:42:
63:f7:2d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 03:29:28 2025 by rpki-client