Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: +Rje0E0O7AVJVpD6CnEUks/c4kArvW1N2yFGqETbXHQ=
Subject key identifier: 78:89:57:7A:B5:7A:6D:47:0E:2E:66:36:63:90:FA:AE:DF:11:68:5D
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 019A2A432585E22203B113BD7BE60E9C6915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 16F7
Signing time: Tue 28 Oct 2025 10:00:34 +0000
Manifest this update: Tue 28 Oct 2025 10:00:34 +0000
Manifest next update: Wed 29 Oct 2025 10:00:34 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: GQQJiy+xDSNL4bxFBcN0qqkOKGtJOMkGk60MKtWy8og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:43:25:85:e2:22:03:b1:13:bd:7b:e6:0e:9c:69:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Oct 28 10:00:34 2025 GMT
Not After : Oct 29 10:00:34 2025 GMT
Subject: CN=7889577ab57a6d470e2e66366390faaedf11685d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:df:9e:6d:f8:27:4b:59:41:ab:0a:73:53:2a:
69:19:89:6a:1b:14:e8:ae:4a:1d:93:48:73:a4:15:
fd:e7:a6:6d:59:44:1c:5b:d9:e1:7d:f5:2f:4a:45:
c8:b9:36:7f:9a:40:17:37:32:ab:6c:a3:64:97:47:
ca:7b:d4:d0:74:c3:87:81:d2:f0:d3:b7:a1:29:17:
4d:0c:75:91:ed:df:5e:5b:4b:43:4d:cb:57:79:60:
84:41:3a:0c:73:fe:ea:80:72:1b:70:44:1b:91:17:
77:4e:af:c1:d2:f5:6e:eb:70:b6:a3:3b:36:1d:ad:
88:5e:8b:d5:9b:27:97:98:81:df:af:e3:be:69:30:
3b:c7:18:20:e4:e2:4f:64:b7:85:7d:30:d9:85:44:
75:cc:eb:55:90:88:61:2f:93:58:d0:e5:cd:05:25:
22:57:37:dd:b4:c6:65:22:75:d9:c9:4d:98:88:e2:
a6:1d:8f:8a:fd:97:65:0c:02:9c:6f:af:d9:ed:de:
27:95:0e:33:93:0a:db:4e:02:88:57:f1:ef:e3:15:
38:98:64:63:83:fa:48:8e:d7:30:f5:9b:93:3d:13:
d7:84:64:b8:06:6d:b5:1f:06:2f:ce:99:ec:04:5f:
9d:b6:24:9e:87:26:24:87:e9:88:40:20:6a:d2:29:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:89:57:7A:B5:7A:6D:47:0E:2E:66:36:63:90:FA:AE:DF:11:68:5D
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:da:25:d3:20:71:e8:48:fb:f0:ba:4b:8b:e5:f5:f9:55:d2:
77:5e:16:de:11:40:20:e3:57:dd:b7:2c:db:cb:23:90:24:2e:
ec:45:46:87:71:54:e9:d7:a0:76:70:82:0a:5d:8f:a1:7b:fe:
f5:74:e7:79:15:15:79:b8:22:b5:87:5e:ae:e3:21:bb:98:87:
7a:b8:11:f0:50:a4:11:72:f9:88:45:32:5e:11:73:22:fb:ff:
52:cb:8a:e3:60:1b:2a:23:0f:61:3d:24:96:ee:23:1a:ce:28:
5e:e5:25:cf:f5:ba:68:67:2a:d7:6a:c0:6b:65:f9:b8:d2:7e:
30:87:dd:16:a3:10:d5:8f:66:49:8d:1d:da:26:2c:50:60:fc:
a8:5c:75:c6:bb:09:43:d9:4d:28:c5:93:67:a0:25:85:8b:77:
d5:14:b6:9b:23:fc:33:f3:60:88:f9:30:c2:a1:f4:e0:44:b4:
41:6f:f6:ad:a9:a5:81:24:f3:d6:3b:d1:7e:5d:f0:fd:17:50:
2f:a4:29:ea:56:80:7b:04:97:ac:66:60:61:63:11:7d:11:fd:
83:d0:98:43:af:84:00:3c:1f:20:c3:bc:3f:5d:78:b2:d8:25:
5d:4d:af:4c:f3:ac:79:44:46:79:b2:34:f4:46:9b:27:5c:15:
36:bb:d7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:17:52 2025 by rpki-client