Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
File: s48zUI2SUxNJ3z0L6bVF_I4fXms.mft (raw, json)
Hash identifier: vaxKsfbYOuuU0XAg2lZdoejUKeYWSCOclI9nHtY/87g=
Subject key identifier: 9E:31:CA:A3:FB:87:25:8A:7C:56:F0:8D:9C:F6:D7:CB:7C:D5:AB:F9
Authority key identifier: B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
Certificate issuer: /CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Certificate serial: 019A214024E04C137C9DCF911DFF56F12AAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
Manifest number: 0B42
Signing time: Sun 26 Oct 2025 16:00:43 +0000
Manifest this update: Sun 26 Oct 2025 16:00:43 +0000
Manifest next update: Mon 27 Oct 2025 16:00:43 +0000
Files and hashes: 1: s48zUI2SUxNJ3z0L6bVF_I4fXms.crl (hash: UCt0O5CDg9nmc4TmHzjrTDDmKmgurETr2hinzvjFkk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:40:24:e0:4c:13:7c:9d:cf:91:1d:ff:56:f1:2a:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38f33508d92531349df3d0be9b545fc8e1f5e6b
Validity
Not Before: Oct 26 16:00:43 2025 GMT
Not After : Oct 27 16:00:43 2025 GMT
Subject: CN=9e31caa3fb87258a7c56f08d9cf6d7cb7cd5abf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:92:0c:60:98:30:ad:da:f5:3e:f9:a2:0a:7d:
3e:7a:65:ab:72:23:19:72:e5:04:2a:c0:79:d4:6a:
13:6f:19:50:ed:e0:a6:ba:9f:2e:41:00:2c:d7:35:
03:27:25:2d:df:ac:4f:d0:01:f8:ed:c5:3b:2f:db:
75:e1:6f:ec:98:8e:51:41:ca:c7:e3:a8:60:ed:a2:
dd:2b:da:20:ff:91:d4:7b:64:2b:63:f8:f3:e3:6a:
4c:ff:84:36:92:08:20:2e:23:35:a4:70:af:29:86:
19:54:08:c2:1c:f1:16:a7:aa:33:a2:83:5e:73:cf:
ce:e8:6c:5e:67:00:d2:aa:bc:c7:bd:17:c8:10:0d:
30:57:67:67:42:3b:f1:17:cb:52:00:e0:ee:55:e7:
f4:d5:f2:bb:1c:c9:09:a2:53:80:32:f8:bc:04:31:
18:f4:09:55:b5:e4:55:46:b2:b6:c1:d4:0b:a2:09:
56:15:fb:09:2b:d0:bc:ce:7f:e2:b9:55:8f:ae:35:
fe:65:61:19:80:f1:30:bb:4e:a7:5a:3a:25:9d:2c:
d4:02:18:48:2e:95:60:f6:2d:9d:20:c0:7a:1e:6e:
2b:01:4c:bf:6f:54:f1:31:9b:5d:fd:f8:2a:31:f1:
a4:d5:8e:6b:93:fc:85:5d:3e:ff:65:38:91:cd:2d:
52:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:31:CA:A3:FB:87:25:8A:7C:56:F0:8D:9C:F6:D7:CB:7C:D5:AB:F9
X509v3 Authority Key Identifier:
keyid:B3:8F:33:50:8D:92:53:13:49:DF:3D:0B:E9:B5:45:FC:8E:1F:5E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s48zUI2SUxNJ3z0L6bVF_I4fXms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d262b0-426a-40d1-9fc6-9ddbb97de61b/1/s48zUI2SUxNJ3z0L6bVF_I4fXms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:99:16:f4:65:75:cd:f4:6d:53:80:c1:43:b4:04:b6:50:77:
fb:af:f0:98:a9:03:f3:45:56:c6:a3:88:6c:08:f7:5b:ef:1b:
b0:4c:eb:65:76:c1:80:13:16:50:7a:ee:ae:c1:ce:a6:af:1d:
38:a7:f3:ce:4c:52:35:15:ed:62:c4:7d:69:ca:91:09:33:b3:
12:3b:d9:85:6e:93:a9:0c:22:71:b9:bf:fb:3b:ca:bc:96:68:
d8:89:9a:28:10:67:9c:1d:ba:91:30:e8:fc:3a:23:05:92:d2:
bd:04:46:82:ad:8f:16:e2:d4:24:62:5c:77:6b:47:85:62:87:
71:71:ce:56:50:dd:9e:d2:b1:bd:ea:f1:5b:5a:be:94:71:a9:
74:33:a1:65:fc:eb:fd:29:7b:17:fb:2c:df:53:19:63:8d:9c:
e1:68:a2:24:ee:39:52:22:9b:ed:0b:4d:36:ea:78:22:9c:9c:
71:a5:49:3d:70:3f:66:73:2c:73:38:d7:fb:28:93:76:1a:c4:
ac:3d:9f:9b:1f:43:81:47:cb:ea:7d:7a:ea:b3:35:59:a1:df:
bd:3f:09:3a:ad:ff:94:36:9e:b3:f7:6b:f9:56:4d:b3:82:a4:
ef:82:1e:78:26:5e:56:28:72:77:50:83:09:80:5b:76:d2:95:
56:50:6b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:51:49 2025 by rpki-client