Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
File: g4fa4eZQhWzIVx5GLr2evrZccDg.mft (raw, json)
Hash identifier: OgqL3WmgT8oiouvdihICPS91V7u0MT+WEvZpIbWdse4=
Subject key identifier: 91:D3:0B:8C:E0:21:F9:B4:29:7B:C9:49:89:27:A0:8C:94:C1:F7:71
Authority key identifier: 83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
Certificate issuer: /CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Certificate serial: 019A228A74EA78DEBCE930D285A641A4567C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
Manifest number: 16F3
Signing time: Sun 26 Oct 2025 22:01:30 +0000
Manifest this update: Sun 26 Oct 2025 22:01:30 +0000
Manifest next update: Mon 27 Oct 2025 22:01:30 +0000
Files and hashes: 1: g4fa4eZQhWzIVx5GLr2evrZccDg.crl (hash: mbzJr9Ru0XAQWajupGUMos61z2GO0dplM9+/DoPzbLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 19:48:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:8a:74:ea:78:de:bc:e9:30:d2:85:a6:41:a4:56:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8387dae1e650856cc8571e462ebd9ebeb65c7038
Validity
Not Before: Oct 26 22:01:30 2025 GMT
Not After : Oct 27 22:01:30 2025 GMT
Subject: CN=91d30b8ce021f9b4297bc9498927a08c94c1f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:0f:aa:84:72:82:a2:24:90:ad:76:0f:e4:40:
d2:28:67:04:a3:68:ad:fa:c5:e6:63:6a:ac:b8:ec:
3a:fe:61:56:ca:c3:24:c4:74:d4:95:01:05:95:db:
56:35:e6:09:9d:d0:9c:23:6c:44:55:ba:9b:45:90:
99:66:5c:88:d2:b4:08:d1:e7:a5:f5:72:0e:a6:41:
4f:c0:5a:08:66:f1:01:0c:b9:a6:74:67:b7:0c:ee:
0d:3c:48:e0:d9:a5:2e:79:2c:2d:e8:8b:b7:a2:6d:
65:cb:db:ba:79:5a:f2:b5:f6:55:61:b3:ac:01:c4:
70:4f:75:30:9b:db:50:49:ae:67:02:de:84:1e:f5:
7f:9a:64:29:2d:38:b6:0d:f2:bb:03:23:60:05:c4:
7f:49:e2:70:30:d2:03:c3:b7:2d:74:ab:8b:c6:17:
61:f0:b8:ec:8e:28:3c:75:79:09:c0:04:6e:aa:cc:
88:bc:d5:3a:96:1f:d8:36:db:ae:2c:ab:f2:1e:88:
12:5f:45:1a:cb:72:ae:f2:58:8c:96:46:07:e5:da:
9c:65:d3:59:65:02:e0:5b:c0:2f:e9:d8:9c:ea:1d:
4c:13:04:e9:da:e6:21:21:18:f3:65:3a:85:66:2d:
0a:da:6b:e3:ee:11:c3:40:b8:c3:39:fb:a0:d7:f2:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:D3:0B:8C:E0:21:F9:B4:29:7B:C9:49:89:27:A0:8C:94:C1:F7:71
X509v3 Authority Key Identifier:
keyid:83:87:DA:E1:E6:50:85:6C:C8:57:1E:46:2E:BD:9E:BE:B6:5C:70:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g4fa4eZQhWzIVx5GLr2evrZccDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ff4bbb-785d-46b6-b29f-2b85f70a3666/1/g4fa4eZQhWzIVx5GLr2evrZccDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a3:c5:7b:83:33:2d:2d:33:50:10:af:cf:2a:b4:c2:d4:89:
5e:31:cb:ea:94:d8:2b:07:a5:0b:89:60:b1:a1:fe:fe:4b:1a:
45:d3:de:37:30:6a:c7:ab:d0:71:72:8b:7c:09:0d:e1:9a:6b:
f7:fc:13:c7:bf:3f:85:05:2e:72:62:c9:59:95:3d:20:bd:e5:
14:db:bf:55:aa:86:35:a0:9c:5c:b8:32:2d:13:54:a5:b7:73:
9c:a8:49:e2:27:a6:f9:78:84:4c:79:8e:7c:83:ab:ec:82:d6:
2e:b5:0d:f7:41:5e:45:7b:cb:29:6d:b6:c1:5f:1e:9f:b3:f9:
1b:92:32:43:11:91:54:33:77:26:7c:e3:92:56:af:a0:71:63:
32:81:14:ce:40:3d:72:05:89:c8:73:72:a8:fe:b4:42:65:a0:
e5:55:21:62:36:c9:3b:bf:45:db:f4:af:66:b4:c6:0e:f2:27:
82:ad:09:94:88:0a:f8:a6:f7:f3:8b:31:60:ea:9a:1d:41:d4:
6e:fa:16:33:e7:48:73:81:de:91:cb:62:94:03:d4:b6:0a:fc:
72:39:2d:1a:a8:95:74:61:5d:32:d6:59:f3:5b:8a:e2:89:f4:
ea:d0:34:58:fc:e3:92:1e:ce:d7:ee:54:50:84:2e:04:6d:b3:
86:de:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 04:37:44 2025 by rpki-client