Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: ndspXcR15bUWtGhbobaN86KWw+3TIqNv6uZ/RD0L+xo=
Subject key identifier: 8E:40:3F:95:A2:69:41:0B:35:8A:94:D6:B6:D0:B9:C1:8B:4F:1E:2D
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019923A077FC558AEDD26A479F6D7F84B8C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 09CE
Signing time: Sun 07 Sep 2025 10:02:22 +0000
Manifest this update: Sun 07 Sep 2025 10:02:22 +0000
Manifest next update: Mon 08 Sep 2025 10:02:22 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: hlaXs5kRdJeEP1ukvCE1eqCAgJqhrU1e/WQk8OidhTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:77:fc:55:8a:ed:d2:6a:47:9f:6d:7f:84:b8:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Sep 7 10:02:22 2025 GMT
Not After : Sep 8 10:02:22 2025 GMT
Subject: CN=8e403f95a269410b358a94d6b6d0b9c18b4f1e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e8:95:c9:da:5b:e5:cd:b9:e7:61:dc:95:78:
97:fb:02:32:a1:0c:f9:07:9f:17:12:12:17:7f:4b:
26:3e:3b:99:8c:ef:a7:3c:d9:11:d5:ad:fc:2d:93:
8f:97:9a:c1:8c:d2:5a:9d:45:be:d6:aa:8b:c4:b2:
db:34:26:81:4f:df:9c:b3:64:25:e4:cf:5d:99:89:
a3:49:69:13:4b:5d:d1:8a:42:a5:ac:51:30:9a:43:
df:d8:f0:2c:2e:ca:50:5e:86:34:90:cc:8d:4b:7f:
63:c0:e8:03:47:c7:5e:4d:93:6b:70:e9:97:0a:ef:
07:15:e8:8e:4b:33:da:42:64:fd:6c:f8:4b:ed:29:
3d:5b:b4:5e:ce:84:d2:c7:29:10:9a:b7:40:dd:e3:
c8:6d:0b:75:35:47:10:3c:2f:fc:31:9c:6e:78:cc:
88:80:7c:00:c3:4f:2f:fd:20:2d:40:a1:3e:0f:85:
d7:47:07:d8:8e:3a:f7:4d:d4:11:53:a6:74:a6:50:
70:3a:75:16:19:ba:f0:8b:ea:63:d9:67:80:73:36:
0d:4f:34:17:0e:9d:f0:b6:d2:69:d9:08:b4:ee:af:
52:c5:4b:47:65:ef:a0:46:20:db:74:bd:d8:bd:bb:
b8:1e:6d:61:09:7c:eb:bb:ed:90:88:aa:17:5e:1c:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:40:3F:95:A2:69:41:0B:35:8A:94:D6:B6:D0:B9:C1:8B:4F:1E:2D
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:53:5c:0c:50:91:6b:a4:ab:aa:c6:dc:d9:95:5f:de:c8:32:
1b:ca:fb:fe:19:d5:61:cc:34:0e:92:03:ab:a9:2d:a3:d5:13:
3d:da:78:e0:85:c0:40:25:e2:60:fd:69:a6:8d:42:47:d5:7d:
78:23:29:12:c9:80:81:92:3e:aa:00:ad:7b:e6:6f:51:0f:6f:
60:f2:43:79:43:35:83:1a:58:ab:32:3f:72:48:55:a9:41:5f:
8b:5a:7f:e3:ca:b2:e0:b9:95:32:20:b0:20:ec:01:fa:85:f2:
36:67:0f:7a:32:e9:51:0a:95:02:02:c8:10:cd:e2:7d:ed:e5:
44:44:3d:f0:25:d1:69:04:6f:5a:c6:d0:84:38:ac:26:f6:c4:
15:8b:58:b8:c0:75:e8:bd:94:93:e5:b2:d3:da:2f:a4:5c:84:
0e:77:31:fa:55:78:0e:80:9c:52:d0:80:09:69:7a:b3:94:c7:
98:55:08:d7:86:13:5a:04:04:f7:db:59:59:20:c6:35:0f:ca:
4b:d1:d1:4a:eb:20:1e:42:f9:79:81:6c:10:91:22:f5:8e:5a:
54:44:ea:b3:a7:b8:e3:21:e3:cf:78:c4:f1:9e:41:8c:23:23:
b2:f6:64:12:31:78:fa:06:63:60:f9:1c:88:67:b0:72:1d:85:
fa:31:06:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:34:20 2025 by rpki-client