Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: YAvsXFIgtGWVIGP/jLJq9cz99vkw9j0BRxSHqeoUJrg=
Subject key identifier: C6:41:FA:28:98:79:61:D8:E0:10:80:AB:29:BB:4E:6D:84:C8:EF:A3
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 019A71B84DFCE561D04F4D2B67EE528A117E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0E2E
Signing time: Tue 11 Nov 2025 07:01:35 +0000
Manifest this update: Tue 11 Nov 2025 07:01:35 +0000
Manifest next update: Wed 12 Nov 2025 07:01:35 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: MF2RsI1GF49cjUjNzvK4kw1xT1iwtkVXCWIK5YpRt3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:4d:fc:e5:61:d0:4f:4d:2b:67:ee:52:8a:11:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Nov 11 07:01:35 2025 GMT
Not After : Nov 12 07:01:35 2025 GMT
Subject: CN=c641fa28987961d8e01080ab29bb4e6d84c8efa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5b:63:cc:52:0d:c4:df:40:a3:3a:94:2c:92:
dd:7e:60:f2:b0:2e:7a:aa:2d:74:15:c0:5e:5d:a3:
1f:19:a8:d7:62:ef:9b:87:e5:70:94:58:d1:71:5d:
ab:42:57:fb:7b:46:d3:d9:a0:d1:d4:8f:db:6a:a7:
c1:16:d2:95:b3:18:dc:9c:ec:56:4a:97:35:59:e4:
78:a9:8b:38:8f:7a:97:70:ab:fe:2a:3f:ba:4e:d1:
7b:84:0b:a1:1f:7a:82:37:ea:68:cb:4c:f6:0b:4b:
0e:8a:80:13:8d:6f:9f:69:de:20:5e:e5:0a:82:71:
9c:cd:3e:ba:92:58:1b:c0:9c:c0:db:79:b4:c3:91:
3e:55:21:53:3d:d6:81:06:0b:1b:4c:5a:dc:51:66:
ed:8d:c8:b4:55:63:2a:68:d3:7d:05:a6:ac:10:91:
ee:cc:d9:8a:96:42:96:26:46:9e:17:46:d6:7f:72:
89:b6:1c:75:f0:bd:c7:cb:2f:66:43:65:a0:c8:c6:
fb:39:02:15:6c:44:fa:cd:61:c8:7c:91:39:55:ad:
59:2a:0a:f6:17:a5:c3:80:ce:48:23:ea:de:18:b8:
e9:90:02:cd:8d:f9:e8:21:7d:25:e7:8e:fb:9e:5b:
92:1d:be:89:fb:5a:9b:a8:f8:fd:8b:b4:a3:fc:a5:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:FA:28:98:79:61:D8:E0:10:80:AB:29:BB:4E:6D:84:C8:EF:A3
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:49:9f:32:c9:a7:e6:9c:9b:e4:af:fa:c0:11:48:47:c1:af:
df:f5:2c:b9:be:ea:ff:98:3b:70:bc:bd:3d:c9:c1:78:e1:20:
c9:97:02:58:66:dc:78:1e:f8:08:ed:4a:85:6e:09:3b:5b:5e:
37:0a:95:c4:5b:69:7c:d5:03:d5:f0:8d:a6:ff:18:a6:44:22:
46:23:75:d2:ce:e1:57:f9:3e:1b:d3:0b:bc:85:a4:1b:10:0f:
2a:99:92:64:1b:d5:42:70:1a:3b:a9:dd:24:cf:c6:60:67:32:
94:2d:dc:c5:c3:0a:dc:05:64:9b:c2:5c:2f:40:fe:29:bc:47:
0a:26:60:59:dc:17:41:71:c3:3d:d0:3e:d5:04:0d:3a:9e:73:
c0:38:39:3d:46:e7:58:24:04:92:1b:41:d1:55:02:8f:57:57:
b0:9e:23:c4:79:30:70:d3:9f:93:b3:6a:5e:a2:54:9f:f3:80:
db:07:4b:b0:fb:f9:b4:2b:bf:cf:e2:5b:87:0a:bb:27:36:87:
d8:8e:c6:62:45:d1:af:0e:34:78:04:e1:03:cc:f6:b6:9c:7c:
52:77:32:a7:41:25:ca:ee:59:e2:91:62:b1:eb:b1:74:1e:7b:
60:27:b2:27:87:d9:3d:ff:ae:5e:b5:18:5d:b2:b4:26:3d:34:
e0:e1:96:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:02 2025 by rpki-client