Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
File: _sQT3TZn54GV5SaKooWupRa8sZk.mft (raw, json)
Hash identifier: 5woKa2oY411Ts/Vf6YHqP+ihPwC5LIEVZt9MN3Ls8kc=
Subject key identifier: 64:CC:B3:4A:14:98:B4:9D:9F:2E:01:87:EC:CA:CD:94:A9:A1:3F:BB
Authority key identifier: FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
Certificate issuer: /CN=fec413dd3667e78195e5268aa285aea516bcb199
Certificate serial: 019922FA27E0B9BCA14BA2CAAE2AB68D5E8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
Manifest number: 139B
Signing time: Sun 07 Sep 2025 07:00:43 +0000
Manifest this update: Sun 07 Sep 2025 07:00:43 +0000
Manifest next update: Mon 08 Sep 2025 07:00:43 +0000
Files and hashes: 1: _sQT3TZn54GV5SaKooWupRa8sZk.crl (hash: LvGcwuTQS33b/N44xl9CU1zJuTtXpYh5e+5JtV5l1uc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:27:e0:b9:bc:a1:4b:a2:ca:ae:2a:b6:8d:5e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec413dd3667e78195e5268aa285aea516bcb199
Validity
Not Before: Sep 7 07:00:43 2025 GMT
Not After : Sep 8 07:00:43 2025 GMT
Subject: CN=64ccb34a1498b49d9f2e0187eccacd94a9a13fbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:df:87:0f:ed:f9:b9:e2:43:95:40:cb:fa:f0:
e9:31:95:8b:e5:30:df:ee:32:16:b6:86:5d:35:4c:
3c:2b:af:4f:11:6e:c9:25:2a:39:a6:40:2f:ca:61:
2c:78:29:66:b0:22:c0:db:09:a8:66:f0:86:8a:33:
13:b3:92:09:bb:f8:d5:54:60:dc:a2:a1:65:f0:5d:
f2:d5:38:54:1e:36:62:18:e2:e6:f9:c5:fa:9b:e0:
d3:8c:ad:8f:03:b2:8c:bb:58:81:ce:28:ec:c4:31:
75:6c:57:33:68:9d:70:1a:93:84:75:0d:7d:21:a1:
cc:16:eb:5f:b9:6f:13:bd:5d:bb:0d:44:66:93:b6:
03:46:41:17:56:80:25:64:4e:da:9d:18:24:b3:4d:
90:af:ea:b2:3c:23:e6:2b:f8:fe:7d:8a:42:74:11:
79:85:ad:30:21:a2:87:90:95:09:6b:29:4a:8d:37:
b0:15:20:ed:27:4e:2b:af:21:0f:25:10:b1:28:10:
8d:1c:d8:d5:81:3b:06:25:d9:1d:80:3a:c8:1e:5a:
de:ca:8b:77:52:bd:5a:d1:ff:c5:a5:8d:ee:eb:c3:
09:a1:d9:70:c1:51:8a:b5:70:f3:0f:78:3b:6f:55:
8b:93:db:d9:98:d5:85:b6:3e:aa:b7:b1:2d:38:bf:
b3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:CC:B3:4A:14:98:B4:9D:9F:2E:01:87:EC:CA:CD:94:A9:A1:3F:BB
X509v3 Authority Key Identifier:
keyid:FE:C4:13:DD:36:67:E7:81:95:E5:26:8A:A2:85:AE:A5:16:BC:B1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sQT3TZn54GV5SaKooWupRa8sZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/b195e7-b804-4594-965e-3fd14b936eb4/1/_sQT3TZn54GV5SaKooWupRa8sZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:53:ba:03:dc:28:52:a6:0e:12:50:61:44:e3:8b:1a:05:40:
15:c2:92:88:cd:4b:34:ec:b2:3b:47:dd:2a:3c:82:7a:fc:49:
fc:ac:ff:48:f8:ec:0f:90:cd:26:5a:08:c8:e3:a3:04:a6:e6:
74:8e:90:68:47:10:f4:53:bf:6c:53:26:9f:33:40:38:43:1a:
32:37:26:de:08:ff:4a:3b:d8:da:2d:46:e5:f3:e5:f1:b3:71:
2b:07:16:7f:93:2b:81:2d:4e:3a:2a:b1:d5:25:95:19:19:6d:
e7:cf:a2:0f:31:ad:37:f3:bf:74:d1:43:f8:d4:5c:cc:76:a3:
81:59:99:09:ef:c8:94:ef:94:33:a4:bb:f8:c6:b9:3a:e3:e7:
73:fe:f3:a0:fe:1d:b4:b1:46:53:5d:88:25:c7:d9:41:8a:65:
bd:b6:f2:67:16:0b:64:ed:20:b9:57:77:ad:75:91:9d:2d:45:
5f:c5:12:41:80:64:a0:fd:90:0b:56:f7:89:54:ea:c0:63:83:
e5:d7:c3:09:45:d3:9b:0b:6b:be:9c:50:6b:2a:a8:00:cc:0b:
62:9b:62:33:96:08:58:4d:d8:29:29:4c:e0:bd:e4:96:bf:35:
ba:12:f1:ec:c1:ae:db:56:47:13:ce:b2:31:01:5d:e8:89:25:
b8:37:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:46:45 2025 by rpki-client