Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
File: sl8gfyfZGpE36LZdKQEpmHGqOh0.mft (raw, json)
Hash identifier: +XpxPDQjk0lJqsh1wBGDT3ZWQKrt92WRpMj+SQ7DZSk=
Subject key identifier: AF:AC:D5:44:4B:03:DA:97:48:D1:C3:90:F1:67:49:A2:AA:3F:E8:7E
Authority key identifier: B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
Certificate issuer: /CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Certificate serial: 019A71B8415A8730E9D98DBBF55C5593C483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
Manifest number: 0256
Signing time: Tue 11 Nov 2025 07:01:31 +0000
Manifest this update: Tue 11 Nov 2025 07:01:31 +0000
Manifest next update: Wed 12 Nov 2025 07:01:31 +0000
Files and hashes: 1: sl8gfyfZGpE36LZdKQEpmHGqOh0.crl (hash: EdL72MrVJxA05Ot/uOGPt6j1HtRa9nUwPjpqiHJD3WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:41:5a:87:30:e9:d9:8d:bb:f5:5c:55:93:c4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b25f207f27d91a9137e8b65d2901299871aa3a1d
Validity
Not Before: Nov 11 07:01:31 2025 GMT
Not After : Nov 12 07:01:31 2025 GMT
Subject: CN=afacd5444b03da9748d1c390f16749a2aa3fe87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b6:2c:88:e8:36:60:93:3a:a9:ea:76:20:7d:
ee:62:fb:93:f9:8b:82:ff:9d:97:79:47:9f:25:d8:
dc:ff:59:5f:38:06:e9:0f:3b:e0:b2:2e:9e:d2:e1:
8c:87:8b:3b:df:b1:ab:f6:25:60:3d:7a:a1:f6:6e:
c8:0e:8b:ae:96:7b:39:3b:8f:cb:cc:6c:51:9a:5c:
9e:57:a2:5c:65:76:6a:01:2d:56:85:79:57:0d:80:
48:e7:f3:0e:a8:cd:bc:7e:e0:09:a0:0f:cd:19:ef:
5a:92:96:d1:fc:46:e7:6b:12:6e:50:37:34:4a:d9:
4b:c8:b1:89:47:ab:09:c2:bd:9d:81:54:c1:5a:9c:
0e:e5:29:5b:7f:3e:ac:a4:7a:24:ae:0c:17:d5:22:
be:1c:e2:85:88:a9:ba:5b:e0:37:f1:16:5a:96:5a:
21:b8:cb:a4:3f:b1:aa:80:55:79:9b:38:56:fd:fe:
0f:32:36:c8:16:e7:9a:82:3a:46:5d:a2:8a:62:f2:
ff:2a:16:d8:15:b3:b6:dd:29:10:8f:fc:21:58:12:
58:23:47:fe:2f:18:9e:cd:14:dd:b9:c5:f5:34:dc:
1c:7b:cd:37:37:69:b1:f0:29:cd:eb:85:b8:36:ca:
81:96:9a:2b:e4:5c:ae:4e:be:ba:41:7c:f7:f7:d1:
10:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AC:D5:44:4B:03:DA:97:48:D1:C3:90:F1:67:49:A2:AA:3F:E8:7E
X509v3 Authority Key Identifier:
keyid:B2:5F:20:7F:27:D9:1A:91:37:E8:B6:5D:29:01:29:98:71:AA:3A:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sl8gfyfZGpE36LZdKQEpmHGqOh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ed85df-1c12-4e20-b7f8-1c9744c195f7/1/sl8gfyfZGpE36LZdKQEpmHGqOh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:5a:5a:e8:6b:35:a6:12:d9:e9:3b:3a:36:a5:1d:4f:23:33:
40:35:78:4e:f5:1a:a9:d8:95:5a:8b:bf:f0:bd:84:1b:51:1a:
5d:82:8a:81:a8:89:9f:dc:69:b1:58:e6:15:74:9a:80:eb:79:
44:e2:0b:f4:27:bc:2e:03:75:6a:cd:f0:b9:e8:b7:a8:99:7a:
80:44:12:c9:dd:98:09:52:c2:eb:01:d6:52:27:1a:88:bc:0a:
9f:53:ee:0e:90:63:fb:16:c8:56:d6:5f:2f:82:d1:1f:db:35:
f5:ee:57:5f:e5:90:34:ee:dd:87:71:c7:d7:1f:0d:12:bb:9c:
7b:f7:c7:cd:b5:da:9a:8c:95:6c:f0:66:dc:8b:f9:3f:46:a3:
0f:ac:50:34:3d:2e:e2:c3:02:32:d1:d4:d2:d3:69:32:ad:ea:
64:eb:81:f7:45:4a:29:c5:0d:26:40:c1:1b:15:d4:48:7b:f9:
29:55:76:46:f2:b9:fb:57:87:73:df:d8:d5:50:0d:d1:94:fc:
82:72:52:94:ed:e4:59:c3:5b:91:42:f6:db:0c:3e:ab:e1:43:
3a:6e:78:57:47:f4:00:0b:28:78:bc:48:24:1c:bf:6e:07:8d:
aa:2b:78:09:44:de:a7:43:d2:eb:59:e8:3e:55:73:d4:d6:d8:
f5:75:73:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:42:02 2025 by rpki-client