Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: hMQcQmOyG/+P9tzj3pPUqppVldtzq/HjlON1xZ3XSx4=
Subject key identifier: 05:16:5A:6B:D6:1A:C5:1D:13:80:AD:CE:D1:78:35:1B:69:39:0B:06
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 019A725CB03D2C4A06FBF8A29F4E6A1E533D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 167C
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: nsNdqSWtsPwgQl8CIu1/a9OIhZ7SyJ3lHiN8b+zCFxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b0:3d:2c:4a:06:fb:f8:a2:9f:4e:6a:1e:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=05165a6bd61ac51d1380adced178351b69390b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:81:d2:8e:a7:91:48:4d:95:c2:04:84:d3:14:
dd:78:55:59:70:50:79:0d:5c:e9:b7:33:65:9c:e0:
26:53:39:be:fb:b7:6f:8c:1c:97:75:65:1f:e7:34:
6b:de:4f:d2:99:65:33:99:9d:bc:16:09:0b:fb:8f:
ef:0a:f4:e6:c7:37:01:b3:dd:e0:27:38:d3:0a:5e:
67:2e:19:af:c0:26:de:37:fd:95:d1:2b:de:93:4e:
11:5a:d3:50:ae:7b:b1:90:52:fa:24:8b:3b:44:9e:
e7:9d:f8:0f:87:ab:c4:1e:3f:7a:cd:1b:04:00:d3:
7b:ce:d2:c5:63:e3:22:88:67:fe:32:01:c9:20:5c:
8e:9f:fd:70:a5:e2:dd:80:ae:16:dd:80:da:75:5b:
99:98:6a:8b:9a:4e:ec:f8:28:28:1f:38:0d:65:66:
3b:f2:59:4f:18:42:77:66:07:46:74:85:45:85:8c:
d3:5e:85:ce:2f:f6:3a:25:6b:77:ad:83:5c:47:f1:
b5:5c:64:8f:f8:03:74:26:27:39:5e:21:df:ee:11:
29:5c:69:33:df:8c:13:b6:f7:02:89:e3:df:8a:50:
13:44:90:1b:f7:82:95:be:d9:36:35:fb:76:6e:f5:
55:aa:91:16:6a:e9:b4:cf:ad:3c:8b:ee:d6:02:ca:
7c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:16:5A:6B:D6:1A:C5:1D:13:80:AD:CE:D1:78:35:1B:69:39:0B:06
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ce:11:ae:8f:cc:d0:7b:be:4f:a7:a6:dd:cd:2a:2b:f5:77:
73:89:65:21:06:70:15:bf:fc:6f:69:fa:5f:50:2c:e2:fa:51:
cf:b9:33:b0:3a:ad:00:31:44:2e:39:1a:a9:03:e7:00:47:dc:
b8:20:d9:79:d0:79:1a:59:78:58:8f:12:5a:94:97:e5:5d:6a:
30:91:98:20:a6:6b:73:cc:ef:3a:2c:0f:60:59:64:ba:27:5c:
9f:12:4a:c4:bc:58:67:3d:93:a9:f3:13:a4:0d:0d:64:86:a2:
1b:5b:c3:19:40:92:23:d4:8e:cf:92:46:58:ce:54:ea:83:d6:
41:47:12:db:db:18:e5:ab:d8:89:db:fa:d4:2a:4f:ad:e9:fd:
ee:ee:98:7a:60:26:18:a6:c7:7e:d6:ef:e1:d7:c9:0e:b1:19:
92:b4:52:9e:18:d9:fe:eb:6c:99:64:bf:04:89:ef:2a:62:e3:
71:ec:73:32:d2:8c:80:e0:8d:06:06:58:13:80:dd:23:9f:9d:
d3:fd:f7:3b:ea:94:35:80:7b:4c:f5:67:9b:cb:26:58:b7:2a:
4a:8e:7e:e8:79:c2:11:39:4e:2c:2b:24:92:74:17:26:fe:f9:
03:fd:1d:29:61:b5:1a:0b:a2:fb:44:07:01:bb:33:a2:ef:83:
4c:8f:82:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:16:43 2025 by rpki-client