Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: drST/tluzMs5my8QiJdnyXcKds8OViOF1EuVSQXMHK4=
Subject key identifier: EE:A6:10:EC:BE:B0:F6:49:99:0A:83:19:B1:17:87:11:9E:D0:32:FA
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 01992255CADE50361CAAC0B01C6ED8D99883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 15CE
Signing time: Sun 07 Sep 2025 04:01:11 +0000
Manifest this update: Sun 07 Sep 2025 04:01:11 +0000
Manifest next update: Mon 08 Sep 2025 04:01:11 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: EXtqSb5Urpk+zxYZZVL3+Q3qrnWyphggL6AeaQkvsXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:ca:de:50:36:1c:aa:c0:b0:1c:6e:d8:d9:98:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Sep 7 04:01:11 2025 GMT
Not After : Sep 8 04:01:11 2025 GMT
Subject: CN=eea610ecbeb0f649990a8319b11787119ed032fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:80:d7:24:f2:cf:17:fc:46:e1:b0:4c:23:5b:
50:04:69:e7:90:18:d3:11:ea:e8:f9:ce:58:00:01:
56:30:87:2b:0c:a5:aa:fc:ed:2b:f9:c0:5f:a3:ae:
ae:c9:80:09:35:5f:71:de:f8:fd:a0:31:13:13:1a:
5e:b1:ec:e8:61:32:75:6b:26:ac:d7:52:75:35:aa:
99:7c:e5:54:a1:b1:21:48:4c:0c:5d:56:5d:f1:13:
df:89:af:f1:ac:29:4a:67:5f:30:e1:8d:d6:15:9b:
8c:6b:06:00:88:ff:27:78:49:7a:97:6f:49:4a:18:
c7:6c:7f:b9:db:59:77:a8:6c:65:8d:9d:08:76:0e:
cc:a1:36:27:4f:11:a7:f2:36:30:4f:69:03:cf:89:
8f:42:ad:20:5c:3d:74:0c:ef:0c:44:b4:a7:3f:dd:
d4:03:e9:02:d0:6b:f9:7d:96:c1:af:f9:b0:e4:76:
bf:63:04:81:25:69:36:92:ba:d7:9f:f8:88:85:5a:
9a:3f:8d:a6:d7:b7:7a:9a:5d:9a:09:5e:ff:7c:bb:
61:e0:4a:b5:6a:8c:ef:89:2a:5c:34:7d:ba:af:4e:
f0:05:44:cc:06:95:5c:fe:f5:7c:db:ab:0c:c8:f4:
68:8c:da:e0:5a:a7:7f:24:20:9b:93:1d:55:70:4d:
f8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:A6:10:EC:BE:B0:F6:49:99:0A:83:19:B1:17:87:11:9E:D0:32:FA
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:b5:b6:50:a5:cb:db:29:73:2b:11:a6:5a:0e:d7:a4:cc:38:
24:2b:0f:ca:d2:e0:69:5d:8e:39:08:1b:05:77:31:db:e1:9e:
a6:51:33:d5:aa:15:3b:e0:cc:41:5a:e5:bb:e4:63:ec:9d:c9:
a9:36:79:13:d0:9d:c0:9c:e5:8d:85:d4:da:ac:fa:f6:65:79:
33:97:cd:9b:1c:56:c1:5a:d9:b0:37:6e:7a:39:60:64:8c:94:
a4:d5:c7:b4:69:11:8a:c5:e6:47:6e:f6:90:84:6c:9b:94:49:
91:96:04:ce:d4:83:6f:70:d1:65:ee:7c:c9:3a:36:9e:45:c1:
2e:e1:95:f2:5c:fa:2e:60:37:cb:4c:b3:60:22:a3:0c:cf:29:
3b:58:77:f6:c3:62:e8:a2:bb:86:46:30:07:50:4b:13:dc:9e:
5a:3f:f5:07:d1:a0:70:9a:ce:26:9a:92:59:62:8b:8c:44:a9:
5f:14:90:41:f8:6e:c0:0e:dd:22:2c:f4:26:ae:4f:ba:e7:c3:
80:ae:5b:08:b8:1c:9e:9b:f3:c2:07:28:38:cc:e1:6e:20:45:
91:9a:03:01:37:55:4e:67:14:fe:27:07:f3:b6:51:d2:be:53:
df:b6:43:9e:ad:76:0a:b0:16:df:5b:5f:40:72:19:1f:37:12:
fe:46:af:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:37 2025 by rpki-client