Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier: 9iJ2o/IOX1t2C/L5T2Uhl9skLRznsnXar/V+KI2nOW4=
Subject key identifier: FC:E0:93:F3:91:49:81:22:73:B1:4E:68:CB:41:DE:9A:11:AA:3A:2F
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial: 019A72257B4CF28B7F0FAC86A3F51FD7A547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number: 0531
Signing time: Tue 11 Nov 2025 09:00:50 +0000
Manifest this update: Tue 11 Nov 2025 09:00:50 +0000
Manifest next update: Wed 12 Nov 2025 09:00:50 +0000
Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: QuHkZt8uD5z2knSAwLP2soFtkLn4dZAV7/u87874Tv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:7b:4c:f2:8b:7f:0f:ac:86:a3:f5:1f:d7:a5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Validity
Not Before: Nov 11 09:00:50 2025 GMT
Not After : Nov 12 09:00:50 2025 GMT
Subject: CN=fce093f39149812273b14e68cb41de9a11aa3a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c4:cb:ff:9e:b3:be:9d:aa:b9:6d:df:eb:d3:
d2:25:69:d9:9b:95:36:2e:94:89:e9:c8:35:db:63:
64:09:56:9e:bc:01:b5:42:79:77:fa:2d:a3:0f:fd:
6c:64:78:4e:7d:7f:9e:02:8e:63:88:76:a7:27:66:
10:a8:4d:86:89:06:a7:e2:9f:d0:0a:b8:80:37:35:
bb:97:36:25:a3:98:53:e6:bd:2b:85:c5:68:af:34:
72:60:b1:5c:99:2a:35:03:43:59:6a:f0:ad:86:c6:
dd:c4:e5:dd:4f:56:eb:ec:9c:85:2e:26:e3:3c:e9:
86:ef:6f:da:eb:a6:5f:32:de:53:00:e2:a3:7c:fa:
8e:38:5c:dc:6f:ae:13:96:84:8a:c5:85:f9:cf:dd:
a0:b4:56:5b:26:e5:db:cb:1a:67:36:ea:5c:73:17:
0c:82:07:2b:4d:d9:fb:27:ae:b0:a6:ad:a4:d8:53:
d0:33:8a:21:c0:fb:9e:6b:dc:50:46:72:7b:d1:b4:
21:36:cb:95:17:1c:70:89:54:f3:55:35:00:c4:51:
f5:c6:82:ed:10:5e:2a:3c:54:c1:40:67:57:ba:df:
33:2c:f8:ee:b5:9e:e7:5b:b5:d5:73:12:41:03:bb:
bd:60:a9:7d:3f:7c:e8:96:71:2e:5d:33:9c:83:49:
80:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E0:93:F3:91:49:81:22:73:B1:4E:68:CB:41:DE:9A:11:AA:3A:2F
X509v3 Authority Key Identifier:
keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:30:88:c6:a5:45:e5:23:bd:93:00:0c:ea:a6:0f:8b:00:85:
da:90:97:3b:17:43:e4:70:c8:67:aa:e4:ab:f1:f3:9c:93:c3:
67:45:e5:a4:e8:ea:0b:43:e1:a3:d3:9d:7e:b1:67:af:4f:58:
a4:7c:a2:75:be:67:12:ce:7f:21:cd:0e:b0:f8:a3:cc:3e:f1:
f6:4d:92:58:22:38:c3:1a:4e:bc:28:7f:22:8a:54:9f:ac:47:
10:23:3b:3a:c5:52:a5:19:80:f7:2e:45:b2:ef:40:30:18:82:
8e:20:0a:16:72:41:ed:e7:4b:19:d2:ea:c9:9b:31:53:bb:86:
78:74:e9:e8:42:1e:0c:ea:2b:de:6d:b7:e4:37:d3:c8:31:a5:
5f:fd:f2:bc:4e:14:26:a8:8c:05:d0:65:14:d5:37:f6:49:b8:
64:5f:30:36:aa:ae:bf:e2:0d:c2:1c:d5:4b:e1:9f:33:0a:24:
1b:8e:80:01:11:e1:1d:d2:d3:bd:f0:56:02:05:8f:ca:ff:2e:
b6:70:92:d5:3c:a3:a1:c7:1c:5f:00:a6:ad:2b:3f:d3:3e:a7:
1c:ad:42:78:20:bb:9e:24:b3:4b:fb:6f:c0:6a:04:9f:05:d6:
32:d5:b6:9b:31:a6:82:ce:af:4a:2b:53:0a:47:33:1d:86:b1:
eb:0c:58:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:35 2025 by rpki-client