Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
File: siLLxLlfE3uN2qDj8k8FuTPMepo.mft (raw, json)
Hash identifier: RjPuCMyE4I2iRSnd1IfHf4lF4iPZ5t4lxBVRPEly7mA=
Subject key identifier: 8A:00:56:8F:8F:91:F9:E6:93:87:F7:03:2F:02:96:AB:F2:EC:1C:44
Authority key identifier: B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A
Certificate issuer: /CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
Certificate serial: 019A4EF42C79B65F9BF8799AB483F2AF795F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 13:00:16 +0000
Manifest this update: Tue 04 Nov 2025 13:00:16 +0000
Manifest next update: Wed 05 Nov 2025 13:00:16 +0000
Files and hashes: 1: siLLxLlfE3uN2qDj8k8FuTPMepo.crl (hash: pNNtLhpof7fczy41KuSK3HEE/04oMQJxouVDej2+Zgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:2c:79:b6:5f:9b:f8:79:9a:b4:83:f2:af:79:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b222cbc4b95f137b8ddaa0e3f24f05b933cc7a9a
Validity
Not Before: Nov 4 13:00:16 2025 GMT
Not After : Nov 5 13:00:16 2025 GMT
Subject: CN=8a00568f8f91f9e69387f7032f0296abf2ec1c44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:3d:a0:f2:bd:f8:86:1a:db:33:50:b3:4f:
99:c3:2d:a1:8e:53:56:1c:a3:4e:c1:06:ce:7c:8d:
ce:3f:b7:e9:30:b0:f2:10:2b:c7:cf:12:84:f8:15:
72:66:a8:bc:32:46:8f:98:6d:02:1e:35:bf:7c:95:
d0:aa:70:09:27:89:41:f4:e7:ac:a7:c5:bc:9a:3d:
e5:a1:14:29:80:98:f8:b6:28:fe:79:a4:54:1a:e4:
62:3d:7f:5e:3e:25:7a:02:41:16:a1:2d:6c:1c:8a:
52:71:a1:bc:86:96:2a:7a:61:1b:9e:18:5f:1b:12:
9a:0c:a6:a6:b4:03:ad:da:55:83:69:bd:b5:ac:9f:
e6:ef:c0:92:16:b1:a3:05:74:73:8b:1c:54:a8:de:
69:ef:ed:cc:61:2f:9a:0d:5c:98:54:39:31:ea:52:
1d:af:99:15:be:c8:67:95:96:55:72:38:cd:5b:53:
80:bc:a0:1b:ac:b4:ef:4a:a9:30:a2:04:1f:36:27:
7c:2e:ce:c0:1c:b0:51:0b:c4:c0:49:ab:cf:b2:4e:
db:9a:6b:dc:c1:18:04:44:3e:91:da:31:6c:1d:e1:
77:32:2d:61:c3:49:fe:d2:f3:90:b6:06:a4:e9:73:
0a:0a:c1:cd:68:2f:e8:6e:58:74:e5:74:42:26:1a:
7f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:00:56:8F:8F:91:F9:E6:93:87:F7:03:2F:02:96:AB:F2:EC:1C:44
X509v3 Authority Key Identifier:
keyid:B2:22:CB:C4:B9:5F:13:7B:8D:DA:A0:E3:F2:4F:05:B9:33:CC:7A:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siLLxLlfE3uN2qDj8k8FuTPMepo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/8269c4-9c02-4cc2-9a95-cf0e786a1ffd/1/siLLxLlfE3uN2qDj8k8FuTPMepo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:73:e6:91:32:b5:db:f5:17:96:da:fd:d4:5b:6a:d0:eb:87:
ed:3d:b9:8c:6e:25:03:d0:79:fb:9d:a5:91:cf:9f:24:88:6c:
18:da:3b:14:db:04:78:9b:d0:54:5a:80:23:e7:ff:5b:85:6e:
6a:ff:4e:b5:35:32:0c:60:b4:a6:de:b9:6d:87:b5:96:4d:5f:
6c:ad:35:ed:cd:5f:b7:f3:70:db:35:48:44:06:e9:15:18:29:
16:fe:80:73:5f:9f:1a:de:e6:93:7f:f1:af:75:70:de:72:35:
d4:30:38:44:3c:37:84:cf:75:e1:1f:b7:76:5d:eb:b8:ed:81:
1b:df:8b:bf:5f:6d:69:14:46:02:ab:42:22:1e:9a:4f:68:fd:
50:92:a8:96:a2:c2:bc:16:bc:54:e7:54:50:76:34:7b:f7:5b:
33:c0:29:6b:02:aa:db:b0:80:4d:e0:cb:a7:ec:79:26:02:42:
e3:fb:63:3e:6e:51:fe:91:28:3d:6f:a0:ab:fd:53:6a:aa:6b:
aa:8f:c0:ce:6e:b2:09:d5:1e:c4:60:b3:f1:11:59:ca:59:de:
df:7a:d3:e1:ce:9d:d0:d4:49:cb:56:51:19:74:2d:28:94:7e:
48:3a:60:df:10:b3:51:40:2b:12:5c:4c:62:a8:57:25:89:f5:
a3:15:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:08 2025 by rpki-client