Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
File: S2T4wOGznYqO-OjItaD_7itTtYc.mft (raw, json)
Hash identifier: iU2WwDqOuVly6LPOFStBWaK9+JVYDj2cbT3xP86LXDM=
Subject key identifier: DC:3B:E8:22:D9:72:86:63:58:15:47:4F:8F:9D:29:92:F8:46:18:C4
Authority key identifier: 4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
Certificate issuer: /CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Certificate serial: 019A4EF4A7C955A1E460470CCAC28869B006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
Manifest number: 0837
Signing time: Tue 04 Nov 2025 13:00:47 +0000
Manifest this update: Tue 04 Nov 2025 13:00:47 +0000
Manifest next update: Wed 05 Nov 2025 13:00:47 +0000
Files and hashes: 1: S2T4wOGznYqO-OjItaD_7itTtYc.crl (hash: zs4SJpvCbUXoQz6SbaT9LGKnVA7MC2OnFlU2PHBLyE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:a7:c9:55:a1:e4:60:47:0c:ca:c2:88:69:b0:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b64f8c0e1b39d8a8ef8e8c8b5a0ffee2b53b587
Validity
Not Before: Nov 4 13:00:47 2025 GMT
Not After : Nov 5 13:00:47 2025 GMT
Subject: CN=dc3be822d97286635815474f8f9d2992f84618c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:73:8e:c8:ea:a4:94:3b:df:03:30:8b:60:06:
30:31:51:67:89:5b:0a:b8:3d:5a:28:d2:d8:ea:7c:
c6:e1:9d:ee:c8:31:91:c1:47:f5:2a:70:07:7e:e3:
2f:bd:d1:a6:ae:74:d4:5c:14:6e:f7:c2:24:56:17:
6b:00:e9:59:29:9e:56:06:d0:e4:f5:11:e2:d9:f2:
21:8c:1f:6e:08:d7:7d:f1:b7:33:68:86:07:d2:1f:
35:fe:c8:48:03:93:38:9a:8b:a2:27:99:c6:c9:d9:
d1:4d:6f:b2:f0:83:c3:88:03:3f:45:1e:50:e5:d5:
f9:d9:cf:8d:a3:56:e7:cd:2c:5c:82:80:70:b9:69:
b2:1b:b1:6f:ea:5e:e9:0f:e5:4b:1f:1e:35:11:34:
6a:eb:46:30:34:aa:ea:d4:da:e2:3c:62:5d:17:64:
bb:12:a7:8a:ea:8a:e2:89:29:8a:d3:8f:dc:e0:85:
a0:8a:1f:c0:32:89:18:4d:13:b9:9f:fa:e8:d6:c2:
bb:0f:4a:a8:fb:ca:1d:e1:21:4e:ff:ba:d6:42:2f:
1f:a1:68:3b:2b:28:d7:ad:4d:28:59:c6:22:00:24:
38:79:6f:b6:bd:51:ea:a9:e0:5c:4d:eb:91:21:b4:
e8:d5:59:fe:5f:19:38:ec:46:71:dc:c0:09:45:38:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3B:E8:22:D9:72:86:63:58:15:47:4F:8F:9D:29:92:F8:46:18:C4
X509v3 Authority Key Identifier:
keyid:4B:64:F8:C0:E1:B3:9D:8A:8E:F8:E8:C8:B5:A0:FF:EE:2B:53:B5:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S2T4wOGznYqO-OjItaD_7itTtYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/c497be-f3b1-4c9b-859e-95d5e16cddef/1/S2T4wOGznYqO-OjItaD_7itTtYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:e3:c6:53:26:68:12:a9:e1:aa:fc:45:04:1b:9e:1f:4f:b2:
cb:08:8b:1a:49:50:07:ac:2e:96:4f:9f:2c:00:54:06:d4:4f:
4b:eb:cc:9f:9f:64:3b:c9:92:73:8a:e3:b6:c5:50:49:cc:2f:
ba:28:c0:65:df:25:3b:21:be:6d:6a:cc:90:e6:6a:3e:31:f5:
1a:94:8f:9f:75:82:12:b5:03:d4:0f:a4:57:2a:6f:99:45:eb:
a0:5d:c6:74:32:9d:fa:26:ca:5b:b1:3c:2d:1e:4d:2d:2b:89:
d0:7b:44:97:ec:95:db:6a:2f:8a:06:b3:81:4e:3a:08:ca:8b:
61:bf:a9:3a:36:f1:e8:47:dc:e0:9a:27:90:ba:99:b3:3a:50:
8c:e4:32:34:90:37:c2:c9:dd:d5:7e:21:21:1e:45:11:46:65:
59:ac:3e:56:31:e5:4c:53:7f:ed:06:ed:64:8a:b5:77:a0:45:
af:8e:3c:07:2b:45:8b:84:10:ce:b5:da:11:27:84:12:5c:0e:
94:d2:cc:69:d3:03:77:84:ef:0e:f0:92:e9:be:58:0f:dd:93:
a9:9f:30:db:80:83:2c:22:4f:1f:09:ac:c9:5a:7f:5c:2e:7b:
e2:67:1e:0e:61:2d:ba:73:4d:77:f8:d7:bb:0a:f4:c7:e6:ba:
b3:30:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:53 2025 by rpki-client