Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
File: d-Sz2VlinaKIrNim3gA-zgyTTbE.mft (raw, json)
Hash identifier: 23YYLM17YFcaRdEUadwHEg3VFTqdqSXLQWiJUk/K3NI=
Subject key identifier: 8F:4C:E0:12:C5:97:17:8E:87:79:5A:86:21:8A:8F:5D:EA:51:A1:D2
Authority key identifier: 77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
Certificate issuer: /CN=77e4b3d959629da288acd8a6de003ece0c934db1
Certificate serial: 019A4E86281D9D0CFA3C7B4F4D5AC6EBAE3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
Manifest number: 05A8
Signing time: Tue 04 Nov 2025 11:00:05 +0000
Manifest this update: Tue 04 Nov 2025 11:00:05 +0000
Manifest next update: Wed 05 Nov 2025 11:00:05 +0000
Files and hashes: 1: d-Sz2VlinaKIrNim3gA-zgyTTbE.crl (hash: gAqhAVjgApn6cNqzALNFKqpzcupWD8chAVc2Z8Y8V9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:28:1d:9d:0c:fa:3c:7b:4f:4d:5a:c6:eb:ae:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77e4b3d959629da288acd8a6de003ece0c934db1
Validity
Not Before: Nov 4 11:00:05 2025 GMT
Not After : Nov 5 11:00:05 2025 GMT
Subject: CN=8f4ce012c597178e87795a86218a8f5dea51a1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:72:a7:0e:f5:6d:d3:dd:6f:f5:ec:4a:89:
85:c1:cc:ac:cc:94:04:19:38:d5:09:d8:3d:6b:ad:
f0:d0:86:5c:0a:dd:87:22:77:81:2a:3e:55:29:74:
b3:03:41:c3:f9:70:cd:9d:ba:11:1a:2e:8c:f9:0c:
1d:e9:2c:87:41:0f:1a:46:4c:ff:80:5e:62:07:c1:
cd:90:1d:ad:9a:09:c0:04:39:18:a4:35:55:dd:0e:
75:f9:7f:9e:ca:db:2a:a0:d0:64:b6:ed:65:6c:74:
4b:d1:52:a6:06:65:6b:67:5c:a2:a3:df:ca:f6:1e:
7f:93:54:a8:2f:bc:2e:58:5d:96:49:d9:7b:ba:6b:
e0:72:79:db:be:0f:5a:37:da:31:84:2a:09:68:9b:
55:ab:09:3e:6f:a9:8c:a4:74:73:a9:74:13:49:95:
84:fe:4f:69:67:99:33:7f:36:7b:83:ad:b2:c4:64:
ef:cb:38:7a:ab:1a:3f:8b:1a:06:73:95:78:2b:ef:
5a:d3:a9:49:af:92:89:24:73:29:73:db:3a:fe:5f:
77:5c:44:2f:f3:0c:bb:7a:05:3f:15:78:95:d9:ba:
b1:96:3b:35:97:51:32:f5:e1:7c:33:83:0a:a9:a6:
5f:8e:2b:2d:4f:9c:8e:3d:d3:57:0d:49:23:1f:fd:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4C:E0:12:C5:97:17:8E:87:79:5A:86:21:8A:8F:5D:EA:51:A1:D2
X509v3 Authority Key Identifier:
keyid:77:E4:B3:D9:59:62:9D:A2:88:AC:D8:A6:DE:00:3E:CE:0C:93:4D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-Sz2VlinaKIrNim3gA-zgyTTbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f8fa5d-9f93-4f3a-b5e3-875fe490a874/1/d-Sz2VlinaKIrNim3gA-zgyTTbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:d4:19:54:9c:94:82:35:4e:8b:f4:73:bc:24:77:1e:a0:48:
14:72:b1:8f:3d:f8:8d:4e:13:13:bd:0b:67:b3:e8:8c:07:b9:
be:06:25:bc:be:d2:9a:f4:51:0d:82:4a:8a:de:be:c8:d6:12:
3c:0c:a4:87:f2:4c:c4:9f:dd:a6:f0:cc:86:26:77:4d:99:0c:
4a:1e:f1:75:22:16:e7:e7:c3:87:86:07:21:c2:c7:38:48:e1:
73:f2:df:2c:09:39:e5:3d:8a:b9:c3:e2:84:eb:ba:c9:94:ef:
98:8c:b2:42:e1:89:0f:2e:5c:df:28:a1:94:53:1f:d5:28:62:
31:41:90:2e:5d:51:c2:56:b8:4e:dd:43:1f:69:70:2c:8d:47:
7c:b1:41:07:b7:a2:6f:58:01:c8:99:01:d1:75:e6:d5:61:26:
81:6e:2d:6f:b1:17:cf:62:51:a4:f4:76:e4:5d:1d:c6:a6:9c:
0b:9c:fa:b1:9d:38:5f:f1:83:8a:c1:0f:86:83:af:b8:be:47:
d1:ad:65:c1:ed:48:df:f7:50:71:a4:44:cb:72:40:01:c8:fa:
9b:ca:c2:5d:56:61:f6:20:bd:44:5c:49:e4:27:b9:28:fa:61:
c2:6c:5d:6a:fc:7d:f9:f4:2b:08:4f:79:2e:46:b3:34:02:7f:
60:54:ba:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:58 2025 by rpki-client