Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
File: 861SH4OIdIPIybDG895f1e1Whck.mft (raw, json)
Hash identifier: shmfmkBDX6tsU+/1Buien8r+mlmcqy2sDqe/UlM3X3c=
Subject key identifier: F3:70:F8:70:5E:1F:6E:08:CE:12:E9:E0:08:23:A6:F9:0A:9E:73:CD
Authority key identifier: F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
Certificate issuer: /CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Certificate serial: 019A50E2DD55F78C2E11F2AEDA29DA492C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
Manifest number: 0C98
Signing time: Tue 04 Nov 2025 22:00:36 +0000
Manifest this update: Tue 04 Nov 2025 22:00:36 +0000
Manifest next update: Wed 05 Nov 2025 22:00:36 +0000
Files and hashes: 1: 861SH4OIdIPIybDG895f1e1Whck.crl (hash: CFKVjn+pZL23mCfsjq+11NaDAAjkDSed0dkkP4AqaM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e2:dd:55:f7:8c:2e:11:f2:ae:da:29:da:49:2c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3ad521f83887483c8c9b0c6f3de5fd5ed5685c9
Validity
Not Before: Nov 4 22:00:36 2025 GMT
Not After : Nov 5 22:00:36 2025 GMT
Subject: CN=f370f8705e1f6e08ce12e9e00823a6f90a9e73cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b4:54:7f:53:30:4e:8c:70:90:4e:69:99:86:
91:d3:28:4f:fe:75:b3:d3:12:9c:e5:70:a6:e6:cd:
af:69:93:d3:eb:83:85:a7:ef:b6:01:0c:09:ec:68:
56:66:3c:1b:ee:c6:df:6f:98:e4:68:99:7c:fe:7e:
7a:19:0b:6a:25:bf:8b:fe:1f:5c:ca:1f:61:fe:bf:
ee:d7:f8:e5:cd:86:c7:d6:7d:df:fb:c6:24:79:19:
06:ed:7d:bf:c8:e8:36:03:e1:f5:6d:73:f3:65:d3:
e4:8a:48:e6:2d:2b:b9:7a:f0:33:91:f2:83:9f:20:
d5:c8:40:b3:a7:d8:bf:a4:21:ff:c6:a9:59:2a:fd:
66:54:b5:76:69:77:ad:a5:cf:7b:a5:ad:c3:cc:8e:
df:ee:9d:f1:30:6b:a1:86:0f:f5:58:c6:67:fb:f9:
7d:8f:fb:03:5a:33:bb:e1:c3:27:3d:79:58:83:b6:
e8:20:82:5e:d4:21:8b:67:09:48:ad:b1:27:23:08:
e3:10:73:2a:88:87:9e:81:ec:c6:45:61:6f:9d:c3:
12:73:cc:5f:e5:ef:d1:b2:b2:c9:e8:bf:01:94:7d:
30:2b:1d:06:fb:87:50:5c:9c:f1:19:10:12:28:71:
75:8c:ad:32:fb:b2:6a:f2:32:f8:3f:2e:c1:c7:5d:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:70:F8:70:5E:1F:6E:08:CE:12:E9:E0:08:23:A6:F9:0A:9E:73:CD
X509v3 Authority Key Identifier:
keyid:F3:AD:52:1F:83:88:74:83:C8:C9:B0:C6:F3:DE:5F:D5:ED:56:85:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/861SH4OIdIPIybDG895f1e1Whck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/cdd985-334c-4a0d-a7a8-75c0ccedf976/1/861SH4OIdIPIybDG895f1e1Whck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:51:68:01:60:6e:c7:c1:1f:e4:fb:93:8e:40:d5:33:d3:
ae:6c:3b:24:dc:1f:e3:e4:55:5a:fc:ea:5c:f5:8c:8c:a2:28:
47:b1:9e:2d:05:9c:a7:f4:60:d6:1f:d8:95:c4:bc:52:3d:f8:
e8:5b:bc:b8:4f:78:32:88:f0:6c:10:89:63:ea:79:33:14:e1:
c2:4d:5f:02:20:43:f3:69:f1:fc:35:e5:dd:49:01:13:5c:3c:
db:f1:ec:38:50:65:17:d1:57:6a:1a:71:c3:33:b2:5b:8a:a4:
62:94:ed:8e:0c:6c:d7:97:fb:86:15:12:0d:4f:2e:cb:b3:ab:
2f:f5:4a:0b:86:14:70:81:c8:44:56:c1:8b:93:ce:57:d3:eb:
9f:c3:80:45:a5:d0:60:03:45:07:41:91:c5:5c:b3:64:02:5b:
17:a1:42:2e:91:e1:20:c4:b6:92:76:f8:c2:99:a2:75:bb:73:
82:a3:ce:3b:01:36:e5:2c:a2:60:16:42:89:ba:1a:90:48:34:
49:02:ac:b8:41:cd:80:db:e5:9b:78:14:e9:b8:94:84:29:84:
8d:f7:6a:04:8b:ea:65:03:05:39:65:ad:90:b5:ed:c0:48:c5:
73:b7:2b:47:1e:c6:2e:72:cc:9a:b7:4d:73:bb:04:35:f8:41:
cc:3c:9c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:19:54 2025 by rpki-client