Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
File: SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft (raw, json)
Hash identifier: mpEEI4mmoPeR8VcyQslgQcqlTEIYPFcNEloAtamEQBE=
Subject key identifier: F2:15:24:96:82:1F:F3:55:5B:56:52:28:9C:7C:22:68:37:26:F1:F0
Authority key identifier: 48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
Certificate issuer: /CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Certificate serial: 019A4EF5B441BAF9D17780BE531CCF401521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
Manifest number: 109D
Signing time: Tue 04 Nov 2025 13:01:56 +0000
Manifest this update: Tue 04 Nov 2025 13:01:56 +0000
Manifest next update: Wed 05 Nov 2025 13:01:56 +0000
Files and hashes: 1: SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl (hash: 1aTt3DCKSTmxr/WNgOo2vS2y/1I7jWCEY/TRcY3gFpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b4:41:ba:f9:d1:77:80:be:53:1c:cf:40:15:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4834387ebfecda637a76e11199e1cd0307c2f4ca
Validity
Not Before: Nov 4 13:01:56 2025 GMT
Not After : Nov 5 13:01:56 2025 GMT
Subject: CN=f2152496821ff3555b5652289c7c22683726f1f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ce:06:28:d8:04:e5:86:15:75:a7:8b:37:a0:
50:2b:b1:17:30:6a:a1:f0:33:6f:41:e1:3d:fe:d4:
12:a1:80:c4:03:4a:d4:6a:0d:54:78:71:8c:ac:bc:
ca:3c:42:a5:ad:ba:a2:02:94:0b:ed:0a:d3:c7:ad:
68:5b:c4:01:05:04:5a:a1:50:b3:24:8a:83:ef:f9:
35:1c:83:ef:07:2e:27:89:a1:4b:0b:d0:05:02:49:
a8:5b:e8:85:d0:8f:43:59:51:58:50:ae:4f:97:3c:
83:78:8c:4c:23:11:73:1d:de:04:0e:96:88:16:b8:
99:01:92:f3:ec:5d:7b:c6:18:d5:33:e0:5d:e9:68:
58:4a:5a:13:d1:26:6e:9f:dc:65:0f:6e:56:78:f5:
75:4d:8c:63:a5:49:4d:d7:8a:8e:54:f0:3b:46:8e:
8b:b1:f6:ac:4f:62:3a:a5:94:8b:e5:45:57:f3:46:
a7:c4:a4:49:ea:ea:c7:1d:cc:9f:55:d9:d3:c4:ab:
32:4a:e2:ec:e8:7c:9d:ec:18:1a:b7:ea:6b:19:04:
66:96:65:07:60:48:67:84:89:0d:d6:a7:f1:fd:a4:
ce:98:a3:f2:9f:61:7e:23:3b:c8:02:81:09:46:ba:
09:0e:be:02:7e:14:4a:31:25:4c:83:23:2c:d8:3d:
07:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:15:24:96:82:1F:F3:55:5B:56:52:28:9C:7C:22:68:37:26:F1:F0
X509v3 Authority Key Identifier:
keyid:48:34:38:7E:BF:EC:DA:63:7A:76:E1:11:99:E1:CD:03:07:C2:F4:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SDQ4fr_s2mN6duERmeHNAwfC9Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9ee6c8-f3e2-4fae-998a-591a2a4194cd/1/SDQ4fr_s2mN6duERmeHNAwfC9Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:64:2a:7e:a0:3a:8e:26:65:78:e6:2e:48:20:6e:8f:52:f3:
ff:75:4f:b5:ba:be:17:ca:e4:d0:65:6b:d1:e0:ee:e5:93:09:
07:89:c0:0b:20:c8:6d:5f:64:39:3a:09:9b:52:e8:f6:63:3f:
67:ef:97:df:8b:6d:91:cf:f9:d7:1b:28:ac:50:f1:09:96:89:
af:24:0c:27:3e:bd:a0:bd:cd:b4:5e:b2:d2:94:59:61:53:f1:
6e:e0:81:69:56:f4:0b:61:a5:0a:37:2f:83:ca:e3:fc:56:e1:
68:04:6e:c4:00:31:25:81:4d:e2:df:14:96:f2:e2:35:df:0b:
c9:92:a7:df:9b:8d:7c:43:28:b8:b0:d2:37:90:61:49:97:fb:
fa:5e:90:f5:2f:80:89:06:e1:ee:83:57:d5:d8:39:48:17:34:
20:9a:c1:af:7d:54:aa:49:54:6d:2f:d1:4c:b2:9a:15:2c:e6:
f8:92:b7:66:89:40:34:64:73:8c:2b:fc:6b:4c:34:6d:e5:41:
dc:3b:86:04:65:e7:cc:cf:b8:dd:d8:a8:86:73:fd:76:c6:33:
3c:2f:7c:f4:ce:0b:3b:8d:9e:3c:e8:61:f0:0f:89:98:78:e9:
d2:ee:a5:ca:8e:52:f3:d3:5a:78:d9:7e:8d:f1:0c:35:e8:e9:
79:8f:e8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:04:55 2025 by rpki-client