Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
File: 468Yd0OnoHf2oeBmX92q700SSfs.mft (raw, json)
Hash identifier: PfXiqhwngZpvFLjO20cP0c9Mvccn0yYZl8E1on/c78s=
Subject key identifier: 7C:18:01:D9:81:4D:B4:73:85:EC:0A:56:DA:26:BD:F2:39:92:C9:9F
Authority key identifier: E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
Certificate issuer: /CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Certificate serial: 019A4EF456DCDF58D12A120AD893100A0A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
Manifest number: 0A69
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: 468Yd0OnoHf2oeBmX92q700SSfs.crl (hash: +QFC5p6fz07xiflzBe3uMHkfoXRzmw82UQp6a0bcH1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:56:dc:df:58:d1:2a:12:0a:d8:93:10:0a:0a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3af187743a7a077f6a1e0665fddaaef4d1249fb
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=7c1801d9814db47385ec0a56da26bdf23992c99f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:43:2b:19:50:93:d4:f5:70:5f:85:75:4d:d9:
bc:08:ba:df:6e:7f:fa:c8:5f:1a:4e:85:3a:c8:bb:
14:62:d5:4b:8e:51:1f:28:58:7e:96:b1:c4:77:67:
d0:81:4f:98:2f:ad:c3:fa:5c:87:0d:58:ea:b1:21:
15:67:22:e9:07:b8:83:17:73:48:55:60:61:c2:98:
90:16:ac:1a:09:ec:dd:9e:76:b5:ce:f1:38:00:da:
21:89:27:fc:65:d2:58:19:29:f9:6c:bf:9a:3e:2b:
c9:d2:16:2e:5f:d1:30:f1:c3:97:32:d0:09:37:5c:
51:5b:31:42:b7:b0:2e:63:09:29:21:53:ce:e5:bc:
a3:21:47:a5:17:38:12:a7:20:42:12:f8:1a:ad:d5:
5f:ae:25:4b:d2:e1:41:4a:30:a9:29:63:bf:4e:f0:
14:f9:80:be:0d:9d:77:b9:ab:38:13:8a:cb:8e:a8:
0e:b4:b0:b4:12:42:a9:ac:17:ee:65:a3:b4:ce:58:
20:0f:44:50:b1:53:36:67:34:b3:c3:0b:b0:68:c7:
b9:6f:ab:81:8e:cb:cd:d7:97:4e:32:6c:99:f2:94:
9c:1f:a4:4b:90:bc:aa:67:56:1a:fb:42:a0:45:11:
a6:e6:52:03:fd:ed:58:08:08:4b:a0:31:4c:61:61:
6b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:01:D9:81:4D:B4:73:85:EC:0A:56:DA:26:BD:F2:39:92:C9:9F
X509v3 Authority Key Identifier:
keyid:E3:AF:18:77:43:A7:A0:77:F6:A1:E0:66:5F:DD:AA:EF:4D:12:49:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/468Yd0OnoHf2oeBmX92q700SSfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/cf6bce-1237-440c-a3c8-41ebe69e3031/1/468Yd0OnoHf2oeBmX92q700SSfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a4:64:dd:0f:9f:01:dd:4c:3f:e6:a5:33:47:b0:2d:a6:ca:
9c:4e:10:61:1f:c6:d9:90:9f:92:25:8d:d6:bb:2b:88:ef:0a:
5c:f0:cc:e2:10:7e:9f:d2:af:e2:3d:c0:bd:4d:e3:08:5d:0c:
a2:06:84:34:1e:c2:8c:01:8a:1b:d5:7c:46:f8:1c:2c:d8:31:
07:c8:93:18:85:a2:78:34:9f:b3:8b:39:e1:29:f6:bd:7b:ad:
08:7e:3d:67:06:a8:ec:fe:46:d2:81:27:c4:85:51:5c:74:6c:
b0:91:be:dd:08:c6:4b:7a:59:5b:42:55:d1:11:bb:e7:bf:45:
ea:de:6e:0d:b9:3b:e3:f1:ab:a2:17:7b:16:9f:5d:c5:b7:1b:
f5:f2:f3:2c:cd:59:b0:f4:70:32:a5:c0:88:c0:ef:5e:2e:c1:
cc:65:dd:26:a4:1a:b4:07:ef:8d:3b:8d:39:39:31:07:22:2c:
bb:6c:b4:0d:e5:cf:05:68:5c:bb:7a:99:f9:9b:b1:c1:76:2f:
6b:9e:62:c3:48:aa:ab:5c:37:2b:af:74:0b:ac:20:9d:ae:a9:
72:f0:21:88:a0:1d:a4:3a:bd:32:1a:4c:84:3c:ab:b8:f0:84:
b6:c9:7e:14:13:bb:8a:5a:c7:7f:0e:ef:41:fd:b4:9a:64:66:
f4:60:5d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:37:27 2025 by rpki-client