Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
File: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft (raw, json)
Hash identifier: xoTIxHws79F8TqdA326yEkyAH5imMDHS2hFQqgPSbJQ=
Subject key identifier: D7:3D:C7:07:DB:BF:94:32:6E:6A:51:99:87:C3:EA:FA:44:DE:E4:92
Authority key identifier: B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
Certificate issuer: /CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Certificate serial: 019A4EF4D611C4E61A1063977B65A406C468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
Manifest number: 0E1C
Signing time: Tue 04 Nov 2025 13:00:59 +0000
Manifest this update: Tue 04 Nov 2025 13:00:59 +0000
Manifest next update: Wed 05 Nov 2025 13:00:59 +0000
Files and hashes: 1: sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl (hash: xYWuzHKYnApPz58i1VA9yTwrnegwv7ysQxPu9C69WJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:d6:11:c4:e6:1a:10:63:97:7b:65:a4:06:c4:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1f0252ffa42083a7dfd5c6c5e727d64b911cd9f
Validity
Not Before: Nov 4 13:00:59 2025 GMT
Not After : Nov 5 13:00:59 2025 GMT
Subject: CN=d73dc707dbbf94326e6a519987c3eafa44dee492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:61:eb:84:5f:4c:dd:e7:1c:5f:c9:a7:58:
46:99:8b:ab:0b:3b:df:84:6d:1e:fc:94:86:73:05:
c8:9d:86:4f:a4:27:1b:f6:d8:31:1c:ab:38:f3:85:
12:9a:7d:29:e7:38:a1:0e:a4:80:b2:da:87:8d:c9:
f7:f1:e2:d5:6e:69:52:7a:45:da:cf:d5:08:ed:16:
22:65:69:39:85:87:15:c5:fa:2a:fe:12:67:cd:15:
41:11:3b:e1:7b:6c:43:54:b7:3b:55:9b:8c:b5:cb:
b8:0d:af:4c:b9:56:f0:c3:2f:59:4f:21:7f:95:2d:
b3:5e:5c:1d:1b:f1:a9:ff:3a:36:51:c9:61:f9:fa:
50:d0:59:20:2a:a7:52:c3:12:15:d7:16:f1:05:a2:
be:de:6e:05:fa:43:90:91:40:f8:cc:4e:4a:e0:3e:
23:e7:71:d7:d1:1c:f4:cd:95:57:d5:f7:9d:4b:8d:
a3:3f:f4:6e:d2:9e:88:4f:d8:1f:0a:b5:92:fb:3c:
7d:a1:8a:7c:f1:e2:00:51:1d:20:b7:0a:10:69:03:
9d:81:a3:39:a3:e0:84:55:70:b1:df:35:8e:30:4b:
ca:16:9d:60:4a:5a:17:99:ef:27:bc:f6:03:71:d8:
a6:9a:5c:54:70:cd:03:ed:e9:a9:da:c1:c8:18:90:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:3D:C7:07:DB:BF:94:32:6E:6A:51:99:87:C3:EA:FA:44:DE:E4:92
X509v3 Authority Key Identifier:
keyid:B1:F0:25:2F:FA:42:08:3A:7D:FD:5C:6C:5E:72:7D:64:B9:11:CD:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cba490-10ff-437f-b7b9-de81a1333972/1/sfAlL_pCCDp9_VxsXnJ9ZLkRzZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:89:dc:48:3d:3f:a3:7d:85:24:29:d1:2c:5c:45:d7:e1:4f:
9c:44:21:88:2b:99:1c:c0:89:76:ef:95:8b:06:8d:32:bb:31:
cd:04:06:f5:21:b6:9f:a6:a8:4e:8b:f9:76:bf:75:92:61:14:
34:93:5a:00:f3:9a:da:c1:5b:a7:e1:7a:b8:63:af:c3:a5:79:
f5:44:35:a6:5e:20:11:bb:a3:91:37:91:76:ef:b3:e9:a2:b3:
6f:5d:14:1f:d7:2c:2b:78:74:36:29:c9:bf:b2:c5:f5:c5:4c:
c1:60:0d:f3:b4:20:03:31:07:49:f2:21:6a:e8:e2:c5:9f:7e:
b2:e9:45:69:f2:78:f5:c9:d3:71:a0:38:6d:d6:56:16:34:85:
29:99:ec:cf:b6:bd:f1:7d:ee:0a:ce:9a:aa:a2:8d:61:d6:88:
ee:a1:6b:13:be:70:a7:b4:08:7b:7e:cf:ad:0a:8f:93:c8:b7:
92:c7:1a:bd:b2:3f:cf:c3:b7:e5:66:c8:03:0b:0b:ae:fd:98:
eb:fb:c9:c2:46:71:77:e8:34:72:d5:4c:71:9d:49:6f:e0:f1:
7b:30:88:df:e1:1d:9b:a7:64:f0:ba:0c:a7:f2:f6:ab:e2:93:
4e:78:d7:ec:f8:0a:38:bf:3d:bc:0b:17:a6:5b:44:a8:db:c8:
f4:58:87:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:38:25 2025 by rpki-client