Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
File: _s4nFs6tjACFRiJL5LVocIaD_0s.mft (raw, json)
Hash identifier: MGrNLcM8hlS0HMDoan9v9ZWIrFS9YBMuAC56aUkksUY=
Subject key identifier: 2F:87:89:0A:8B:4F:36:BE:A2:7D:CA:69:A0:26:01:1D:83:C6:0D:C9
Authority key identifier: FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
Certificate issuer: /CN=fece2716cead8c008546224be4b568708683ff4b
Certificate serial: 019A53764985BC7053E2020C70ED0C4EBCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
Manifest number: 166C
Signing time: Wed 05 Nov 2025 10:00:52 +0000
Manifest this update: Wed 05 Nov 2025 10:00:52 +0000
Manifest next update: Thu 06 Nov 2025 10:00:52 +0000
Files and hashes: 1: _s4nFs6tjACFRiJL5LVocIaD_0s.crl (hash: e2K4LL+Sj+bgFfd/sYwnd4zgDlceLILCFWOhwR1eW3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:49:85:bc:70:53:e2:02:0c:70:ed:0c:4e:bc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fece2716cead8c008546224be4b568708683ff4b
Validity
Not Before: Nov 5 10:00:52 2025 GMT
Not After : Nov 6 10:00:52 2025 GMT
Subject: CN=2f87890a8b4f36bea27dca69a026011d83c60dc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:07:b5:4a:62:79:5c:b0:a6:30:c8:f5:a6:
bd:8b:52:d4:be:10:fa:5b:29:76:e0:58:da:c8:53:
c8:f6:5e:4e:5d:9a:80:11:03:14:f2:7d:99:35:50:
40:fa:72:09:37:e9:92:9c:3a:b9:d0:6f:fc:3a:cd:
8a:02:5f:9a:e6:97:77:be:e0:81:03:65:f3:cf:9a:
c3:2d:b0:eb:a9:dc:b4:1a:d8:74:fd:a3:ea:7a:d2:
7c:0d:ab:e8:55:0a:95:24:76:a3:c5:94:17:61:d0:
8c:bd:f9:20:90:50:ba:a9:4c:a2:e9:10:bc:f3:ae:
dd:ab:b7:2e:86:12:6d:23:3b:0b:8a:bd:5f:ff:06:
45:4d:1f:27:e7:b2:c1:e3:7b:f1:80:57:29:78:0e:
34:48:1d:18:c4:75:6c:e3:64:14:fc:00:22:67:ac:
35:fc:ef:a1:a5:03:d1:17:84:6a:1a:a4:a4:f2:03:
c7:df:f2:77:18:c4:d1:4d:5a:fa:6c:0f:b7:59:eb:
5a:53:d6:c5:0b:86:89:21:ea:69:06:a1:8c:8f:21:
88:e7:49:a6:9a:0c:10:7b:84:25:9e:19:f5:a1:5e:
d7:69:9e:2b:b2:55:e7:f8:bf:3d:c6:19:86:63:0b:
69:d8:3b:e1:84:c4:cb:42:15:cf:75:ce:30:8e:85:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:87:89:0A:8B:4F:36:BE:A2:7D:CA:69:A0:26:01:1D:83:C6:0D:C9
X509v3 Authority Key Identifier:
keyid:FE:CE:27:16:CE:AD:8C:00:85:46:22:4B:E4:B5:68:70:86:83:FF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s4nFs6tjACFRiJL5LVocIaD_0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7431a2-d0d8-42df-bcc8-17d633d8f39f/1/_s4nFs6tjACFRiJL5LVocIaD_0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:dc:ff:9d:df:b2:87:d9:88:b1:ef:e3:fa:c0:d9:b5:b3:55:
4f:d6:ac:b8:42:a9:9a:f7:34:2f:2a:38:4d:ce:2e:c0:e9:e0:
42:ad:29:e8:18:cb:26:20:eb:02:3b:d2:4a:3a:07:b7:2b:82:
59:56:e8:70:7b:e4:50:41:46:50:f5:72:64:7b:3f:c3:f4:88:
42:3c:59:2b:ca:10:0f:0b:96:17:da:5b:68:56:e2:f8:cf:28:
20:82:42:c6:28:36:1c:58:5f:17:75:8b:2b:46:d4:b7:54:bc:
52:b9:14:11:0a:22:0c:06:e6:0c:f2:4f:39:1e:2f:f3:78:33:
c5:0a:ae:90:ef:0e:1c:52:4c:2c:f2:5d:18:06:29:d8:97:da:
5f:2e:a0:cc:51:e9:2c:20:71:d4:bb:c0:65:ca:92:50:19:f7:
1e:2a:2e:74:86:30:a2:a8:b3:e2:b4:74:51:26:93:7e:b7:1b:
0e:7e:c8:03:9f:c6:f2:25:e9:b2:17:88:d3:72:d0:79:04:96:
c4:18:eb:fe:dd:84:0f:ea:27:1c:c1:4d:e6:6b:8b:18:b1:d3:
67:c1:c6:c5:1c:26:28:99:d0:92:29:d8:68:d5:80:13:b1:88:
6d:a9:1b:1a:f1:b1:e4:64:eb:0f:ef:e5:be:63:92:e0:09:22:
e6:6d:2d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 12:55:14 2025 by rpki-client