Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
File: rNbwonJnY07OGVnN2gPOvc5Yp70.mft (raw, json)
Hash identifier: +Jebl9cpupuqw2uhxY01x3QHoIQQP4UKkT1aXgZHHnk=
Subject key identifier: AB:3F:85:29:5B:9B:FF:BC:2D:54:34:11:A8:1A:6A:E9:A3:1A:F0:6D
Authority key identifier: AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
Certificate issuer: /CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Certificate serial: 0199FD34697FAE2C7195308EADAFEB22F2D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
Manifest number: 0169
Signing time: Sun 19 Oct 2025 16:01:34 +0000
Manifest this update: Sun 19 Oct 2025 16:01:34 +0000
Manifest next update: Mon 20 Oct 2025 16:01:34 +0000
Files and hashes: 1: rNbwonJnY07OGVnN2gPOvc5Yp70.crl (hash: FlArVqNm33dntVNOh1u3t3lvdzbyOKzkX7tu/oWxNnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:69:7f:ae:2c:71:95:30:8e:ad:af:eb:22:f2:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd6f0a27267634ece1959cdda03cebdce58a7bd
Validity
Not Before: Oct 19 16:01:34 2025 GMT
Not After : Oct 20 16:01:34 2025 GMT
Subject: CN=ab3f85295b9bffbc2d543411a81a6ae9a31af06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e6:49:36:42:2a:d1:ac:22:2e:70:6f:5a:27:
ae:b3:5f:62:18:b2:32:45:2b:f8:77:07:d5:6b:8e:
84:51:2c:13:af:1a:51:95:1c:2a:d4:88:22:06:ef:
31:f7:54:b1:5a:e7:f5:f4:fb:78:d3:f9:dc:d7:0e:
ee:d4:35:1d:73:e1:a3:6a:40:6a:38:55:78:86:5b:
76:01:f6:f0:55:4a:07:8e:3e:3c:6a:0d:26:e8:95:
80:6e:55:03:77:67:33:16:ec:60:47:09:ec:83:47:
06:a5:19:d0:cd:f3:6f:b5:8e:cc:44:53:69:93:41:
1b:e1:71:30:d4:cc:a0:3d:bd:c9:6f:95:26:e8:27:
c4:3f:78:60:3f:41:52:44:d6:92:6d:b4:a9:7b:7d:
8b:3f:7f:e0:11:f9:d7:10:2c:b6:a8:20:d8:09:ba:
2f:99:c0:e5:50:1a:6e:ce:5c:96:94:14:02:70:05:
c9:e1:65:fa:88:60:ae:9c:ea:23:cc:a1:45:81:ba:
ef:cb:4d:8e:06:43:d4:2a:a8:e3:78:c8:43:74:9a:
3e:b5:df:c7:91:3f:88:21:0c:6a:7f:b1:39:af:2b:
00:df:4f:b8:f7:c2:af:d3:34:d5:a9:5e:9b:f8:b5:
ea:53:7c:59:f6:72:ee:f0:d2:bf:25:f6:0c:d7:de:
7f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:85:29:5B:9B:FF:BC:2D:54:34:11:A8:1A:6A:E9:A3:1A:F0:6D
X509v3 Authority Key Identifier:
keyid:AC:D6:F0:A2:72:67:63:4E:CE:19:59:CD:DA:03:CE:BD:CE:58:A7:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNbwonJnY07OGVnN2gPOvc5Yp70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/df4d50-8da0-4ca6-a37f-0124ff529bf7/1/rNbwonJnY07OGVnN2gPOvc5Yp70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:03:d8:a8:c9:61:83:ca:6c:a6:3c:2c:3e:12:e5:8c:81:97:
c8:71:08:0a:15:ac:f8:1d:f9:29:33:7c:18:a0:af:e8:43:b6:
0b:05:20:5b:35:89:50:61:29:a7:41:d8:4e:47:05:ac:d5:ff:
6e:49:e1:09:a1:85:ac:2e:ec:9d:e8:23:af:5b:6e:9c:91:4a:
5f:52:2c:d9:5d:49:78:4d:b6:d9:f3:9e:eb:ef:dd:10:f2:81:
43:29:93:eb:99:76:ac:17:e2:72:86:60:9a:93:c6:da:3b:d5:
8d:41:73:c3:40:1e:54:55:3a:e1:10:4e:1d:57:ba:a2:d9:5a:
7c:24:3e:4f:7f:8e:b7:58:3d:87:6a:25:ee:56:95:0f:f2:58:
68:40:f4:04:63:9a:8d:63:dd:9a:71:71:30:e7:1d:f7:98:6d:
3b:f2:e4:cf:5c:3c:ba:81:f8:26:65:01:47:fa:60:ba:0d:df:
b5:5b:60:51:c0:e4:d2:9c:ee:b2:42:c1:a6:6a:ac:39:2a:85:
9a:7b:22:2f:f3:d8:06:99:b6:bb:8a:c2:25:22:c6:1f:11:b9:
9a:2a:f5:47:0c:7e:5f:56:74:8b:41:5d:28:79:4c:78:ad:39:
66:79:97:cf:f3:01:f6:87:e1:c9:c3:71:13:26:dd:10:db:57:
bc:fd:ce:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:07:28 2025 by rpki-client