Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: Dwo/ilomvHth4lcX1DmCehg03+D2VSu2xj4C251DsI4=
Subject key identifier: 44:54:05:56:8C:CB:78:E5:63:4D:31:26:1F:7E:A8:0F:97:13:3D:8A
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 0199FBEB0ABDA01ACCDFC377D6CCE40AAD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: jxqs+mxYQOtkR8jiCdBdBrUF217ibwAPHUHVFxvigB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0a:bd:a0:1a:cc:df:c3:77:d6:cc:e4:0a:ad:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=445405568ccb78e5634d31261f7ea80f97133d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:06:aa:c1:a6:89:c7:8d:99:96:1a:44:28:
ac:72:6a:bd:40:6c:d7:e8:d1:b8:9c:1e:cb:a9:b4:
4f:8c:a3:42:b6:24:e0:f9:7c:27:2e:04:64:97:cd:
2a:d2:61:86:0a:2b:65:19:a7:9d:cf:6f:2e:38:22:
f4:1b:30:f9:f4:8a:26:ca:be:a0:e8:37:d5:f8:c8:
ec:06:3d:6d:5d:e9:92:63:af:c1:e1:de:41:82:7b:
a5:83:ef:7c:03:e3:87:39:db:44:ae:fd:55:71:20:
a4:a1:fa:3d:2f:f6:da:3d:72:4b:f0:e9:7f:75:0c:
ea:be:94:74:e2:72:65:4b:40:81:fa:74:33:9e:98:
a3:47:3d:93:d9:e8:f0:f8:d0:13:90:29:50:ac:8a:
50:fc:2f:21:57:cf:d7:de:68:79:26:61:ed:7d:92:
a4:ec:aa:df:92:0e:95:f7:44:a3:df:bf:a6:c6:db:
74:7b:ba:f0:a5:0f:7b:7e:72:23:9c:8c:b0:34:29:
13:ff:6d:37:56:1d:d8:fe:ab:f2:58:e8:b7:39:24:
a5:d0:94:19:04:22:8a:7d:39:ff:cc:31:be:9f:e8:
69:0a:27:f8:68:bc:6d:63:36:be:ea:f9:1c:5c:e1:
f5:94:4e:7d:ba:49:25:1c:39:1a:29:be:e1:1f:3b:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:54:05:56:8C:CB:78:E5:63:4D:31:26:1F:7E:A8:0F:97:13:3D:8A
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:f9:a8:d5:1a:a1:f8:3e:46:a3:b0:44:82:e4:ae:e6:ff:34:
ce:b2:d2:68:84:83:94:84:64:6d:3d:37:05:e2:ee:80:a6:62:
1b:e3:83:4e:4b:9f:82:ed:fd:da:8f:d2:08:18:b3:c2:bd:c1:
ac:7c:95:f9:93:85:8e:7a:7b:b1:1d:a1:37:60:c6:ec:b8:5d:
33:0b:ce:c5:b1:e0:c8:30:a2:95:38:ec:50:74:8a:d3:e0:81:
8b:2f:e8:27:17:ba:b2:86:18:8c:b4:ec:37:4b:5d:99:b5:48:
2b:63:6b:d6:61:d2:26:eb:5a:93:41:e6:2c:42:1c:c9:3b:3f:
0d:bd:3e:f4:30:6d:35:8f:75:42:6d:e7:ab:e3:f7:78:9b:a1:
21:66:d4:25:83:79:96:ca:2b:b4:25:0d:63:07:31:39:1d:f6:
b9:ae:64:99:4e:7a:0a:58:37:cb:fe:65:4c:8f:62:ed:c1:f9:
35:29:21:65:02:50:b4:d3:bd:a8:c7:0c:ab:9b:7f:db:23:f3:
a0:c1:15:57:37:ea:5b:7f:fc:3f:2f:02:ff:40:11:20:52:96:
b8:37:66:b6:08:f3:9b:76:72:48:58:90:45:11:f6:82:ed:54:
94:23:c9:8a:21:7f:d0:5d:c8:51:36:0b:2d:9b:6f:14:91:dc:
c8:0d:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:53:43 2025 by rpki-client