Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
File: 6Md5F2XIhNCFX-0_-MPycJmpoBo.mft (raw, json)
Hash identifier: DJCzSVdDd9s/jhLHqg5kMUbEWMgYibSAI15lgkdjEe0=
Subject key identifier: 2A:F9:BA:1D:25:58:CB:C6:AE:E4:E8:EC:23:32:B3:FB:EA:34:95:30
Authority key identifier: E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
Certificate issuer: /CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Certificate serial: 0199FC58D1BCBBAA1D7FAF5501FE557A74F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 12:01:43 +0000
Manifest this update: Sun 19 Oct 2025 12:01:43 +0000
Manifest next update: Mon 20 Oct 2025 12:01:43 +0000
Files and hashes: 1: 6Md5F2XIhNCFX-0_-MPycJmpoBo.crl (hash: JWngVI9cZdDmz6ko+70ZArB/QF4Q2eDhgy9AuHW5JRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:d1:bc:bb:aa:1d:7f:af:55:01:fe:55:7a:74:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8c7791765c884d0855fed3ff8c3f27099a9a01a
Validity
Not Before: Oct 19 12:01:43 2025 GMT
Not After : Oct 20 12:01:43 2025 GMT
Subject: CN=2af9ba1d2558cbc6aee4e8ec2332b3fbea349530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9b:3c:75:30:27:5c:d0:4d:be:6d:36:05:54:
ee:64:f6:78:0e:a8:df:51:ce:c7:a9:c3:98:9b:7f:
f6:d3:d4:fa:ed:5a:52:58:c8:16:3c:0a:9e:30:7b:
97:3e:bf:92:e6:7f:e7:a7:b0:71:14:3d:da:d8:52:
83:26:c4:30:5d:9a:2f:fb:a7:75:07:ae:21:3b:29:
3c:67:1b:7c:7d:41:3a:68:f6:7d:12:89:71:28:4b:
f5:45:8c:d3:36:2d:45:8c:e8:8c:35:c2:0d:a7:de:
c9:a7:84:67:fb:d6:c4:5e:5d:e5:08:3f:bf:48:03:
5f:a4:63:2c:75:d4:25:1a:17:eb:4b:3c:89:8b:f0:
8d:c2:0b:42:fc:41:1a:61:45:45:18:df:c6:f5:42:
84:9e:b4:94:36:2e:83:60:f9:c7:19:b7:e0:2f:e2:
92:d5:1a:a0:9d:6a:a9:03:2e:3a:68:ac:07:60:19:
81:ad:fe:9e:af:3b:ba:6a:04:27:d1:81:d9:75:7a:
53:68:32:3a:34:bd:d1:1b:9c:75:b3:13:5d:ad:0d:
78:04:97:a6:04:7a:53:6a:3c:11:8e:59:e3:f6:46:
d4:2c:cf:f3:88:44:ea:91:56:80:6f:7c:47:9b:ee:
1b:8d:da:8a:f2:26:3c:ea:c3:94:ed:ad:13:85:db:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F9:BA:1D:25:58:CB:C6:AE:E4:E8:EC:23:32:B3:FB:EA:34:95:30
X509v3 Authority Key Identifier:
keyid:E8:C7:79:17:65:C8:84:D0:85:5F:ED:3F:F8:C3:F2:70:99:A9:A0:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Md5F2XIhNCFX-0_-MPycJmpoBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4bdfcb-4385-47cc-b081-95b1d71bcc89/1/6Md5F2XIhNCFX-0_-MPycJmpoBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:6f:53:57:f6:4c:00:db:89:71:04:20:f9:d0:07:f5:a7:9a:
bb:62:62:cb:c9:5d:06:a6:2a:35:b7:9d:5f:0c:0d:55:7a:5e:
c7:cc:08:7f:b5:d0:8b:4c:75:ec:64:18:eb:84:da:4d:66:e3:
5f:83:64:57:41:ed:92:94:a9:71:d1:f7:7a:57:83:54:27:5c:
05:c5:ff:40:b8:a0:0d:93:83:5e:33:a6:b8:60:2b:63:da:ad:
39:f2:15:4b:32:78:7f:55:81:6b:bb:f2:cf:f2:d9:09:9c:ae:
53:92:f2:83:96:6e:0a:60:11:95:57:50:b8:e7:1f:c6:9e:13:
81:3e:9b:f7:96:57:21:d5:21:56:60:4c:44:ef:d8:0f:cb:0d:
f2:32:48:0b:95:bc:43:3e:7d:17:b3:2b:35:bb:08:28:e8:35:
4d:e9:6b:72:04:3e:67:66:e1:fd:09:f7:db:77:97:16:95:34:
4e:46:73:64:d8:13:c7:b5:a2:61:d1:3a:b9:9b:69:a5:93:db:
12:35:e1:2f:e3:05:82:f6:d6:8c:8b:4e:55:7a:10:45:4b:7f:
69:5d:06:91:9f:85:08:58:ca:ba:21:6c:b1:2b:c9:ee:51:aa:
2c:16:f5:88:7d:17:78:c7:65:c1:d6:61:43:52:8d:00:84:7b:
97:e0:60:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:07:15 2025 by rpki-client