Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
File: y968bG1L0_xlGov0ILHtIs7pMq4.mft (raw, json)
Hash identifier: eqWuJsMbjZHNltIm9WyepTKhZf1Q29lZV7Jf4dXmDlM=
Subject key identifier: 07:16:D3:24:F8:9E:5B:98:0C:EC:A0:16:7D:A4:B4:A3:59:ED:2B:B5
Authority key identifier: CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
Certificate issuer: /CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Certificate serial: 0199FBEB8E1AADBC1E5D59DC053B5CADA6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: y968bG1L0_xlGov0ILHtIs7pMq4.crl (hash: NX52Bw8jvEeLb5BAv4mB+3xmFNUe63jUv7zWutCTKJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8e:1a:ad:bc:1e:5d:59:dc:05:3b:5c:ad:a6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbdebc6c6d4bd3fc651a8bf420b1ed22cee932ae
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=0716d324f89e5b980ceca0167da4b4a359ed2bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0a:e2:ae:c9:2b:4f:20:af:b0:33:4f:1c:f8:
90:27:b3:0c:b5:8a:43:e9:a4:4e:67:52:3f:2d:73:
9f:fc:b2:85:d9:a6:d3:50:80:37:95:ee:26:92:b7:
51:32:e5:9f:0a:64:4f:b9:f1:27:5a:c5:61:3d:77:
26:73:ce:73:46:fb:5e:50:6d:8e:43:f4:af:46:50:
e3:93:10:57:0a:82:5a:a3:14:d2:12:9d:a2:fe:cd:
6e:5f:a8:da:f4:35:1e:97:f6:8c:7d:29:8e:7d:93:
7c:a5:d8:34:14:bc:a4:20:44:8f:a6:59:ab:d1:07:
6a:8a:83:ce:3d:4d:4e:8e:16:67:28:e8:41:f3:06:
61:3f:89:11:7f:5a:13:02:67:62:eb:0f:6e:76:91:
10:d0:fe:73:fb:15:9c:87:4e:ba:50:27:ef:22:88:
e0:8c:60:a2:47:b5:81:22:dd:60:cf:79:a8:67:c9:
e1:11:9b:14:16:83:87:b1:88:2e:b5:2a:7d:e3:4e:
ba:ca:7d:79:37:f7:91:a2:bf:63:85:c0:b1:34:04:
28:56:14:35:15:1b:85:d3:c1:a1:5d:3f:d4:e7:00:
a5:4f:9a:c7:e2:8b:75:c4:e6:50:d6:c0:ed:32:bd:
18:c4:84:51:ef:ae:0e:e4:ba:03:62:d2:81:cc:f4:
be:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:16:D3:24:F8:9E:5B:98:0C:EC:A0:16:7D:A4:B4:A3:59:ED:2B:B5
X509v3 Authority Key Identifier:
keyid:CB:DE:BC:6C:6D:4B:D3:FC:65:1A:8B:F4:20:B1:ED:22:CE:E9:32:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y968bG1L0_xlGov0ILHtIs7pMq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1264b9-fdd6-4c2e-974f-cd347fca6bfa/1/y968bG1L0_xlGov0ILHtIs7pMq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b2:63:93:2c:f3:7f:cc:fe:ee:9d:89:cd:8f:e8:3c:69:04:
78:54:8c:fa:32:b5:2c:63:fd:0e:73:61:7f:2d:85:55:c7:e1:
8b:18:4d:5a:d4:04:c1:2a:30:11:c2:71:99:58:dd:11:d7:2b:
9e:cd:90:37:7a:6f:33:d6:af:da:cc:83:e6:32:43:59:c3:60:
1e:46:70:25:29:61:64:01:14:c8:7d:73:80:2f:0c:57:09:f3:
f6:9d:11:59:34:c8:05:e8:bc:bd:9e:f6:1c:f8:5d:f3:8e:65:
83:51:6c:e0:a8:aa:9f:d8:ae:d3:24:37:e7:86:fd:8d:a7:fa:
03:33:e4:83:ad:0d:05:73:f4:ac:4c:2f:3a:21:a5:d1:fc:7d:
86:fa:9b:ee:cf:dc:56:32:09:52:e9:7a:37:02:2f:3d:25:f6:
35:a4:da:af:9d:a2:94:7d:0e:10:a7:9e:76:ec:a6:57:89:2f:
56:d2:8c:5e:2e:42:a1:18:ad:89:08:c7:70:6d:32:42:9a:2a:
e4:8f:20:64:16:90:56:49:2f:f5:bf:1c:ad:4a:08:a8:c8:69:
06:59:2e:c8:6a:a0:c6:fc:15:bb:98:02:a8:ad:fc:fd:be:f0:
ad:f5:ce:17:45:30:e1:97:a5:24:2c:2f:73:e9:b9:d5:bd:3f:
13:f2:82:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:36:59 2025 by rpki-client