Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
File: cLqzJoCFMIofjVcIS52qHr-V4Nw.mft (raw, json)
Hash identifier: 5jIygKVUvLrLk6rSsH1pUPfPHoMlzfELhfT7q6jIiLI=
Subject key identifier: E2:AC:9C:2D:EC:41:BD:C0:E8:62:EF:06:9C:54:D9:60:85:E0:10:42
Authority key identifier: 70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
Certificate issuer: /CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Certificate serial: 0199FBEBC32FF9228E27142973DBACAB8AD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
Manifest number: 16DC
Signing time: Sun 19 Oct 2025 10:02:36 +0000
Manifest this update: Sun 19 Oct 2025 10:02:36 +0000
Manifest next update: Mon 20 Oct 2025 10:02:36 +0000
Files and hashes: 1: cLqzJoCFMIofjVcIS52qHr-V4Nw.crl (hash: OI3HD+oFgq9yf/Th99YKdCqvTKGMXhQGmOuDjgZPB+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:c3:2f:f9:22:8e:27:14:29:73:db:ac:ab:8a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70bab3268085308a1f8d57084b9daa1ebf95e0dc
Validity
Not Before: Oct 19 10:02:36 2025 GMT
Not After : Oct 20 10:02:36 2025 GMT
Subject: CN=e2ac9c2dec41bdc0e862ef069c54d96085e01042
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e3:63:68:a3:d7:6b:0b:fd:7c:0c:7e:7d:26:
62:56:ef:8e:a0:8e:9c:a1:71:9d:f7:a4:ac:10:e9:
20:98:f7:4a:f6:a6:f0:4f:5f:a5:9e:37:d0:d5:c4:
e0:57:65:de:02:fb:ae:91:6a:b8:a3:89:d4:8d:48:
b0:ce:5a:56:ff:4a:e7:5e:97:d5:33:c1:5d:19:c1:
66:41:9f:2e:16:b5:b3:5f:8e:1f:c0:3b:00:d8:e6:
95:22:4c:c6:76:af:d6:54:b0:ae:33:e7:18:21:25:
82:69:6a:22:e8:a5:16:d3:92:0f:4d:0d:cd:eb:4e:
33:39:02:6d:70:40:96:0c:7b:d5:35:02:4e:21:49:
3f:58:f5:50:c2:50:32:e7:f8:b8:23:4d:9f:48:d6:
53:ab:9f:cd:e5:73:77:fa:11:3e:35:22:04:e4:b5:
bd:ca:c9:27:82:c6:67:ef:4f:e9:4f:5f:58:70:1d:
d5:b4:56:dc:43:33:61:ac:e1:cb:c9:ba:68:5d:24:
4f:e0:78:30:78:ce:4c:54:2c:d1:dd:8e:7c:8d:b2:
65:dc:1e:41:af:7e:63:fb:37:d2:6a:61:3e:17:51:
c1:23:57:66:b8:ac:c9:81:17:99:da:f6:0a:2e:02:
3b:98:dd:d7:ed:db:d9:ff:79:e7:9a:84:bd:27:f2:
02:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AC:9C:2D:EC:41:BD:C0:E8:62:EF:06:9C:54:D9:60:85:E0:10:42
X509v3 Authority Key Identifier:
keyid:70:BA:B3:26:80:85:30:8A:1F:8D:57:08:4B:9D:AA:1E:BF:95:E0:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLqzJoCFMIofjVcIS52qHr-V4Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6fd3ef-d558-4e70-a214-52aefb6568ae/1/cLqzJoCFMIofjVcIS52qHr-V4Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:25:5d:f8:c0:11:54:57:ff:54:dc:0b:a8:11:3f:16:06:
51:c7:cc:ee:d8:1e:51:3e:cb:a7:89:a4:9d:22:9d:ef:b0:93:
46:a2:94:04:bd:be:a5:94:02:19:73:ff:82:14:13:78:40:da:
3f:4e:0a:9e:5f:1b:4d:ab:45:f1:60:91:26:1d:05:14:d2:41:
fa:0f:ef:e7:1d:52:3b:53:43:fb:ce:9c:50:6d:0f:d1:ba:29:
65:50:f9:ea:1a:52:f5:24:3f:64:07:71:4a:7b:c4:52:fb:5c:
56:5a:16:97:d2:9a:07:1d:cc:71:1a:92:c7:ea:1d:85:aa:eb:
38:12:37:02:49:16:14:88:64:28:10:0a:34:77:d4:bf:e2:54:
89:e0:c0:f1:1a:ed:6d:c2:8a:5a:21:2f:f3:1c:9d:67:4d:11:
e2:b3:4a:3c:6e:96:5f:f5:f2:c2:3d:e4:da:a4:a9:0f:b2:e2:
bf:1e:66:5c:29:d0:16:34:24:fd:38:ee:7a:96:e0:ec:38:59:
ff:6d:9f:35:cb:19:4a:89:89:90:cd:5e:e1:c3:1e:4f:1b:bf:
bb:31:e3:c2:d5:98:3d:8b:57:56:8c:02:a8:58:00:11:b8:ac:
ec:8e:24:84:9f:8f:c4:d8:05:fa:8d:a4:02:ca:f9:69:19:21:
ef:ba:52:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:46 2025 by rpki-client