Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
File: rRIanMsoPqIejQoHCi4LakDph30.mft (raw, json)
Hash identifier: a+BJZQtV5xeTDnS2yVOIZBAJYlMwM3ShN0iA4Fn9bkQ=
Subject key identifier: 81:CE:D3:FE:F7:52:4E:99:73:AA:38:0E:3B:F5:1D:D8:8D:83:7E:20
Authority key identifier: AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
Certificate issuer: /CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Certificate serial: 0199FFC75AB7FEEC808598009CBD10372404
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
Manifest number: 16E0
Signing time: Mon 20 Oct 2025 04:01:18 +0000
Manifest this update: Mon 20 Oct 2025 04:01:18 +0000
Manifest next update: Tue 21 Oct 2025 04:01:18 +0000
Files and hashes: 1: rRIanMsoPqIejQoHCi4LakDph30.crl (hash: x57XUpIuhIPhAsILV3xU++q5SHmIbrRMoXoNzUSjpRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:5a:b7:fe:ec:80:85:98:00:9c:bd:10:37:24:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad121a9ccb283ea21e8d0a070a2e0b6a40e9877d
Validity
Not Before: Oct 20 04:01:18 2025 GMT
Not After : Oct 21 04:01:18 2025 GMT
Subject: CN=81ced3fef7524e9973aa380e3bf51dd88d837e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0e:49:1f:c8:f8:be:4a:a6:bf:7d:53:18:6b:
f8:67:9a:51:2f:85:ab:04:80:53:1d:8c:eb:2f:a5:
92:18:5a:f4:0f:7d:2a:61:32:5e:f0:6c:53:f1:88:
ab:68:e2:cb:3a:dd:fc:c2:d1:a3:50:aa:a2:47:12:
26:f8:d3:6f:1d:4e:60:21:79:55:e7:d2:5c:91:fc:
d0:68:85:18:c7:88:73:44:bb:28:c5:f2:7a:ce:4a:
e3:3f:fa:0c:2d:2d:15:fd:dd:ab:07:3a:9a:0e:a1:
4b:83:e1:6a:ca:a1:15:e0:77:2b:1c:2f:3e:b4:af:
f5:14:97:86:b6:0a:d2:44:bb:ce:69:c4:f4:b3:56:
43:28:78:9c:7e:c0:36:34:59:3f:5d:4c:a9:b5:9e:
07:59:d6:4d:db:03:35:15:6c:3b:91:d6:21:59:0c:
50:f1:c9:78:56:a0:fc:66:d1:b3:50:83:ff:2f:ff:
31:b1:36:2b:ca:59:16:15:fe:fc:71:62:b2:bd:0e:
01:72:c6:3c:57:5b:85:f4:c4:e2:f2:b8:5a:2a:34:
2c:b8:7e:fc:16:31:76:86:00:c8:7a:82:b8:c2:da:
84:00:0f:18:a0:00:43:1f:61:9e:69:42:bf:d1:c2:
fd:24:23:37:c0:82:c8:8c:c5:77:e3:3b:7e:c2:d3:
ea:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:CE:D3:FE:F7:52:4E:99:73:AA:38:0E:3B:F5:1D:D8:8D:83:7E:20
X509v3 Authority Key Identifier:
keyid:AD:12:1A:9C:CB:28:3E:A2:1E:8D:0A:07:0A:2E:0B:6A:40:E9:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRIanMsoPqIejQoHCi4LakDph30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/27f7fa-b019-4842-a6a6-59df73d3bb91/1/rRIanMsoPqIejQoHCi4LakDph30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c1:10:fb:88:e1:88:0d:25:0f:a9:24:8a:f2:f6:37:76:e3:
c2:fd:95:05:e1:b2:ed:5f:32:7a:e8:57:2e:a5:fa:94:40:3b:
52:f6:9e:ed:04:9b:bb:f4:1e:db:c5:09:7d:d8:ac:4c:02:07:
e7:97:da:5e:ca:51:4b:3f:23:f6:4d:76:a5:10:be:91:5f:9b:
84:e3:bb:63:bd:5f:28:dd:22:a7:7c:a3:cd:a5:a5:70:dd:09:
b3:44:51:9d:44:12:a1:71:0e:00:3e:77:b3:bf:e8:1a:0d:5f:
5c:e6:9b:c8:c7:3c:ee:40:c5:22:dc:8b:8f:76:57:a5:f3:79:
77:dc:40:e4:6c:27:1b:e4:87:1b:4b:d4:33:10:42:1e:33:51:
32:fa:62:25:90:1e:a7:f8:64:b7:b5:3a:b6:ff:73:fd:77:38:
96:d4:58:20:b3:3d:70:25:9a:c4:a3:7b:24:b5:6f:38:82:3b:
62:80:73:86:7a:17:0b:03:38:46:d7:b0:97:9f:da:89:9c:a1:
69:c0:ed:dd:b8:a1:d5:4b:f1:23:c4:5b:22:39:35:01:77:7b:
18:b8:40:9d:10:f5:85:ab:77:88:fd:a6:4e:7f:d4:fb:a0:86:
eb:e5:ad:fe:5a:83:4b:c0:8d:c0:3b:de:ac:59:23:4c:ef:9d:
8e:77:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:32:11 2025 by rpki-client