Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
File: enUOttEsV-pkMLnwI5XK8qgb7Pg.mft (raw, json)
Hash identifier: eBfNG4VcfTrKr38rGM3SGJKyA3V0RUNVdPz0vM0kGOs=
Subject key identifier: 95:3C:1E:41:C1:BD:BB:8C:2D:2B:B3:53:BA:14:16:8D:A5:EA:D1:75
Authority key identifier: 7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
Certificate issuer: /CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Certificate serial: 0199FC58ED86149110814CCDC523D2386083
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:50 +0000
Manifest this update: Sun 19 Oct 2025 12:01:50 +0000
Manifest next update: Mon 20 Oct 2025 12:01:50 +0000
Files and hashes: 1: enUOttEsV-pkMLnwI5XK8qgb7Pg.crl (hash: kCotgP9en2lYmjNoGkhXA6bf+EnhF/Pf1p/s+tMIrcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ed:86:14:91:10:81:4c:cd:c5:23:d2:38:60:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a750eb6d12c57ea6430b9f02395caf2a81becf8
Validity
Not Before: Oct 19 12:01:50 2025 GMT
Not After : Oct 20 12:01:50 2025 GMT
Subject: CN=953c1e41c1bdbb8c2d2bb353ba14168da5ead175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:60:eb:16:36:8d:de:e0:5d:42:fd:57:30:17:
b4:79:23:90:e1:5d:ea:4d:91:64:94:6e:d2:9d:2f:
f4:0c:6c:72:66:da:55:1c:80:38:7b:8b:6b:7c:8f:
a6:ee:b2:09:d8:c2:bb:94:15:58:be:f7:d6:9a:11:
8f:d1:e6:26:7c:28:13:96:5b:ba:68:2d:1d:65:7a:
2a:fb:97:54:d6:c8:fd:da:97:6a:ea:5d:f8:2f:2a:
e5:64:59:29:9d:a6:d8:47:9e:d2:5e:71:57:92:6e:
50:9a:96:39:7c:9e:1c:33:73:59:aa:de:50:b9:ea:
6c:66:9c:af:d0:c5:c9:06:10:d5:4b:d2:5c:42:0b:
83:ae:fe:12:04:ec:5e:f3:a4:3a:57:50:f2:6f:ca:
f5:56:63:d2:d0:b1:60:08:74:3c:6a:3c:49:bf:71:
84:ba:25:be:1f:6b:93:96:a9:dd:e3:37:f1:66:00:
46:0b:44:72:a7:1c:93:87:52:9c:56:43:da:45:68:
4b:4d:34:a2:c3:55:8c:b1:b6:54:fe:6d:77:55:04:
a9:c8:12:91:e0:48:b6:ab:5f:7e:30:a2:17:6f:f8:
d2:40:45:4e:54:52:8c:e5:86:b4:11:98:6f:5f:6f:
5a:44:d3:8d:cf:7d:7a:f9:79:8d:0d:2f:77:17:b7:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:1E:41:C1:BD:BB:8C:2D:2B:B3:53:BA:14:16:8D:A5:EA:D1:75
X509v3 Authority Key Identifier:
keyid:7A:75:0E:B6:D1:2C:57:EA:64:30:B9:F0:23:95:CA:F2:A8:1B:EC:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/enUOttEsV-pkMLnwI5XK8qgb7Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/98dc6f-be56-4c8d-b94e-57227982a000/1/enUOttEsV-pkMLnwI5XK8qgb7Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:fb:bd:4d:0c:ae:b5:71:04:1a:4c:16:e0:1f:3f:b3:91:07:
2d:4d:ee:4f:48:b3:1d:67:76:98:b5:65:5c:3d:b2:2d:ca:5a:
b5:0e:a2:4a:ef:58:7b:67:5a:aa:ff:a9:6f:dc:ae:32:be:43:
37:41:9c:6e:6b:be:27:74:69:33:0c:be:71:c2:34:14:35:f7:
29:60:5f:48:2e:f7:0e:5e:be:af:b4:90:01:c7:21:73:da:39:
06:ab:d8:8b:e3:1b:a0:ef:0b:70:68:4a:04:d8:45:d4:01:47:
40:d8:34:a2:8b:a3:07:6e:b0:30:0a:8f:d3:95:c4:bb:b6:dd:
26:ba:3f:ac:5b:92:7e:a5:d0:9e:9a:a9:a2:7b:3e:9d:c0:2d:
4e:51:33:b9:14:6f:ce:fb:24:75:b8:f3:c9:f4:31:bd:ad:01:
4c:91:1e:51:28:08:15:fa:f6:36:99:b0:61:f7:b3:a7:63:6f:
68:3f:1d:aa:94:c4:5f:e0:6c:24:a9:14:64:34:16:1f:b0:77:
f5:be:24:ea:4e:2b:bd:ad:b0:aa:a1:0e:df:d5:fa:30:b8:e6:
15:52:75:f4:17:32:85:fa:1d:61:e1:e0:3b:6c:bf:d2:07:87:
1d:a0:0f:e2:99:2e:bf:e1:93:fb:2c:36:b2:0f:a6:e1:d6:f8:
b8:93:a1:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:48:00 2025 by rpki-client