Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
File: _oN5mWfs0ExTYUie5M-gmM5DaHE.mft (raw, json)
Hash identifier: xvZIF6bMf/KtiZiqhkrXutWYWnXt+lbY0MfB63a2OVQ=
Subject key identifier: 64:30:72:16:F6:CE:C8:4E:0F:8D:77:E9:77:96:6C:D5:EC:72:D5:CB
Authority key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
Certificate issuer: /CN=fe83799967ecd04c5361489ee4cfa098ce436871
Certificate serial: 0199FBEC045C957BF24E90FB9975EE3C6DD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:52 +0000
Manifest this update: Sun 19 Oct 2025 10:02:52 +0000
Manifest next update: Mon 20 Oct 2025 10:02:52 +0000
Files and hashes: 1: _oN5mWfs0ExTYUie5M-gmM5DaHE.crl (hash: OZ85bupQQcqvjHpnADRZsxkk+qs90riN3C+EE/Mv0iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:04:5c:95:7b:f2:4e:90:fb:99:75:ee:3c:6d:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe83799967ecd04c5361489ee4cfa098ce436871
Validity
Not Before: Oct 19 10:02:52 2025 GMT
Not After : Oct 20 10:02:52 2025 GMT
Subject: CN=64307216f6cec84e0f8d77e977966cd5ec72d5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:b1:55:f9:e5:b2:87:0f:58:68:e8:65:de:
48:53:44:26:8f:00:20:f7:a6:e3:ff:c3:90:ee:0f:
49:b0:8e:71:80:3d:53:de:d8:e0:9d:f7:01:94:29:
35:b3:24:75:78:9f:35:d9:77:7d:6c:63:b3:43:60:
25:d0:7f:0c:51:e5:bc:1a:8d:ee:40:c5:cb:17:60:
41:45:88:32:f9:39:38:fb:f8:31:1c:24:93:e4:e5:
01:96:af:6c:c5:b0:94:98:92:80:1b:8b:57:0c:c2:
2d:9a:6b:42:98:0b:2b:42:5d:8d:03:42:dd:3b:50:
0d:78:df:a8:8a:e7:4d:e5:a4:9e:3e:23:7a:42:b1:
67:35:fb:43:a8:a2:db:91:11:c6:56:a2:b2:03:df:
7a:ff:ae:3d:53:b9:00:e9:f6:1d:a3:6c:04:12:12:
db:1a:2d:2c:d0:90:04:89:79:b1:52:d8:6f:08:45:
24:68:36:6d:24:08:3d:1e:4d:3f:be:3b:49:db:d6:
fb:11:e7:25:3c:d0:79:f9:3e:42:77:ce:d6:b2:7a:
e5:dd:da:7f:0b:69:88:6d:c5:41:08:af:40:33:0f:
e9:4e:20:33:35:19:7e:39:90:91:b0:9e:5d:e1:be:
3e:97:fb:68:61:68:48:7b:7e:cf:70:8e:c6:2c:5e:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:30:72:16:F6:CE:C8:4E:0F:8D:77:E9:77:96:6C:D5:EC:72:D5:CB
X509v3 Authority Key Identifier:
keyid:FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b7:45:8a:3d:0f:d3:c4:23:60:28:a5:0b:73:ab:cd:e4:a8:
2f:d7:9a:a4:61:7f:d5:0e:88:57:69:e3:12:23:37:ba:66:dc:
f8:74:86:a5:87:dd:15:e4:8d:5c:01:ca:b9:4e:fe:ac:1f:53:
82:f1:ad:47:8c:8c:5c:cc:bc:4e:05:25:d4:50:e3:0a:f0:9c:
e5:fb:6f:63:d9:03:e5:46:95:c1:87:4e:32:9b:04:08:80:6a:
9d:7a:37:e7:e1:77:fc:35:14:11:dd:2a:07:0e:88:03:db:bc:
17:0a:64:a7:94:13:c1:a8:d8:a2:5c:0f:5e:62:2a:dd:ba:60:
14:09:8d:2f:97:84:49:fc:41:fd:9e:e5:fa:d4:f8:0f:49:ec:
d5:0b:e3:5c:48:34:60:c2:7e:73:b2:26:e1:b1:76:bf:94:f5:
52:57:12:f7:7a:fc:c3:b8:3d:e5:d6:09:00:3c:40:4e:4c:76:
fd:5b:b5:7f:25:a3:7e:e6:f7:71:1a:de:c5:93:dc:68:ed:11:
87:ca:cc:96:e3:a9:ec:c3:41:4d:7e:3c:db:b4:02:4b:60:f3:
b6:98:8d:17:d0:0d:c3:0f:35:d1:59:6f:64:a1:27:bc:81:2a:
a0:e7:6f:f0:0a:c2:55:bc:12:02:9d:94:68:09:9d:7c:58:1f:
e1:1b:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:31 2025 by rpki-client