Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
File: v9P33PxgiR_DiPpcHb118nuVGeI.mft (raw, json)
Hash identifier: qR0re8PvI5yv5WVMOSW5AP9kp9EQfJxYvF/s/XK8byI=
Subject key identifier: 25:5E:7B:7A:B7:B1:E7:45:A7:D0:47:A1:91:A4:D5:EA:49:8F:C3:51
Authority key identifier: BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
Certificate issuer: /CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Certificate serial: 0199FBEB84C9FF0F6389B029B5C9BD8BA6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 10:02:20 +0000
Manifest this update: Sun 19 Oct 2025 10:02:20 +0000
Manifest next update: Mon 20 Oct 2025 10:02:20 +0000
Files and hashes: 1: v9P33PxgiR_DiPpcHb118nuVGeI.crl (hash: RObNHN68JjbTHs+bq+Sawpf2OOwNC+wQN1pgkDC3F4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:84:c9:ff:0f:63:89:b0:29:b5:c9:bd:8b:a6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd3f7dcfc60891fc388fa5c1dbd75f27b9519e2
Validity
Not Before: Oct 19 10:02:20 2025 GMT
Not After : Oct 20 10:02:20 2025 GMT
Subject: CN=255e7b7ab7b1e745a7d047a191a4d5ea498fc351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:ef:12:a9:98:c8:e6:b5:d2:61:c0:50:e3:
86:84:b0:69:2d:a9:86:05:5a:78:25:e5:4f:b5:a1:
7c:b0:b3:2c:fc:21:47:37:fc:6d:c5:0c:e9:e8:ef:
f6:83:01:dd:49:af:ed:c5:b3:ad:26:9b:c8:0e:65:
e0:94:6d:9c:ea:06:e5:21:13:4f:28:b8:1b:b3:27:
a1:ed:54:f1:7f:fa:60:e1:a3:40:dd:e2:36:2f:25:
7c:15:0f:19:3b:54:91:02:05:77:ca:67:68:43:76:
43:2f:07:f5:b9:b3:7d:09:6c:92:f9:d3:29:25:eb:
a7:82:e9:a5:23:b9:46:bd:41:03:04:a3:49:05:28:
12:2b:11:ca:95:27:0d:12:77:a2:23:90:aa:de:ef:
a4:d5:8e:8e:d4:3d:0e:2e:34:60:be:4e:37:47:8a:
fa:9f:02:88:96:13:3b:9d:d4:83:34:ce:40:4e:64:
9e:b6:b0:bf:f4:87:85:bd:97:6d:eb:35:a0:22:f2:
f9:6d:00:95:40:e1:4a:9e:99:fe:d7:a2:1d:06:d7:
c1:05:e1:ce:6b:50:06:3b:7e:8c:5f:03:6a:b0:9e:
0d:1a:73:1c:28:1a:bc:d7:a4:dd:d6:5a:99:73:06:
ca:0d:db:75:3e:47:67:b2:3a:6b:4c:cd:95:e2:94:
eb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:5E:7B:7A:B7:B1:E7:45:A7:D0:47:A1:91:A4:D5:EA:49:8F:C3:51
X509v3 Authority Key Identifier:
keyid:BF:D3:F7:DC:FC:60:89:1F:C3:88:FA:5C:1D:BD:75:F2:7B:95:19:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9P33PxgiR_DiPpcHb118nuVGeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d3a695-5afe-46b6-be59-58fed2822ca3/1/v9P33PxgiR_DiPpcHb118nuVGeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3f:8f:bc:31:1d:70:f0:1d:8d:8e:48:6f:b4:be:8a:16:1e:
23:3f:0a:a3:d4:61:85:bc:fe:b4:bf:af:c5:1b:bf:6e:5e:60:
fd:9a:e9:4c:28:21:24:d5:5e:d4:a4:57:f7:a8:6f:c4:c9:1f:
a9:2f:c8:8f:0a:79:cd:b6:27:33:fe:36:a6:f7:25:70:e6:6b:
b2:36:aa:ba:ca:d3:fc:7a:86:3d:05:0a:81:96:57:90:35:16:
8b:01:c6:40:66:1c:0e:05:ba:2c:45:1d:3d:5f:97:f8:4b:7b:
d5:b7:4e:85:de:a0:b2:54:fc:a8:04:27:6a:82:97:a9:40:45:
9d:a1:c1:2f:31:fe:b5:46:58:c6:39:13:1b:c9:61:05:e0:8b:
43:54:96:fc:ea:a2:d2:a6:a8:bf:ca:35:98:74:37:b4:e6:6b:
a4:8c:41:f8:7f:61:c4:bc:5f:73:5f:60:69:84:d3:34:cc:74:
28:e3:b8:a4:fb:ce:4c:a3:6f:ed:de:89:03:c6:ed:8f:98:b8:
42:c5:4a:51:4d:4a:ac:71:9f:b5:f8:0a:30:bf:51:9d:96:0d:
18:96:4e:c1:1e:11:34:47:52:2b:60:ab:ff:4f:8f:05:70:5e:
2e:2e:04:c3:65:be:1e:d9:ef:f0:90:ab:5d:43:91:14:c6:32:
fc:69:08:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:53 2025 by rpki-client