Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
File: 11d1Kggad4_B0s7hsNaqRdUaLEk.mft (raw, json)
Hash identifier: oeIA8ZW0WzN8k96viPc6skrlScauFAC7ndyE9s//C54=
Subject key identifier: FB:72:4D:80:9C:32:6F:6F:CF:D3:84:4C:7B:C7:CE:EB:CC:55:BC:AD
Authority key identifier: D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
Certificate issuer: /CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Certificate serial: 0199FCFDB6A414353E86E9F42A54FEE1171B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 15:01:49 +0000
Manifest this update: Sun 19 Oct 2025 15:01:49 +0000
Manifest next update: Mon 20 Oct 2025 15:01:49 +0000
Files and hashes: 1: 11d1Kggad4_B0s7hsNaqRdUaLEk.crl (hash: lNi3wRj6+STIpMPGI6YlqXFV06FTZNSSUs2nuqv4LVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:b6:a4:14:35:3e:86:e9:f4:2a:54:fe:e1:17:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d757752a081a778fc1d2cee1b0d6aa45d51a2c49
Validity
Not Before: Oct 19 15:01:49 2025 GMT
Not After : Oct 20 15:01:49 2025 GMT
Subject: CN=fb724d809c326f6fcfd3844c7bc7ceebcc55bcad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:53:2c:15:e0:b2:c2:af:f6:04:09:d3:17:5a:
15:75:13:48:dd:13:b3:b6:ac:5a:48:47:c4:52:2f:
26:18:18:e7:0c:9c:bf:06:86:e7:5c:a9:74:90:97:
2f:ee:02:91:3a:c8:7c:02:5c:2d:28:ca:4f:ee:36:
e9:85:f9:d0:1f:2f:14:09:e3:ca:68:76:cc:ba:67:
33:a0:40:fb:97:51:56:eb:30:a1:51:76:c1:5c:70:
40:69:32:f0:32:14:ca:0c:95:bd:cc:52:ec:80:93:
1f:11:f4:ac:5e:27:64:92:e4:46:aa:a5:8d:ef:45:
29:f1:d5:c7:b5:0c:a8:9c:86:67:5b:fe:1b:72:4f:
a4:18:2c:6a:63:be:98:82:c6:22:09:36:78:6f:5f:
e5:9f:60:5b:36:b6:78:5f:ea:7e:95:7b:c9:00:8b:
eb:fa:61:51:54:ce:fc:83:62:1a:ff:38:3b:0e:96:
f0:f9:68:df:c6:04:4c:8f:5c:ac:00:fb:91:5a:6f:
e0:28:9b:83:89:08:f5:e9:85:49:14:51:8a:42:d4:
9d:da:ab:f9:d4:46:77:0e:2f:b4:06:89:08:1e:3f:
55:31:ab:d5:dc:67:6f:bd:99:c3:96:af:69:9a:a3:
d4:7d:ed:5c:25:a0:18:a6:6d:34:41:62:88:cd:bb:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:4D:80:9C:32:6F:6F:CF:D3:84:4C:7B:C7:CE:EB:CC:55:BC:AD
X509v3 Authority Key Identifier:
keyid:D7:57:75:2A:08:1A:77:8F:C1:D2:CE:E1:B0:D6:AA:45:D5:1A:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11d1Kggad4_B0s7hsNaqRdUaLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7a83bd-2bfd-4c68-bea3-b41ad1069a3c/1/11d1Kggad4_B0s7hsNaqRdUaLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bb:e2:2b:9b:8d:98:af:20:06:85:4c:5a:46:93:da:2e:ea:
64:2d:0a:83:dc:58:a3:cf:cb:2e:c8:8c:b2:92:5d:d7:14:76:
82:ac:9c:3f:bf:e5:2b:61:d6:ee:91:99:79:a9:30:e9:6f:71:
c4:0e:85:29:19:45:3d:93:d1:db:7e:ec:a3:fa:b1:7b:68:df:
e1:7d:72:43:41:f1:dc:0d:6c:b5:1b:7f:4a:73:73:04:2f:73:
a8:dc:bf:b7:fe:74:78:fb:92:3d:5c:28:0c:02:e0:89:c1:fe:
88:fc:b8:fe:97:b2:d0:a0:d2:bb:73:04:d9:61:85:a8:0c:2d:
cd:03:1f:c4:82:e2:c0:b7:08:94:89:33:24:08:06:38:04:4b:
4c:5b:4b:36:bd:36:4b:11:7b:1c:05:c2:7f:fb:c4:a6:47:bd:
fe:c5:8e:c8:58:4b:61:d9:fb:09:18:7a:72:12:8e:c6:cc:b2:
36:3f:06:9d:62:e1:de:9e:ea:37:95:29:51:fa:41:dc:29:09:
f2:76:9b:1c:44:74:20:84:5f:f7:19:9b:f2:90:60:14:71:6f:
93:2c:4d:db:ca:d9:d1:65:8a:30:88:77:ec:14:2d:9c:40:c7:
e6:75:bc:d6:ce:a5:a9:a4:d9:f3:41:5b:52:3d:cf:5c:7d:c7:
fe:66:2a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:55:05 2025 by rpki-client