Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json)
Hash identifier: sxmN5mvQMQ+JqphGZNsLy3O9BjKFMuPUxwKRKk+z5NI=
Subject key identifier: 2B:07:30:FE:40:52:6E:85:8E:02:F8:2E:CD:BF:A8:B5:76:E7:3A:92
Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Certificate serial: 0199FBEAA3048CC0484542840C0B23776862
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:22 +0000
Manifest this update: Sun 19 Oct 2025 10:01:22 +0000
Manifest next update: Mon 20 Oct 2025 10:01:22 +0000
Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: s7l8ozgyO4hlzp3ZPxCfQ2n/bAB634EmYJ2+QObhtvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:a3:04:8c:c0:48:45:42:84:0c:0b:23:77:68:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Validity
Not Before: Oct 19 10:01:22 2025 GMT
Not After : Oct 20 10:01:22 2025 GMT
Subject: CN=2b0730fe40526e858e02f82ecdbfa8b576e73a92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:26:65:8d:34:cd:ac:d5:f6:19:82:40:42:0c:
89:7a:5f:2b:a7:91:09:c0:34:3f:3f:a7:75:04:9c:
0f:d9:e6:47:ce:90:b1:72:ec:ed:6d:b8:26:e3:77:
19:4a:a0:76:c2:16:78:3e:c3:64:f9:57:96:2c:07:
a7:d8:d8:e1:6d:ce:cb:5f:2c:d2:10:68:ea:cc:12:
2c:26:e9:18:f5:ba:d1:5e:83:31:6f:3a:be:bd:e3:
a5:5e:a2:27:a0:00:67:73:86:6f:d4:3b:a0:ff:3c:
7b:2c:eb:18:8e:84:9a:37:c2:d8:18:b8:28:b9:9a:
0a:d0:7b:22:78:c6:0a:85:e2:c1:8d:be:2a:60:b2:
4e:be:aa:97:3d:34:19:ad:3e:0e:e7:45:bc:62:eb:
6e:0b:a4:64:4f:19:ac:3f:21:b3:ab:2c:72:98:f5:
92:f3:7a:a0:15:60:45:da:1b:75:a3:b7:0a:39:64:
6f:89:42:13:be:6d:8f:68:92:f7:9b:2c:49:86:51:
41:0a:f4:e0:c5:27:ac:e5:0c:23:1f:dc:87:3f:c6:
62:0f:3d:6c:b6:eb:20:75:94:cc:aa:d6:ca:74:2d:
e3:54:38:7b:8c:68:b9:7e:21:e3:2b:b1:7c:8f:8b:
0d:b8:44:69:37:01:1d:92:76:cf:83:87:cd:83:f6:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:07:30:FE:40:52:6E:85:8E:02:F8:2E:CD:BF:A8:B5:76:E7:3A:92
X509v3 Authority Key Identifier:
keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ee:d3:48:5b:43:39:60:d1:a4:39:05:fe:4d:24:95:c5:96:
3b:f5:79:f8:c6:74:ed:cb:2e:15:dd:00:d0:26:5d:fa:5f:1a:
78:ad:13:4a:7a:d1:c5:af:f1:b7:56:45:4c:80:5c:b1:ee:b0:
01:ec:6c:5d:fd:e0:dc:4c:b8:d0:1c:2f:3f:8a:d5:07:ac:24:
e7:a6:05:11:1e:0e:be:e3:ad:f6:a6:f9:ba:df:ac:a3:8c:b0:
df:e1:c5:bd:fd:a8:34:2e:58:34:3d:e2:a9:72:35:94:c7:d3:
8c:ea:90:4e:ed:a7:53:ab:7d:b8:60:4b:c1:71:b7:63:24:9d:
24:a8:17:d2:3e:c0:02:e9:01:8d:3a:86:64:53:9a:f6:f5:59:
54:2b:f3:ef:10:a9:3c:bc:e0:fe:49:49:05:eb:1c:23:fe:a3:
2c:31:bd:f5:9d:e2:1d:0f:3d:9f:ef:e2:48:f8:4b:03:c0:3b:
44:ca:3e:7d:74:14:9f:79:67:7d:9f:75:8c:b6:51:df:16:09:
58:da:68:03:fe:d7:44:0d:8c:60:9d:40:81:3e:0f:66:a5:61:
e7:13:0d:a4:38:04:00:45:96:dc:8f:92:aa:7d:bd:be:ef:8a:
26:f3:c6:c4:b6:74:00:ff:cc:b2:b8:bc:cf:2c:a0:7c:e9:b7:
91:6e:97:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:12 2025 by rpki-client