Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
File: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft (raw, json)
Hash identifier: tEgQQgNizPSp+SWG2tmeTfWH8Uhx3uMhUfuluZRYJSg=
Subject key identifier: 9D:33:7C:6E:66:66:10:1E:E7:A9:7A:FE:CF:56:E4:63:97:A5:61:A8
Authority key identifier: D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
Certificate issuer: /CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Certificate serial: 0199FC8F33F5AF5E076AD50F6B645A57EE2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
Manifest number: 161E
Signing time: Sun 19 Oct 2025 13:01:07 +0000
Manifest this update: Sun 19 Oct 2025 13:01:07 +0000
Manifest next update: Mon 20 Oct 2025 13:01:07 +0000
Files and hashes: 1: 0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl (hash: G2iXiCLc1doHcySj0+zpUiOTn1u4Z94hUMwBW79SGVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:33:f5:af:5e:07:6a:d5:0f:6b:64:5a:57:ee:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d00bd4d5682ce608e27cbe221a2677ecb507497d
Validity
Not Before: Oct 19 13:01:07 2025 GMT
Not After : Oct 20 13:01:07 2025 GMT
Subject: CN=9d337c6e6666101ee7a97afecf56e46397a561a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:4c:e6:5f:3c:0b:37:fa:ed:e0:9a:2c:35:
5f:5b:5f:90:2b:43:28:dc:4f:cd:80:6f:3d:6d:d7:
0e:78:b2:77:6f:ed:90:c2:5b:88:c0:72:e5:f3:07:
44:8c:43:e8:5b:68:b5:ff:23:12:8d:ad:d6:75:b5:
e7:27:50:ca:51:5f:22:52:33:55:b0:a4:5c:18:a0:
91:fb:f4:32:15:43:84:ac:fd:d4:10:17:2b:bc:4c:
9a:df:16:f1:d9:6a:5f:26:8f:0e:7f:1c:85:0f:34:
58:d1:73:fb:4c:2c:39:a9:8b:7e:2d:1e:42:c0:d2:
b4:b9:b4:75:8b:e8:8e:8b:f1:d8:69:27:5a:f6:06:
3a:d0:c5:2f:59:06:8f:d2:fc:79:eb:88:25:76:0e:
65:86:03:bb:ed:2a:59:98:f1:4e:c2:e7:46:b5:70:
d7:e3:e0:1b:15:57:89:d3:de:5b:0b:13:e5:5d:67:
6d:31:bb:d7:40:24:03:21:fa:6f:0f:8a:82:b3:af:
a5:27:2c:b4:17:83:d2:fc:ad:86:57:14:2a:8d:35:
c5:a0:67:98:ec:cf:01:26:1f:8f:ae:fc:45:cf:0b:
a4:2b:11:c5:7b:d0:fb:86:0a:77:9e:5b:16:57:5c:
2a:b5:b8:34:79:58:65:09:f0:41:ff:ed:b5:9e:03:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:33:7C:6E:66:66:10:1E:E7:A9:7A:FE:CF:56:E4:63:97:A5:61:A8
X509v3 Authority Key Identifier:
keyid:D0:0B:D4:D5:68:2C:E6:08:E2:7C:BE:22:1A:26:77:EC:B5:07:49:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AvU1Wgs5gjifL4iGiZ37LUHSX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/299522-932c-487a-af3d-eb9300672ae4/1/0AvU1Wgs5gjifL4iGiZ37LUHSX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:57:39:26:87:e4:67:3d:90:52:14:1b:b7:45:24:55:63:09:
0c:41:7d:1c:dc:b0:2e:ad:d8:b3:5d:c9:48:36:43:e8:d8:66:
c1:29:cb:e0:25:d9:01:00:a1:c8:a9:7d:1e:22:a7:cc:37:e5:
be:f4:1b:2c:36:ac:3e:e2:60:9b:52:fb:11:71:88:81:d2:b9:
07:16:67:25:02:15:5b:64:8f:25:a4:f1:c8:37:65:5c:eb:52:
70:d2:e4:94:44:53:eb:0f:5b:27:5c:fa:6a:cf:2d:44:f5:a2:
ad:c1:e7:8e:4e:b4:a2:9f:ce:1a:e1:27:1f:c3:87:b1:0b:bb:
e6:4a:00:65:cf:b5:69:00:33:29:68:da:9f:4c:ec:2b:c1:21:
49:2d:18:30:33:08:e9:d8:37:ca:0a:d8:37:57:32:19:10:e2:
d2:f1:3f:2c:e1:75:7e:e7:f5:53:cf:5f:ad:fb:90:c6:8d:a0:
52:70:cc:d2:8c:3c:fe:48:52:b0:62:25:8f:69:6b:f9:46:3f:
b1:83:69:fe:8b:7e:db:ce:87:95:ae:d2:e3:7d:f0:ba:59:7d:
24:8b:12:70:26:19:6b:8c:34:22:70:1c:6f:0d:9e:48:1a:4d:
c4:6b:cf:91:69:bb:65:00:fe:bf:d9:d0:4c:5a:78:10:c3:30:
a8:97:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:31 2025 by rpki-client