Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
File: rb65YXJeTVu08lSJhtlvzG00nmQ.mft (raw, json)
Hash identifier: B5+V/+j3Z9v2c/apr3Nlo/uNOk1WytMcS3QySL374J4=
Subject key identifier: CD:06:05:F5:14:1B:78:74:7E:42:07:91:4A:57:5C:CE:0E:B4:E6:15
Authority key identifier: AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
Certificate issuer: /CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Certificate serial: 0199FC8F613424BFCC84365141E175353C87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
Manifest number: 031A
Signing time: Sun 19 Oct 2025 13:01:18 +0000
Manifest this update: Sun 19 Oct 2025 13:01:18 +0000
Manifest next update: Mon 20 Oct 2025 13:01:18 +0000
Files and hashes: 1: rb65YXJeTVu08lSJhtlvzG00nmQ.crl (hash: cNvLW9TRQj+WU7+YzKLv1Qn10nyaGRVsnFTDe+jvNSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:61:34:24:bf:cc:84:36:51:41:e1:75:35:3c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Validity
Not Before: Oct 19 13:01:18 2025 GMT
Not After : Oct 20 13:01:18 2025 GMT
Subject: CN=cd0605f5141b78747e4207914a575cce0eb4e615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6b:c3:69:c3:c0:75:06:ba:8d:bb:25:c5:f2:
b3:41:af:ed:1c:3c:eb:67:e6:ca:67:71:48:1b:31:
23:50:48:63:89:e6:0c:fd:26:d7:80:1b:0f:2d:b1:
85:dc:94:7c:7b:90:63:24:74:42:a0:00:09:d4:24:
7c:bc:e7:20:1b:7b:3e:45:c7:63:98:89:de:04:ce:
9f:fa:40:df:66:72:14:c6:cc:0c:07:10:0d:bc:0d:
f7:69:1a:3d:63:f1:ea:86:aa:c5:9b:fb:14:d2:35:
8e:a3:2e:79:be:6c:05:ca:7d:ea:3d:d8:2b:e0:ae:
5c:c4:66:01:0e:fc:05:08:d0:1e:03:28:80:d0:b8:
a0:f3:64:83:2b:ae:e1:8e:b4:e5:98:cb:cb:44:0b:
c3:dc:4f:2b:ea:c3:42:2a:ca:c0:98:ba:39:40:37:
aa:2d:e4:6a:02:b9:2b:54:a2:2c:d5:77:89:dc:65:
38:5c:8e:b3:8b:0a:80:7c:ab:be:66:d1:8d:ce:4d:
c4:a5:94:75:6a:bb:c0:60:0a:91:07:a4:45:35:54:
97:16:4b:40:9a:a6:8d:6f:d5:cf:9c:86:3d:ae:d3:
31:00:44:51:ec:c0:ac:46:b6:32:ce:7b:fa:d6:b8:
25:27:67:af:37:6a:cf:0f:6d:55:60:32:73:52:9c:
48:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:06:05:F5:14:1B:78:74:7E:42:07:91:4A:57:5C:CE:0E:B4:E6:15
X509v3 Authority Key Identifier:
keyid:AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:a0:31:77:26:2f:8b:0a:62:b9:41:45:bd:f3:5b:cd:d9:d5:
96:7e:06:22:fb:15:49:8c:1f:aa:70:74:df:a3:20:6f:17:51:
9f:73:75:43:15:2d:c0:8b:56:d2:03:bf:f1:da:f0:43:76:d1:
a0:3a:14:ec:6f:c3:3b:1d:f8:7b:a6:70:16:e4:8b:b1:75:05:
5c:64:dd:10:af:f2:40:a7:c1:9c:3c:0f:16:b7:c2:78:95:44:
c5:ed:ac:fc:48:e2:cd:1c:07:e3:8e:a6:66:f9:42:38:f6:b3:
c4:55:39:85:58:14:48:3d:eb:d0:1f:33:0b:d9:b7:fc:18:df:
61:da:54:55:64:1f:5c:3d:20:71:32:97:8d:ef:05:6a:6e:5f:
56:63:bf:03:4c:c1:cd:53:4a:87:48:a9:4f:99:c3:9a:59:6d:
cc:0a:31:46:c1:7e:d3:e2:c3:b6:63:c2:57:92:f1:a0:10:80:
8a:0f:71:af:d5:17:17:5c:6f:9a:10:80:52:3d:cc:39:ff:f8:
95:f8:62:e9:92:66:42:e6:1e:ea:d4:f0:2e:3b:35:e6:6d:db:
fa:ea:5a:ca:27:8d:de:fa:d6:9b:1b:eb:7a:f4:04:6d:81:a7:
e0:c2:18:6a:7e:22:c6:f4:01:4d:e7:e1:8a:d8:45:67:4d:8c:
7f:ac:20:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:40:26 2025 by rpki-client