Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
File: V1qbLylkIBK0cD0kDrweyD5H030.mft (raw, json)
Hash identifier: G3NuKZNJq4E6HYs2Vc2qLWNIDolizq00fdrBEFurNSA=
Subject key identifier: 20:1A:ED:3B:A5:B6:DD:1A:BB:A1:11:C2:8D:45:49:B1:43:51:6B:3E
Authority key identifier: 57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
Certificate issuer: /CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Certificate serial: 0199FBEB8D4294B7F6CBF9B80CD82BF2BDBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 10:02:22 +0000
Manifest this update: Sun 19 Oct 2025 10:02:22 +0000
Manifest next update: Mon 20 Oct 2025 10:02:22 +0000
Files and hashes: 1: V1qbLylkIBK0cD0kDrweyD5H030.crl (hash: +RgssCqS1VaDmA+IivgbV7EXnZeCLGUJNWltpjEsWdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:8d:42:94:b7:f6:cb:f9:b8:0c:d8:2b:f2:bd:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=575a9b2f29642012b4703d240ebc1ec83e47d37d
Validity
Not Before: Oct 19 10:02:22 2025 GMT
Not After : Oct 20 10:02:22 2025 GMT
Subject: CN=201aed3ba5b6dd1abba111c28d4549b143516b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:ea:90:82:7e:b9:10:ce:b2:13:aa:9c:89:
1f:21:fd:9b:dc:5f:4a:ff:d5:f6:df:11:16:cc:ba:
26:56:f1:c8:76:aa:e8:ea:0d:db:0b:76:d4:67:30:
15:02:05:3c:3d:ad:0a:4d:2d:56:91:15:a1:28:8f:
5e:3e:b9:ff:fb:ca:46:a6:2e:a6:ee:4a:4b:b4:bb:
4a:b0:9e:59:f1:92:ef:54:fa:71:4e:e2:f2:bc:0a:
0d:a6:24:5e:d7:c1:20:de:6a:7d:8c:44:cd:4a:ca:
88:53:b5:b7:d2:bb:21:d2:52:5f:c4:e9:7c:a6:23:
e2:3f:27:cf:f2:3c:8d:64:07:10:0a:8b:d8:98:ec:
12:ab:a2:10:0b:64:c1:c4:17:76:11:60:31:22:bb:
a9:81:7a:60:e2:63:11:b0:48:e8:1c:d3:79:cf:0b:
e4:fc:42:43:8a:b7:94:91:5e:38:75:33:98:57:9b:
86:ff:8b:66:b5:11:d7:bb:02:1a:ac:b3:1f:7f:00:
ca:43:7c:c6:4e:c7:4c:94:d2:3a:dc:7c:f7:fb:a6:
b9:88:d8:b1:d2:d1:fb:11:66:f3:bc:44:af:b1:84:
3f:20:5a:b5:66:ad:b5:98:a2:ab:b0:17:76:f0:02:
48:3b:10:03:aa:0e:c9:44:aa:d2:13:2c:07:2f:dd:
01:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:1A:ED:3B:A5:B6:DD:1A:BB:A1:11:C2:8D:45:49:B1:43:51:6B:3E
X509v3 Authority Key Identifier:
keyid:57:5A:9B:2F:29:64:20:12:B4:70:3D:24:0E:BC:1E:C8:3E:47:D3:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1qbLylkIBK0cD0kDrweyD5H030.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/275f7e-8cdd-4c36-a096-3c4c05f18730/1/V1qbLylkIBK0cD0kDrweyD5H030.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:00:de:90:36:46:da:75:83:12:c5:ec:4c:4c:15:a8:59:26:
bb:68:a1:80:57:ac:d7:ea:55:d5:d2:ad:e2:f4:b2:83:b7:a8:
9b:84:2a:a2:1b:8c:0e:3d:80:46:38:f9:85:bf:b6:17:e9:98:
8f:00:5f:6a:78:dd:2b:53:18:a8:0d:eb:2c:9d:52:af:c6:d2:
01:81:df:ba:25:92:19:58:76:af:38:29:35:af:44:e8:cf:0c:
f5:f5:d7:cd:06:fd:42:49:32:0b:01:8e:46:84:66:e2:25:5c:
5d:f2:db:fe:d6:0a:96:c9:39:75:ce:cf:83:08:be:80:66:ba:
c7:50:35:6a:96:f4:7f:ac:f5:22:7d:8e:6b:2d:c3:a1:9a:ca:
92:94:ec:63:5c:e5:26:e3:4a:ee:64:b9:1d:b2:40:a2:27:1d:
29:25:c2:1e:39:0b:61:ab:11:0a:7a:26:05:9f:13:8b:57:84:
a7:c4:61:73:d7:42:09:22:57:26:7c:1c:fa:b3:0a:34:c0:1f:
bf:34:7b:c2:f2:6f:8b:58:d5:14:a1:12:85:d0:b1:a8:b6:f1:
38:8b:90:9c:b8:39:82:83:aa:d4:74:c8:32:75:60:90:5c:cb:
3e:8a:c9:9f:e1:18:6d:0c:26:be:41:a2:80:0f:ec:49:35:0a:
bc:32:c9:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:41 2025 by rpki-client