Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
File: RK3etuoTlfaY9C51Qa70kkJiX2I.mft (raw, json)
Hash identifier: UQ8LNaBppKaYGG8ZuLwJxpHb1HFeKKiuDMOy1DB4GV0=
Subject key identifier: 6C:E8:25:20:37:98:61:81:2C:24:01:40:47:A6:EA:A9:20:AE:61:58
Authority key identifier: 44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
Certificate issuer: /CN=44addeb6ea1395f698f42e7541aef49242625f62
Certificate serial: 0199FBEC1AAA3202B386566B511D603909C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:58 +0000
Manifest this update: Sun 19 Oct 2025 10:02:58 +0000
Manifest next update: Mon 20 Oct 2025 10:02:58 +0000
Files and hashes: 1: RK3etuoTlfaY9C51Qa70kkJiX2I.crl (hash: n6jvIWUlZj0sbKMBd4A9g4j+vORBHUz3pFSM5YNjAik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:1a:aa:32:02:b3:86:56:6b:51:1d:60:39:09:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44addeb6ea1395f698f42e7541aef49242625f62
Validity
Not Before: Oct 19 10:02:58 2025 GMT
Not After : Oct 20 10:02:58 2025 GMT
Subject: CN=6ce82520379861812c24014047a6eaa920ae6158
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ba:22:47:e7:fc:f0:c4:8b:fd:20:a7:fd:eb:
57:1e:6c:c8:73:99:1d:ca:3d:6b:c2:8b:9a:95:cc:
23:6a:29:aa:04:5f:d7:bc:80:8a:0a:0c:b7:d2:b2:
09:97:03:a3:bc:4c:8c:67:48:3f:03:58:66:a4:b0:
5d:0a:b2:07:35:56:23:00:f4:3c:b3:2c:93:b6:41:
33:39:f4:ee:54:df:55:c6:61:91:b9:12:fa:bc:56:
7f:a6:ed:2f:9c:af:23:f2:01:18:4d:7d:85:9c:a2:
1b:ec:aa:bb:ec:4c:3a:5c:4e:be:73:41:41:c7:f5:
4f:71:19:72:9c:0a:6c:a3:54:e3:57:5c:8c:e0:17:
c2:04:fd:f8:a3:19:1a:ae:a6:84:c4:92:d9:cd:8b:
a0:1b:16:67:29:aa:2f:d8:bd:e0:a9:38:42:01:fb:
ba:63:ee:ab:a6:35:45:28:9e:e2:4e:06:6d:93:5a:
2e:f3:2f:b9:cd:0e:bc:d2:db:c9:2c:0b:06:53:e9:
b7:0d:26:2b:44:fa:cc:44:8d:2e:d8:fd:8e:22:9c:
e8:99:93:d3:1d:00:31:ac:07:bd:8c:cd:f3:a0:99:
61:6b:49:c5:2f:0e:6f:65:e8:f0:8b:d8:bc:a8:c1:
1e:5d:d3:8e:3a:0f:03:53:fd:eb:d7:e7:82:dd:50:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:E8:25:20:37:98:61:81:2C:24:01:40:47:A6:EA:A9:20:AE:61:58
X509v3 Authority Key Identifier:
keyid:44:AD:DE:B6:EA:13:95:F6:98:F4:2E:75:41:AE:F4:92:42:62:5F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RK3etuoTlfaY9C51Qa70kkJiX2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4a6ef1-b4ee-4a14-9384-4714f971b78b/1/RK3etuoTlfaY9C51Qa70kkJiX2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:de:55:c9:65:f5:a5:77:64:4b:0c:e7:8d:2e:b5:f7:ff:0a:
5a:da:e9:31:2c:3b:47:88:35:59:d6:47:d6:53:71:47:78:b5:
b2:ea:a5:ad:eb:64:b3:a9:a0:2e:19:78:d9:a8:34:bf:46:56:
aa:18:eb:6a:b3:50:53:b5:66:a5:01:29:1c:37:89:e7:b3:96:
57:54:68:43:d1:95:0a:e8:60:fd:41:1e:f7:b5:d1:1f:86:64:
a7:0a:2b:6b:56:57:12:00:b1:20:d4:60:e4:71:49:6b:3b:5f:
36:41:fb:10:e6:40:87:ba:9f:10:57:93:2a:31:85:70:c8:87:
26:3d:6d:89:1f:7e:62:f0:fd:eb:82:b8:d8:9a:7b:2f:a8:b5:
3d:97:8d:2b:80:e9:60:b1:60:29:64:73:9c:d5:f3:be:b8:7b:
92:4f:16:18:44:8b:d2:ca:4f:84:a9:2b:53:b1:45:ae:bd:84:
88:ed:59:82:40:2f:df:bb:7a:67:c9:4e:2e:1f:8b:b0:40:74:
0b:5b:6c:bb:e3:38:13:9b:c3:37:9c:28:70:8b:32:48:f8:3a:
6f:68:4e:fb:2b:87:d9:af:fb:fe:d4:89:33:64:e9:c4:db:61:
03:c0:9f:28:c7:da:b9:b5:59:a9:69:66:3c:cc:d9:ed:f7:dc:
ff:33:a7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:13 2025 by rpki-client