Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
File: Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft (raw, json)
Hash identifier: tMo+OMB3bFATOaJsEoFR9CDz9uYwJDTEWLyHHHFeFpM=
Subject key identifier: AC:5B:06:71:7B:38:B7:15:03:6D:8C:15:FC:42:0C:51:B2:C9:63:C3
Authority key identifier: 47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
Certificate issuer: /CN=471d7371241346c6ea9a476946802172ca07566b
Certificate serial: 0199FFC7162A45558331F5077FB677638984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
Manifest number: 0A19
Signing time: Mon 20 Oct 2025 04:01:01 +0000
Manifest this update: Mon 20 Oct 2025 04:01:01 +0000
Manifest next update: Tue 21 Oct 2025 04:01:01 +0000
Files and hashes: 1: Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl (hash: mH9YTWcSFSP29CBzsyOtGzjK2j007D1cZ1cdhO8D0gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:16:2a:45:55:83:31:f5:07:7f:b6:77:63:89:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=471d7371241346c6ea9a476946802172ca07566b
Validity
Not Before: Oct 20 04:01:01 2025 GMT
Not After : Oct 21 04:01:01 2025 GMT
Subject: CN=ac5b06717b38b715036d8c15fc420c51b2c963c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:94:da:14:02:37:e8:91:05:56:97:3c:50:
85:5f:69:9d:2c:59:1c:5e:7f:82:f0:b6:e0:00:9b:
ba:af:2b:53:1f:b4:3a:b0:fc:f9:b0:41:2b:15:16:
71:00:90:d6:97:96:77:ce:fc:c5:f8:a2:9b:18:db:
39:4d:ae:ff:0b:c7:8c:cd:ea:5f:7b:21:93:33:74:
19:28:1d:5a:a6:85:29:34:a9:07:4a:e3:09:df:06:
89:83:a8:d1:cf:2b:67:c4:70:74:48:cf:71:4d:97:
0a:3a:7b:1d:8d:dc:dd:8c:8c:c5:83:0c:39:d5:4a:
1e:4f:67:df:cb:8e:0a:f6:5a:b8:5c:13:5c:d0:89:
84:3a:7b:63:7a:44:da:5f:bf:ca:f4:2c:9c:3e:80:
f5:5c:12:e5:4c:42:e4:7a:9b:bd:11:d2:70:9b:9d:
fd:2f:a3:23:13:51:4d:2c:51:b6:ea:b0:7d:fa:fe:
10:20:2b:8e:17:4c:47:33:d1:a4:b7:09:7e:75:3a:
82:51:34:3a:ce:98:56:57:71:fc:39:b7:14:77:60:
38:9b:b4:9d:21:bd:1b:6e:bd:51:ea:fc:73:b4:2e:
da:c7:d5:03:45:ba:c0:b9:38:fd:68:27:1a:0a:69:
f4:18:a5:e6:74:49:cd:06:a2:b0:e1:2d:66:29:8a:
9e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:5B:06:71:7B:38:B7:15:03:6D:8C:15:FC:42:0C:51:B2:C9:63:C3
X509v3 Authority Key Identifier:
keyid:47:1D:73:71:24:13:46:C6:EA:9A:47:69:46:80:21:72:CA:07:56:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rx1zcSQTRsbqmkdpRoAhcsoHVms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d0815c-5b26-4317-8e75-5691f1738aba/1/Rx1zcSQTRsbqmkdpRoAhcsoHVms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:60:08:60:d3:a1:32:8e:81:e1:be:c7:26:78:33:f3:af:f6:
d6:69:1e:94:84:a5:26:6d:94:a5:92:3b:55:4a:e8:80:27:30:
6d:1d:c8:5f:69:da:ec:46:86:11:c6:af:04:77:aa:7f:74:99:
b5:27:97:52:b4:2a:df:4a:91:73:4c:ac:f6:23:92:06:ca:91:
18:65:22:c4:14:f6:c0:53:5d:49:04:4d:c7:e8:bd:d5:d4:c0:
c4:6f:92:97:ab:b0:b0:34:99:83:66:c4:f9:ba:52:41:ec:fd:
7c:22:9e:45:a5:2f:fc:30:eb:00:3c:90:5a:78:46:47:75:49:
c3:78:49:09:fc:e7:6a:12:9f:46:8e:23:82:e9:48:27:54:a7:
10:9f:3f:d8:e2:d1:ce:55:f0:a4:f2:8f:6d:3b:73:33:e4:07:
f0:f2:bf:80:d6:ed:6c:8a:77:57:6c:4b:da:62:69:14:b5:e5:
42:cc:37:ba:48:5b:c2:72:86:c9:f8:09:dc:2b:23:60:a8:24:
2f:2e:22:aa:5f:7c:ee:c6:4a:0f:f7:d6:6c:54:2d:9b:78:aa:
76:9a:cd:ab:77:58:a4:42:4e:cb:96:55:04:0b:c4:49:d5:9c:
32:3e:ef:2a:23:f7:b9:54:4d:c2:9f:93:2f:8c:3d:26:c4:10:
61:22:f0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:04:46 2025 by rpki-client