Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
File: r-84RCk7rWUf_YV8ka8L5WCuzWE.mft (raw, json)
Hash identifier: Cim0wGXREkLwfrP83mE6ph19E+s8r16ja9UWVpntExs=
Subject key identifier: A4:E1:D0:F3:DA:66:80:CC:13:23:C5:04:EA:A4:31:89:73:BD:AA:AA
Authority key identifier: AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
Certificate issuer: /CN=afef3844293bad651ffd857c91af0be560aecd61
Certificate serial: 0199FE7DCD87207D4051B7C60506893D936E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 22:01:21 +0000
Manifest this update: Sun 19 Oct 2025 22:01:21 +0000
Manifest next update: Mon 20 Oct 2025 22:01:21 +0000
Files and hashes: 1: r-84RCk7rWUf_YV8ka8L5WCuzWE.crl (hash: VAg9ngd8PLoeQyPT1eLMrTu9xfaEHpcy2ogfpI1W8zE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:cd:87:20:7d:40:51:b7:c6:05:06:89:3d:93:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afef3844293bad651ffd857c91af0be560aecd61
Validity
Not Before: Oct 19 22:01:21 2025 GMT
Not After : Oct 20 22:01:21 2025 GMT
Subject: CN=a4e1d0f3da6680cc1323c504eaa4318973bdaaaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:46:8d:4a:a9:02:ba:95:bf:54:cd:98:35:
d0:e2:54:ac:68:0e:68:bb:12:7a:bd:e0:cd:67:83:
b7:fd:a7:9f:46:6e:82:a8:0e:d2:56:24:61:0f:cd:
3b:42:c6:85:fd:d4:00:b4:13:65:d9:b8:c9:13:b7:
b5:6d:4a:f5:50:d4:47:d9:c4:da:ca:95:8b:c0:7f:
1b:06:e3:b3:27:f7:68:60:cb:0d:9f:63:72:22:a5:
89:9f:1c:ab:f2:8b:75:6a:ec:f9:6d:b5:49:a7:bb:
90:43:8b:88:7c:58:19:34:66:ea:59:21:8f:69:22:
86:2a:c5:8d:8c:80:9f:44:12:fc:21:af:ca:f2:7d:
ca:25:67:ac:f4:ba:4f:ed:95:30:6b:48:73:d2:1a:
9b:fd:95:83:d0:34:ab:be:58:a1:1e:af:0f:87:5a:
c0:af:07:5c:7d:e7:53:20:fc:f8:6c:a9:f4:75:e7:
30:18:ea:37:8b:5e:93:bd:c9:cb:1b:c7:f3:ed:b2:
92:e1:56:3e:af:da:a4:73:54:ee:9f:0a:ee:1c:87:
51:5f:52:40:91:2e:83:82:c9:5f:dd:64:01:72:e5:
5b:0a:63:8d:c6:b6:af:c4:2e:e4:0b:e4:57:3f:63:
d1:e0:e7:d4:e1:32:93:d6:4c:bd:fd:6c:66:e5:3f:
83:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:E1:D0:F3:DA:66:80:CC:13:23:C5:04:EA:A4:31:89:73:BD:AA:AA
X509v3 Authority Key Identifier:
keyid:AF:EF:38:44:29:3B:AD:65:1F:FD:85:7C:91:AF:0B:E5:60:AE:CD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-84RCk7rWUf_YV8ka8L5WCuzWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/b4a4c0-c53f-45bb-8e85-a9b4614f0744/1/r-84RCk7rWUf_YV8ka8L5WCuzWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:4e:0e:6c:03:95:de:fa:09:15:ed:d2:71:e3:cc:4f:8a:1b:
64:76:40:75:d1:48:e0:36:0b:88:f6:55:40:3d:c6:9c:16:1d:
8f:12:11:13:71:ea:9a:df:69:1e:f3:ac:96:45:13:23:cb:5d:
38:42:aa:f0:17:36:0f:c3:e1:9e:7c:ef:20:da:ae:c7:64:a1:
00:0c:bd:2c:52:85:72:af:8f:f8:25:99:23:f1:cb:8f:ae:b5:
ce:2b:6e:19:4e:ca:ac:8e:d3:38:be:52:b7:09:db:ea:22:2d:
e6:12:21:d4:9f:39:e3:52:74:5d:3a:bc:ff:98:cf:2c:69:9f:
ae:ec:97:9a:e3:4e:de:7e:a2:76:58:6e:2a:2a:6d:4e:8a:6c:
fb:25:82:ef:69:b4:b8:65:1c:1f:be:0e:87:35:aa:48:c0:d5:
b5:f7:ab:bd:73:e8:ad:d2:fb:a0:4e:36:d8:d7:cc:45:91:00:
10:88:b7:68:6b:17:a8:c4:d9:6b:7c:64:11:3a:b4:8f:03:43:
a3:2c:4f:c0:e9:e0:69:2b:31:a2:1b:e6:85:46:2a:95:44:91:
bc:a2:2e:03:dc:a5:32:fb:1c:ef:89:cb:e1:83:b4:fd:ea:52:
1f:f8:02:4b:33:e0:41:5c:51:b6:35:3f:3f:29:c2:79:ef:8b:
f2:9b:94:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:45 2025 by rpki-client