Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier: KTGfJi3wcwMuFo7IAJ2CGRp0uo09XFDsKPQQfSIguyM=
Subject key identifier: 1A:A4:D1:F6:76:1D:A9:9E:C3:68:2B:F0:AB:23:9B:A1:39:33:2C:3C
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial: 019A01B518C9F49501AF3DCCEAA4DDC8C156
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number: 0AAD
Signing time: Mon 20 Oct 2025 13:00:36 +0000
Manifest this update: Mon 20 Oct 2025 13:00:36 +0000
Manifest next update: Tue 21 Oct 2025 13:00:36 +0000
Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: Y16slWMQM0C5Tn9MgOhOPtaDteIBU43BQOqah2yZ4pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b5:18:c9:f4:95:01:af:3d:cc:ea:a4:dd:c8:c1:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983ea291971990dc486f93812783fadd87ade863
Validity
Not Before: Oct 20 13:00:36 2025 GMT
Not After : Oct 21 13:00:36 2025 GMT
Subject: CN=1aa4d1f6761da99ec3682bf0ab239ba139332c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:02:a3:48:b9:da:43:41:55:5a:11:8a:8b:6f:
b0:8b:f8:97:f9:55:0d:00:61:86:93:d4:3c:ec:ac:
95:2e:c2:4c:aa:d5:2b:6b:73:8b:e2:5e:ba:0c:99:
92:11:4f:0f:d6:61:54:d9:ab:a2:90:49:c2:9b:d6:
ef:28:d5:af:f6:38:b2:a6:82:b2:93:22:8d:e8:fd:
a8:d8:25:76:8e:d3:36:ae:76:a7:a0:27:2b:ca:9d:
a1:ea:4a:a0:ac:93:e1:b7:19:88:f4:26:8a:2a:6e:
a0:24:73:22:e3:25:47:d4:53:b1:b3:28:45:ec:81:
07:db:20:cc:1f:6c:96:5d:69:14:9c:51:b1:b0:48:
f3:ba:56:88:0f:e9:1b:8a:f2:11:29:e3:e2:2c:67:
2d:85:81:02:af:ad:ef:a6:0e:7d:d0:de:4a:78:6e:
49:b6:e3:5c:58:06:64:fe:1e:75:7a:0f:be:b6:b8:
34:ac:54:d2:e1:76:b2:f3:51:6c:0a:25:36:51:87:
6c:8f:06:a4:8f:e9:18:37:fc:40:09:6c:a4:11:a0:
e5:6f:f0:3f:d4:d4:d5:e8:69:dc:15:fd:fb:8c:00:
dc:37:0a:de:5c:04:6d:8e:e1:aa:bd:fa:06:73:72:
e8:d5:3c:2a:07:63:ba:97:27:ef:26:7b:f0:01:19:
e0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A4:D1:F6:76:1D:A9:9E:C3:68:2B:F0:AB:23:9B:A1:39:33:2C:3C
X509v3 Authority Key Identifier:
keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d8:8c:01:bd:91:e8:e8:b8:67:a1:8e:ea:a7:4b:91:66:23:
35:e6:68:de:1c:4a:64:1c:73:36:33:6b:f5:6c:ef:94:f8:83:
3a:90:31:ab:33:90:85:3a:8d:45:96:42:93:d4:cd:9a:fb:49:
d8:84:fb:6e:8e:73:6e:3e:ad:3d:7d:0e:f3:3f:3f:4d:89:4b:
f6:0b:71:a1:3f:f5:ca:41:d0:cd:3a:80:bf:d2:2b:1d:cb:0a:
20:0f:c2:0e:0a:31:58:13:48:02:82:41:fe:17:ac:50:20:61:
b8:72:b0:df:4b:96:95:88:c0:b8:7c:d8:8d:70:01:48:33:6f:
00:26:b4:34:c2:7d:15:4f:86:66:f4:d9:66:6c:22:38:1e:91:
cc:e1:63:0b:c7:57:4c:f5:37:cc:a3:77:8b:22:5c:91:1a:dd:
18:47:2d:ae:bf:82:1d:63:9d:c8:ad:49:46:b8:fa:bb:55:4e:
b4:5f:8c:b8:bf:73:d5:19:ec:c5:40:ef:72:1f:88:e7:90:6c:
c1:40:8e:94:11:b6:e9:76:0b:60:b1:cf:bd:db:4f:68:6d:e2:
d2:88:e8:c7:19:99:ec:d2:be:84:5f:f7:09:a0:70:6c:62:60:
b4:fb:33:89:b8:f3:40:12:81:f4:50:e1:24:04:82:11:d3:ac:
39:37:e6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:21:09 2025 by rpki-client