Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
File: 0auJR6hgH0uhqFvRwHs_OE95YR0.mft (raw, json)
Hash identifier: 1wLuXHEAPMjTz3yQvSLUw4ejhyJeyhwk2Unsd+hv0wk=
Subject key identifier: BD:22:BB:69:26:49:61:03:D8:86:08:9F:89:36:C8:F9:5E:87:3C:AE
Authority key identifier: D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
Certificate issuer: /CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Certificate serial: 0199FE7E23BF4D3AAEB17BBE581D484FD864
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
Manifest number: 05D5
Signing time: Sun 19 Oct 2025 22:01:43 +0000
Manifest this update: Sun 19 Oct 2025 22:01:43 +0000
Manifest next update: Mon 20 Oct 2025 22:01:43 +0000
Files and hashes: 1: 0auJR6hgH0uhqFvRwHs_OE95YR0.crl (hash: tOTBtezSjQHfsP6s01/9y44V36rHbAAWmnIHiKXOwNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7e:23:bf:4d:3a:ae:b1:7b:be:58:1d:48:4f:d8:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1ab8947a8601f4ba1a85bd1c07b3f384f79611d
Validity
Not Before: Oct 19 22:01:43 2025 GMT
Not After : Oct 20 22:01:43 2025 GMT
Subject: CN=bd22bb6926496103d886089f8936c8f95e873cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:7d:ae:d1:c5:f0:aa:31:1c:30:ff:ee:3f:f0:
54:90:f8:8d:ff:04:e5:ae:1a:d8:d9:86:55:79:68:
66:fd:49:98:a4:ec:9b:60:b2:1d:0b:bd:bf:57:3a:
ed:ec:7f:2b:4f:7f:ca:e6:71:5a:de:41:09:3a:90:
6f:2c:a8:99:71:69:2a:2a:76:81:9f:ad:50:92:0e:
b1:2f:c6:3e:b0:6f:22:7a:f4:ab:c0:17:48:9b:02:
8c:53:c1:d6:f4:c2:bc:7a:f3:9c:da:7d:fe:d4:32:
ae:72:3b:88:84:31:63:b9:33:ab:2d:f1:38:42:bb:
5a:65:82:13:c2:0e:ad:d1:82:ea:ad:02:6f:b7:1e:
30:b1:60:c1:6c:cd:f9:53:9e:71:87:68:1a:46:c8:
75:a0:b2:e1:53:07:71:e0:99:f2:d7:a7:0b:55:3b:
8f:0b:32:1d:24:4d:54:5a:c3:a0:bb:1b:a1:fa:12:
ae:7e:7b:9a:40:07:ee:b1:19:87:ac:e1:84:a7:45:
71:f9:4b:b4:82:68:12:8f:82:c5:d7:49:a4:04:a5:
8e:92:9a:bc:5b:51:fc:58:50:b1:db:85:2b:be:c6:
04:df:8b:c0:1c:b9:38:c2:d7:fd:ff:01:0e:5e:f7:
36:f8:99:fc:d7:03:ed:a1:a4:e2:c6:f9:a6:b2:1f:
d0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:22:BB:69:26:49:61:03:D8:86:08:9F:89:36:C8:F9:5E:87:3C:AE
X509v3 Authority Key Identifier:
keyid:D1:AB:89:47:A8:60:1F:4B:A1:A8:5B:D1:C0:7B:3F:38:4F:79:61:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0auJR6hgH0uhqFvRwHs_OE95YR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/618e36-e0c3-428a-afd1-43cc90117aac/1/0auJR6hgH0uhqFvRwHs_OE95YR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:ec:06:88:39:94:ff:14:33:6a:0d:2c:fc:4e:74:e3:87:98:
52:a5:1c:b6:d3:3f:a7:0f:07:c7:b6:5e:28:f9:fd:e5:28:58:
bf:9a:9f:be:dd:95:11:1c:83:2d:7d:7e:24:da:2c:ae:ad:77:
84:26:b8:c1:77:e7:c3:bb:d4:a5:39:6f:07:c5:e9:82:83:90:
7f:11:bc:f3:7f:ae:ab:dc:3b:ec:ff:10:cc:3a:91:be:34:3c:
05:f6:22:50:6d:5e:49:b1:9e:f7:7f:51:50:13:be:cd:b6:56:
3c:35:5a:18:ac:0b:8f:79:58:3c:09:f1:81:f2:23:f6:39:c2:
d8:5d:68:5a:e3:92:32:19:4c:5d:5e:96:0b:40:32:fd:a1:d4:
16:81:30:32:02:2b:7d:b3:9b:eb:3e:d9:ce:dd:84:61:58:0b:
8f:b9:f5:a9:56:db:7f:40:ee:8b:1f:b3:2e:3d:75:a6:d5:71:
57:05:a4:4c:55:80:a4:bf:ac:1a:2c:94:37:76:20:bc:aa:87:
23:d1:41:af:23:51:4f:64:b0:d9:ef:bc:0f:e7:a2:0f:a2:21:
72:b3:dd:26:f9:ab:3a:c3:cf:9e:e2:9a:79:a1:13:93:63:f5:
75:2a:d5:46:4e:1e:f0:fb:55:24:ff:30:3e:a2:d5:d0:30:80:
2e:83:77:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 04:50:05 2025 by rpki-client