Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
File: g06Y-uclpT43QqjU7ehT9P9juRM.mft (raw, json)
Hash identifier: u8Ne3UXYbNs42nCdyqz+tQBA8fEb4CTJq2CQsl5xI1A=
Subject key identifier: A0:37:1E:76:95:66:DC:1C:EA:72:21:6E:9C:7B:2C:02:A7:D3:D0:84
Authority key identifier: 83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
Certificate issuer: /CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Certificate serial: 0199FFC77B2F6163816FFC6A572CDFF61509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
Manifest number: 0496
Signing time: Mon 20 Oct 2025 04:01:27 +0000
Manifest this update: Mon 20 Oct 2025 04:01:27 +0000
Manifest next update: Tue 21 Oct 2025 04:01:27 +0000
Files and hashes: 1: g06Y-uclpT43QqjU7ehT9P9juRM.crl (hash: Ar2QD/4euvkv/sYS1m5EsQBJ/iHGUc1Ez7nH07sqm8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:7b:2f:61:63:81:6f:fc:6a:57:2c:df:f6:15:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834e98fae725a53e3742a8d4ede853f4ff63b913
Validity
Not Before: Oct 20 04:01:27 2025 GMT
Not After : Oct 21 04:01:27 2025 GMT
Subject: CN=a0371e769566dc1cea72216e9c7b2c02a7d3d084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:af:19:e8:15:24:64:63:72:e9:dd:52:3a:
6c:26:09:b5:4f:cd:cd:a3:a5:94:ef:7b:44:63:1f:
43:4f:0f:87:a3:3d:88:0d:d8:87:b5:2e:3c:e4:9f:
c1:14:08:9e:5b:e7:b7:65:31:b1:39:4c:63:91:3c:
d8:19:fd:26:99:36:62:57:86:3b:3b:25:e0:67:40:
bb:08:ed:bc:60:0f:cb:62:6a:19:1b:03:73:fc:e3:
8b:42:9e:09:81:30:a0:48:96:1b:80:ef:7f:d3:34:
f1:ff:13:77:93:d2:d6:b4:a7:bf:af:e3:e5:d2:87:
d1:eb:c7:99:ec:89:cf:1b:b7:4b:b0:fc:05:17:05:
ac:e2:d6:63:e1:80:81:ff:44:07:f1:4a:3c:a8:59:
18:93:5e:84:4c:40:e4:78:26:63:b0:2b:80:ef:50:
7c:9a:48:06:76:6e:e7:75:b8:83:d3:1d:f3:49:3d:
80:d8:2b:74:3b:ac:72:10:78:0e:14:7c:94:72:cf:
49:f7:31:fa:ae:1c:68:46:0b:89:01:db:a0:90:27:
af:00:23:3e:63:84:98:7b:9f:42:ef:4a:82:cd:12:
12:6e:d4:15:28:c1:01:02:38:5a:29:34:d2:d5:67:
ae:42:d3:57:9d:dc:b1:64:92:13:02:dc:36:ba:2e:
d5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:37:1E:76:95:66:DC:1C:EA:72:21:6E:9C:7B:2C:02:A7:D3:D0:84
X509v3 Authority Key Identifier:
keyid:83:4E:98:FA:E7:25:A5:3E:37:42:A8:D4:ED:E8:53:F4:FF:63:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g06Y-uclpT43QqjU7ehT9P9juRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/576933-8a5b-4dcb-ac1f-1a529b2f5d97/1/g06Y-uclpT43QqjU7ehT9P9juRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:b2:0d:2e:ed:f0:31:77:c6:32:b5:1a:1e:30:6a:17:55:
73:68:1e:eb:7a:8b:94:56:e4:b0:bd:64:5e:bc:c3:3f:13:43:
c5:cf:7c:67:c5:d1:cb:2d:ae:5c:b2:1f:d9:cb:ca:33:19:d0:
56:c0:8c:57:5c:2a:36:60:58:43:23:2c:37:4d:7d:04:ed:7f:
9c:89:49:d7:37:5e:0c:a4:de:e7:e2:d4:2a:c8:d9:c4:c8:aa:
ee:03:f1:bb:ad:14:53:2e:04:2c:56:2c:37:66:57:07:cb:d1:
a3:a9:34:30:d4:b1:72:69:c9:c2:bc:0c:c3:cf:bd:98:5e:28:
7a:b9:75:e8:09:ad:27:92:b4:84:c2:e9:9d:a8:07:4e:25:2c:
e0:15:81:f7:dd:4e:33:53:dd:9c:de:f3:26:47:05:18:c8:72:
6d:93:fd:92:1d:ec:bd:6b:98:36:84:79:52:18:08:1d:89:0e:
ab:70:70:82:7e:97:b3:3e:29:8b:ea:1d:b1:5c:0f:80:62:4d:
84:db:07:43:74:bc:bf:9a:6a:81:52:a3:a9:8b:c7:15:fa:f1:
d8:0a:a7:bb:d7:40:95:a7:1d:5b:72:c7:96:7c:17:77:3c:2f:
ba:ff:89:34:8d:b2:09:e2:9c:c1:d3:5c:4c:58:7f:2c:d1:ff:
51:06:56:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:45:30 2025 by rpki-client