Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: w2FbfwQoffTjwFDZJMF6eyFmZlaGwDwWE2qip9mIRPk=
Subject key identifier: C7:01:80:D0:E4:7C:10:B4:24:F3:45:37:44:5D:E5:91:7B:91:C3:D7
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 0199FC8F83D832B7EB779639A456F6C30D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 1564
Signing time: Sun 19 Oct 2025 13:01:27 +0000
Manifest this update: Sun 19 Oct 2025 13:01:27 +0000
Manifest next update: Mon 20 Oct 2025 13:01:27 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: ERkVexjXkc2AQoWpXHw2Tj1SXATWgD902IpJQihI1H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:83:d8:32:b7:eb:77:96:39:a4:56:f6:c3:0d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Oct 19 13:01:27 2025 GMT
Not After : Oct 20 13:01:27 2025 GMT
Subject: CN=c70180d0e47c10b424f34537445de5917b91c3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:3f:fc:1b:c9:aa:d4:d9:d7:5e:19:19:46:
b2:78:7c:ba:83:12:6a:70:b0:e0:92:33:dc:c0:3d:
1f:2b:32:d6:f4:52:e6:b0:27:7d:ab:74:cc:6d:8c:
5f:78:c4:98:c1:8a:3b:50:6d:37:fc:9f:71:74:86:
82:e8:b2:c3:4a:25:9e:0d:a0:32:f1:ca:50:e3:25:
3f:c5:36:95:ac:eb:75:24:23:d9:fb:bd:df:56:77:
da:c5:21:aa:6e:4d:4f:f8:63:b7:3d:32:0d:55:43:
09:bf:73:2d:d6:b0:1a:75:96:57:58:e6:ad:6b:e1:
e5:13:c2:66:29:98:61:49:ef:16:d0:c5:09:3d:5e:
1d:c2:bc:ee:ed:7d:55:f6:ba:f5:70:1e:ac:d1:c7:
4b:35:2a:f0:17:96:f0:63:4b:a6:af:52:f5:11:a9:
2c:e9:25:c4:4d:2a:71:a3:13:db:0b:6f:ea:d6:c8:
b5:27:df:4c:fa:91:26:21:fd:14:ce:3a:33:7b:1f:
db:7b:8d:45:9a:40:ec:1b:39:28:a1:23:0f:b3:73:
60:e6:6b:8a:f3:bb:86:7c:d4:0e:2a:2c:49:3a:96:
1e:58:3b:e1:8b:47:cd:ae:2c:b4:17:51:47:d7:82:
03:f0:2b:59:ab:4e:90:7a:a1:51:69:b4:f5:75:18:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:80:D0:E4:7C:10:B4:24:F3:45:37:44:5D:E5:91:7B:91:C3:D7
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d3:b6:d7:89:63:83:f8:30:e6:7f:36:07:d4:03:dc:8e:c5:
fc:e5:dd:93:8e:32:08:6b:0d:d3:7a:1d:32:f9:51:3d:84:fc:
90:0d:76:01:01:c4:03:6d:59:04:6c:ae:e0:f7:62:33:6f:d4:
6a:07:06:96:b6:72:2f:d0:fc:5a:1c:45:6d:d1:2f:dd:3b:3b:
56:50:3c:15:79:ad:af:58:bd:4c:61:57:ba:86:d9:e5:5c:0f:
9c:60:66:fa:0c:2f:ee:9b:7c:12:a5:3a:8b:3c:f6:ff:0a:fa:
a5:e7:86:96:ec:aa:d7:f8:67:02:86:75:e4:04:5d:eb:76:ad:
8d:8c:c6:cf:3f:f6:26:56:48:ee:74:cd:ec:a5:b7:23:ca:f9:
8b:9a:68:e9:91:c1:c2:e2:20:57:8a:25:16:4c:64:a0:7f:6d:
30:2a:35:49:80:ee:21:ff:cf:17:e4:ab:1d:c9:85:76:e9:04:
b9:c1:37:33:66:ab:03:49:7f:7f:ca:c5:35:a9:aa:a0:49:8c:
6a:ef:da:66:93:1e:bb:62:ea:34:16:02:25:a0:bc:81:c5:1a:
8a:b1:8a:55:80:65:ce:34:cc:64:49:fa:bb:20:ce:b8:0c:5a:
78:50:62:6c:89:57:da:85:c9:a7:de:b4:d4:d0:35:92:bf:74:
af:c4:41:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:26:49 2025 by rpki-client