Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
File: b7yr8HwZyKIKdpqoKQcaszgvWIo.mft (raw, json)
Hash identifier: rD3Jl0pT8rAdJQFpeXs6wfvbaF3VNvnO6qyyKPLFZEs=
Subject key identifier: 86:5F:7B:0A:1B:F7:0C:1E:DC:44:92:AC:5B:CC:3B:1D:1C:7C:AB:D8
Authority key identifier: 6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
Certificate issuer: /CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Certificate serial: 0199FBEB5CFF6E43A87C15CD84254BBD3C12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:02:09 +0000
Manifest this update: Sun 19 Oct 2025 10:02:09 +0000
Manifest next update: Mon 20 Oct 2025 10:02:09 +0000
Files and hashes: 1: b7yr8HwZyKIKdpqoKQcaszgvWIo.crl (hash: MJtmntY/0NmzpMsisIChS2tnGUDXR97lLKQp4uEWcKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:5c:ff:6e:43:a8:7c:15:cd:84:25:4b:bd:3c:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fbcabf07c19c8a20a769aa829071ab3382f588a
Validity
Not Before: Oct 19 10:02:09 2025 GMT
Not After : Oct 20 10:02:09 2025 GMT
Subject: CN=865f7b0a1bf70c1edc4492ac5bcc3b1d1c7cabd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:54:c8:e5:26:66:74:cc:3b:c3:9e:4e:80:8c:
21:e5:a3:a6:41:2f:11:f1:54:42:84:92:9a:bb:e4:
84:80:f7:8e:6c:fc:a0:34:37:4f:bc:38:ca:09:2a:
72:a2:3f:86:17:1e:68:3a:70:17:94:68:44:7d:36:
5f:18:e4:16:54:09:c2:a9:6f:4c:15:cd:a4:07:f5:
21:1d:7e:77:15:8d:5c:21:2e:a3:29:27:8b:64:c9:
51:df:08:93:21:19:e5:a2:82:e4:5d:dd:3a:d1:e1:
26:42:31:a9:70:ee:9d:34:65:cd:03:40:66:a9:0f:
e0:66:e1:29:f9:db:b3:bd:8e:7e:a1:dc:bc:47:32:
15:ff:91:c5:a5:e3:5a:24:b4:25:16:5d:81:91:d2:
64:c0:85:06:0d:66:96:99:b3:ae:59:b2:ca:d1:bb:
81:ba:b9:66:84:8a:ac:a5:7f:08:af:ae:39:f3:47:
51:3a:98:50:34:aa:aa:81:bf:67:ad:63:88:ae:09:
5e:5c:13:22:63:b9:6a:a2:f6:8f:3b:9b:39:5b:40:
5a:3b:5a:c7:eb:84:60:27:62:88:3c:c6:06:a2:aa:
9b:fc:4b:96:1e:4b:50:43:c8:de:e2:eb:39:c9:26:
5f:01:41:2f:6b:2e:b2:ee:c0:96:0a:8a:ca:a8:4b:
ff:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5F:7B:0A:1B:F7:0C:1E:DC:44:92:AC:5B:CC:3B:1D:1C:7C:AB:D8
X509v3 Authority Key Identifier:
keyid:6F:BC:AB:F0:7C:19:C8:A2:0A:76:9A:A8:29:07:1A:B3:38:2F:58:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7yr8HwZyKIKdpqoKQcaszgvWIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/364d3e-a44d-446a-82ee-65d9e4611270/1/b7yr8HwZyKIKdpqoKQcaszgvWIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:71:fb:32:75:1f:9c:b3:97:67:3e:9d:55:14:11:ab:88:ef:
1d:19:05:58:85:ac:a5:c7:ef:89:c2:6c:8b:82:40:5b:74:36:
82:54:c6:9b:d8:51:7b:e3:cb:06:3e:c4:5b:35:4a:d6:a6:5f:
4b:2f:93:03:78:79:8a:f5:37:ca:70:91:29:6c:48:cc:78:0a:
41:d2:19:ee:40:1f:a9:3f:6c:42:27:44:d7:52:b8:a2:dc:eb:
2d:c1:24:b8:ec:0d:a1:69:89:1d:9c:02:75:bd:e7:f2:01:c8:
7f:55:28:b5:41:74:6a:d3:17:e7:16:1b:79:f8:fd:88:1f:9a:
36:fc:60:ad:92:23:30:d7:0e:0a:7a:65:08:28:b8:70:b6:df:
43:01:9e:91:01:83:6a:d3:61:21:f5:92:94:a5:cd:fb:cf:db:
c7:3c:13:c7:e4:02:1d:7e:6b:8e:23:51:5d:5d:2a:e1:02:36:
0e:5a:7f:8b:28:aa:d8:c6:6e:cc:ac:a3:9c:39:1c:f1:e5:3b:
5a:56:e3:2a:ef:68:11:da:6d:86:a9:6d:29:7a:4b:f5:d8:78:
7c:7c:80:79:c8:06:14:c1:6f:92:9a:c9:12:df:70:c0:a6:24:
77:cb:41:e1:1e:12:ac:f0:cb:55:30:84:3a:2a:0c:49:85:93:
d4:74:e5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:15 2025 by rpki-client