Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
File: cNbQfLZOoOgZ46Cyngk_5Bljspo.mft (raw, json)
Hash identifier: tslZ2/6iShxSy0LKOMmaXSxu9BFL64E61OhvFmjk3e0=
Subject key identifier: B6:64:21:E2:55:9D:F0:C5:03:EB:7B:81:05:F0:5F:6A:BC:CA:FE:10
Authority key identifier: 70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
Certificate issuer: /CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Certificate serial: 0199FAA1601EC1362132C6CE0BE4113FD617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 04:01:43 +0000
Manifest this update: Sun 19 Oct 2025 04:01:43 +0000
Manifest next update: Mon 20 Oct 2025 04:01:43 +0000
Files and hashes: 1: cNbQfLZOoOgZ46Cyngk_5Bljspo.crl (hash: M87tw6fQTsLR/04Vcd3jz940YDepeErB7BhMLG1NVzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:60:1e:c1:36:21:32:c6:ce:0b:e4:11:3f:d6:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d6d07cb64ea0e819e3a0b29e093fe41963b29a
Validity
Not Before: Oct 19 04:01:43 2025 GMT
Not After : Oct 20 04:01:43 2025 GMT
Subject: CN=b66421e2559df0c503eb7b8105f05f6abccafe10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:66:c7:a7:f1:87:48:cc:14:f3:d5:2e:45:
56:df:e6:2f:56:29:b3:a7:61:a7:00:e8:6b:02:03:
d4:93:f2:23:a4:e5:87:d1:81:3d:a1:f2:7f:34:1f:
1c:33:f7:bb:d2:c4:68:69:4b:64:f4:c5:33:08:91:
65:3c:8f:d9:16:54:bb:5b:5e:1b:c1:30:e1:de:eb:
14:19:01:95:41:7c:9d:d5:3e:a4:5d:e0:25:cc:cd:
1e:2b:c8:d5:8c:44:73:25:d8:53:44:11:49:49:04:
c3:69:33:99:11:3c:db:3d:46:aa:67:7d:38:ba:aa:
2b:58:15:46:ef:d3:06:9b:d6:bf:68:4a:83:7d:9c:
93:3b:a6:39:35:be:75:bd:0a:5f:1d:ac:ba:dd:b1:
8a:ec:00:31:1d:fb:2d:3d:68:73:f0:c6:cb:29:c7:
98:62:b5:f8:6d:56:92:27:b6:12:24:81:2e:5d:ed:
3a:8f:ee:9f:ff:0b:7a:53:f8:9d:23:1f:d3:c5:8c:
98:7c:f9:76:61:fc:9b:91:ab:4a:14:96:c4:4e:de:
bd:a7:ef:ab:e7:9e:90:61:10:ee:f2:86:37:0c:0f:
9c:21:a3:37:8d:13:5d:c7:48:59:f9:c9:45:cc:35:
cd:9f:32:e2:ce:1a:a9:e5:5c:fd:c4:15:15:5c:da:
71:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:64:21:E2:55:9D:F0:C5:03:EB:7B:81:05:F0:5F:6A:BC:CA:FE:10
X509v3 Authority Key Identifier:
keyid:70:D6:D0:7C:B6:4E:A0:E8:19:E3:A0:B2:9E:09:3F:E4:19:63:B2:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNbQfLZOoOgZ46Cyngk_5Bljspo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/05910b-25d8-413d-ac58-824c77f891c9/1/cNbQfLZOoOgZ46Cyngk_5Bljspo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:3e:20:f5:6f:4a:7d:ec:50:23:5d:4b:38:4a:82:ae:71:87:
f4:c2:6f:36:35:00:93:4d:e3:95:2c:c6:1e:b7:03:e0:c4:f5:
ac:85:e9:36:35:e2:f8:43:46:43:eb:82:51:6c:e4:d6:9b:03:
5b:37:57:d8:10:c4:fc:09:8d:e1:a4:04:eb:b4:80:ae:92:12:
a9:04:67:f3:e2:01:1d:57:e3:e7:6f:f9:71:46:1b:f3:91:b7:
ec:be:0b:c7:29:17:01:bf:0b:a5:35:74:e8:62:3d:8a:e0:61:
e6:1b:12:64:d5:21:2c:c5:fe:0c:21:75:39:d8:1a:4b:b8:58:
35:4f:4a:42:85:f0:25:9d:82:5a:1c:75:83:f4:1b:a1:57:f4:
6d:c9:d8:49:8b:a2:8b:1b:ad:6d:42:ca:65:1e:6b:0a:c3:cc:
f6:8c:d4:ed:63:29:fa:ff:0f:46:63:a2:44:6e:b9:c3:30:f0:
dd:82:e9:b3:1b:bb:12:03:2a:3d:bd:ef:97:3f:37:38:4f:df:
9a:ed:4b:a8:41:67:e6:60:fd:88:24:f9:5f:32:a7:40:8d:7d:
cf:6d:3e:04:15:b4:1b:10:cd:4d:8f:56:25:41:90:b9:9c:44:
e3:e4:c0:72:a5:f7:17:f0:4d:f8:83:01:55:e1:5c:3e:68:09:
3a:b5:6b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:20 2025 by rpki-client