Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
File: dBkW6TW7TmhYsdIjYVrONp7SaB4.mft (raw, json)
Hash identifier: O/9xH+QzMtEs74AAES3OtAQSMLz6AIWSrWRahX5/hGo=
Subject key identifier: C0:91:73:0E:64:0F:A2:2A:7B:B4:56:CE:D2:AB:71:EA:20:2A:02:C3
Authority key identifier: 74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
Certificate issuer: /CN=741916e935bb4e6858b1d223615ace369ed2681e
Certificate serial: 0199FCC69624263ED9AAB556510FB2A6D875
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:36 +0000
Manifest this update: Sun 19 Oct 2025 14:01:36 +0000
Manifest next update: Mon 20 Oct 2025 14:01:36 +0000
Files and hashes: 1: dBkW6TW7TmhYsdIjYVrONp7SaB4.crl (hash: pRNN6hExZSCpjjYbMkhps/Y2kKSvJljcKy4ujpQYkKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:96:24:26:3e:d9:aa:b5:56:51:0f:b2:a6:d8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741916e935bb4e6858b1d223615ace369ed2681e
Validity
Not Before: Oct 19 14:01:36 2025 GMT
Not After : Oct 20 14:01:36 2025 GMT
Subject: CN=c091730e640fa22a7bb456ced2ab71ea202a02c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:60:fb:36:09:b7:35:a1:46:5a:8a:e1:f0:35:
10:ec:19:e5:3d:cf:e9:5c:aa:37:6d:14:3d:39:0e:
6b:c4:b6:1a:e9:80:1c:07:36:56:72:a3:55:cc:13:
ea:c0:8c:95:a4:3b:3d:dd:78:62:05:98:8f:52:d6:
07:6b:7f:42:b3:c4:b0:de:c5:88:b8:b3:9f:7c:d8:
78:b4:4f:3f:47:7c:bb:f5:42:ff:e9:6f:0d:cd:a2:
15:1d:66:7f:c9:38:3d:13:81:bc:ab:3a:ec:32:3c:
89:49:6d:d7:8a:8d:0b:ce:b5:ef:19:c4:43:66:cd:
f9:6f:6c:24:c0:65:c1:64:72:fe:9f:ee:50:d0:d6:
a4:57:b9:41:fb:83:23:c7:88:3d:bc:18:49:a3:94:
ca:37:c5:d8:1e:ed:40:20:f2:00:fe:8c:c2:c8:a1:
0f:a8:d7:22:65:82:e2:8e:b5:15:47:cd:ec:d8:df:
52:41:ff:a1:a4:d2:3b:1c:b4:36:1a:16:59:92:97:
be:90:99:db:f6:be:a5:11:69:eb:68:9b:09:a0:6e:
56:69:5b:c1:fd:b7:aa:09:a9:9e:2d:29:3e:7e:d0:
dc:6a:89:c0:cb:1c:b1:cb:a8:2b:d4:01:5c:15:c9:
95:22:76:b0:c3:f3:9f:22:28:ea:a7:6e:34:5c:01:
36:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:91:73:0E:64:0F:A2:2A:7B:B4:56:CE:D2:AB:71:EA:20:2A:02:C3
X509v3 Authority Key Identifier:
keyid:74:19:16:E9:35:BB:4E:68:58:B1:D2:23:61:5A:CE:36:9E:D2:68:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBkW6TW7TmhYsdIjYVrONp7SaB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2891f6-7861-4037-8008-52cf0195838b/1/dBkW6TW7TmhYsdIjYVrONp7SaB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:95:94:28:b1:47:40:b3:02:e7:ae:bb:5b:6c:eb:7d:36:71:
5d:60:93:c6:76:fb:e6:33:95:c3:ca:c3:c7:1c:a8:5a:1f:06:
6f:de:af:52:c9:40:a5:6b:82:44:6d:d2:f8:3f:48:31:22:c1:
b8:ed:3e:53:02:bf:25:cc:59:fa:92:e3:33:99:3e:a9:90:26:
07:f8:b8:a3:2b:37:0c:38:3a:00:69:00:a5:c0:cf:e8:ca:a3:
b5:9e:43:09:30:bb:cc:31:01:76:5f:61:10:5c:f4:a6:d7:a0:
85:36:85:23:62:d9:67:cd:45:60:55:98:6e:ec:d1:82:d3:d0:
45:e3:64:1e:72:8b:6d:ad:13:a9:cf:99:9d:22:68:25:b0:a1:
b2:b9:3a:d5:1c:b8:76:21:46:39:aa:45:3c:67:76:32:5e:ac:
17:10:79:cb:72:79:3a:58:6e:b6:71:92:cf:71:db:38:b5:9b:
34:4a:95:30:2d:14:a6:84:30:bc:ed:2f:45:e8:57:e7:d1:ab:
77:da:8a:06:44:12:46:0d:2d:99:25:58:35:ce:ac:94:61:05:
54:c2:d3:38:ba:ef:17:81:72:38:d4:f8:da:f4:50:84:52:a1:
cf:72:d8:1f:30:88:af:36:55:4c:4a:a6:66:e7:33:d9:ee:cc:
dc:12:90:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:47 2025 by rpki-client