Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
File: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft (raw, json)
Hash identifier: 6rDDs4IptqVqNZW5ywtK0AXmvHKZPloBp32IA3UHi0o=
Subject key identifier: 69:8A:F8:29:A9:99:48:3C:50:AC:08:C9:0E:F0:48:C8:0A:8B:24:F3
Authority key identifier: D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
Certificate issuer: /CN=d66dde950da56f1203327e50e2b395c402251798
Certificate serial: 0199FBEB0A821601ACC9694B8D3BD73EB57D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 10:01:48 +0000
Manifest this update: Sun 19 Oct 2025 10:01:48 +0000
Manifest next update: Mon 20 Oct 2025 10:01:48 +0000
Files and hashes: 1: 1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl (hash: IxnSo+GI95xbo5BXaAT+YxZy58h6krSWBvGba/x6eMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:0a:82:16:01:ac:c9:69:4b:8d:3b:d7:3e:b5:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d66dde950da56f1203327e50e2b395c402251798
Validity
Not Before: Oct 19 10:01:48 2025 GMT
Not After : Oct 20 10:01:48 2025 GMT
Subject: CN=698af829a999483c50ac08c90ef048c80a8b24f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:94:80:d5:9a:bd:1d:cf:52:ec:65:9e:f2:
84:33:e6:7c:c6:08:03:4d:00:ac:19:8e:81:e0:be:
c0:58:a1:aa:a6:dd:65:01:ac:d2:d0:9c:85:57:3c:
61:e9:a4:95:7e:b6:21:ef:37:6a:cf:58:20:60:f8:
fb:1c:95:6f:a3:fd:15:30:00:32:62:9d:71:08:c7:
bc:dc:3a:3a:3b:e9:ef:ba:58:3e:7c:fe:ac:2d:95:
c5:85:f8:3a:4a:ab:96:16:07:5e:51:7a:a7:96:79:
c9:78:be:86:45:ac:59:ed:ea:97:48:95:fb:46:f2:
5f:c0:d7:7f:89:eb:1b:9f:04:31:43:13:1b:9b:0f:
2e:6d:b4:20:0b:7a:10:29:b4:78:60:bf:17:5f:5e:
7c:10:71:bf:d3:08:6f:e5:4d:58:1b:68:87:b1:d4:
c6:8e:e2:86:b3:84:84:80:70:d8:9f:c4:ba:6c:66:
49:52:39:8f:f0:3d:1b:80:5b:51:e3:26:9a:68:72:
48:1f:d7:16:37:ef:69:ef:2c:f8:17:3d:9c:0c:2d:
68:2a:23:04:ab:9e:83:79:31:ba:e2:4b:52:d7:b2:
f9:0c:aa:53:1d:d9:bc:e8:d9:93:67:3d:00:4f:69:
ef:aa:37:20:29:1b:32:ad:cc:9c:e9:f9:9d:ce:a1:
7c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8A:F8:29:A9:99:48:3C:50:AC:08:C9:0E:F0:48:C8:0A:8B:24:F3
X509v3 Authority Key Identifier:
keyid:D6:6D:DE:95:0D:A5:6F:12:03:32:7E:50:E2:B3:95:C4:02:25:17:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/753aa9-a4b0-4f47-8b00-89752e4bf5d3/1/1m3elQ2lbxIDMn5Q4rOVxAIlF5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:dc:af:8f:be:e5:58:7d:0c:69:4f:da:74:d2:96:a2:02:5a:
4a:ef:d4:cf:c3:d6:78:79:7d:6d:e7:5a:83:45:ba:c3:f1:c5:
50:c4:76:b4:68:1e:6f:9d:bc:5a:69:8f:f8:ec:cf:f5:b5:f9:
4a:c0:9f:fa:64:6d:71:b5:af:7c:72:11:ba:be:3b:f5:7d:8d:
6c:b4:70:e6:b7:76:62:fc:83:c3:96:42:8f:a7:68:78:40:8c:
1c:2f:a8:f4:01:c5:cf:94:71:0b:31:56:97:a1:a7:ce:4f:50:
80:97:29:98:e5:b7:90:0d:9b:ca:62:9b:78:89:58:e0:65:9c:
db:37:a5:0b:a5:57:10:a1:7c:e3:5b:6f:ab:70:3d:eb:a3:54:
47:aa:51:25:53:6c:f6:ed:2c:1b:51:bc:df:71:c2:b3:9d:97:
1d:20:a2:f3:73:a3:53:b1:3e:75:1b:e7:cb:44:3d:c6:36:61:
68:15:56:e3:ec:1f:84:36:bb:1c:60:f2:b1:6d:98:7f:2d:b0:
07:12:3d:50:ab:79:af:1d:b9:3b:18:6a:9b:7c:db:7b:31:1f:
82:5d:37:fb:3f:89:d3:ee:49:9f:82:21:f5:ff:d4:4e:23:98:
9e:db:ef:ad:ae:e7:ea:a7:f4:79:64:9b:39:bd:bc:e4:e3:a7:
22:0a:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:45 2025 by rpki-client