Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
File: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft (raw, json)
Hash identifier: VD3T0zj+obeL9RVvD31w+bZslt3vmiJe6/7gpUPvnXA=
Subject key identifier: D2:7F:D4:C6:96:7A:DE:A9:26:9A:83:89:91:AA:BC:2D:9B:7B:9A:BB
Authority key identifier: FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
Certificate issuer: /CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Certificate serial: 0199FCC628B5582D92C31F51BD8416D99F2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 14:01:08 +0000
Manifest this update: Sun 19 Oct 2025 14:01:08 +0000
Manifest next update: Mon 20 Oct 2025 14:01:08 +0000
Files and hashes: 1: 1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl (hash: g6MbYOIDErMxpYSoFmkG41EpFqZkGYFGs+UGXIgZdwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:28:b5:58:2d:92:c3:1f:51:bd:84:16:d9:9f:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fada5aaa6c99462feb159f56b1c0af2dd3f4625b
Validity
Not Before: Oct 19 14:01:08 2025 GMT
Not After : Oct 20 14:01:08 2025 GMT
Subject: CN=d27fd4c6967adea9269a838991aabc2d9b7b9abb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:62:c6:3d:5f:4f:29:40:3f:09:cb:66:80:36:
0c:0a:18:0c:85:99:6f:21:26:d6:ce:43:bd:5f:b9:
9c:37:40:d4:a1:d9:fa:24:0c:98:1a:86:2e:e9:d1:
c2:34:0c:b7:ba:0d:95:84:e0:26:07:e0:72:17:d9:
7c:d5:28:b8:01:e8:d6:6d:3b:83:59:24:36:22:34:
3a:55:b2:51:9a:e4:a9:ae:05:13:60:19:07:8a:77:
cf:9a:e6:53:ef:3e:49:2f:3a:a6:71:9f:db:71:45:
b4:2f:11:0c:7e:43:ea:62:79:28:05:88:52:00:8b:
ab:51:1d:0a:47:5c:e2:4c:33:49:bc:ab:52:59:f8:
aa:79:0d:c2:bb:d2:62:2f:68:6b:d5:11:b5:32:63:
ce:8c:43:bb:3d:88:20:92:c3:8d:02:e8:53:4f:c9:
00:fd:5d:d5:57:fa:4a:54:ba:ce:82:26:7b:10:02:
54:95:4f:b1:8c:4b:2f:8d:55:ec:ee:88:63:c8:2a:
0d:54:fd:a2:a8:4c:71:a9:2f:b6:79:dc:3a:2f:04:
7e:0e:48:7c:77:21:b7:23:26:f0:a8:33:f1:77:69:
f7:5a:24:d1:14:3e:05:b2:91:8a:06:df:ea:9f:e7:
62:d7:3b:e1:1d:b6:36:85:a5:32:e8:e5:57:ef:72:
2e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:7F:D4:C6:96:7A:DE:A9:26:9A:83:89:91:AA:BC:2D:9B:7B:9A:BB
X509v3 Authority Key Identifier:
keyid:FA:DA:5A:AA:6C:99:46:2F:EB:15:9F:56:B1:C0:AF:2D:D3:F4:62:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/061506-edf0-48d7-be7d-6f1b037ba6e2/1/1-tpaqmyZRi_rFZ9WscCvLdP0Yls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:91:1d:9d:ad:05:c0:1f:de:57:30:cd:a2:8d:06:41:d1:ed:
91:a4:bd:00:2b:60:9e:42:6b:30:dc:36:1e:ee:cd:83:75:e5:
9c:c7:52:4d:96:ec:6f:8f:a5:b5:e1:b1:c6:03:a2:be:bc:a3:
30:ab:d8:85:98:5e:b3:19:33:82:7b:49:0c:3e:8c:75:dc:ba:
36:f4:46:84:10:ad:00:f3:0f:39:f7:5a:6c:ce:13:44:c2:da:
c9:47:de:16:25:7c:c8:a7:3f:aa:cf:75:28:da:4f:a4:d5:d6:
06:8a:58:d9:55:1f:15:bf:d2:6b:54:ed:94:de:ec:4e:6f:02:
53:48:0b:d4:b8:cc:7b:b4:bc:b5:a3:fe:7e:ac:c8:b1:be:de:
f8:3d:de:75:5a:e7:e7:39:1f:34:29:13:7f:7e:84:58:06:50:
f3:57:6c:22:e0:5c:57:31:b4:12:ff:dc:ad:cd:be:04:15:de:
48:f9:9a:bf:f6:0d:e3:1d:71:66:76:90:8f:74:0e:7d:59:38:
c5:d9:85:5f:08:57:d0:0b:05:e3:88:1b:68:21:22:d1:5f:bb:
91:1e:c5:ca:45:0b:bb:38:cf:62:d7:5e:7d:fb:3d:c1:23:42:
73:5d:de:d7:6c:c1:0e:fa:df:15:bd:98:fe:fc:39:48:83:ad:
51:20:24:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:32:43 2025 by rpki-client