Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
File: t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft (raw, json)
Hash identifier: aJDRoHSwaRW9z6QIeESkNhRyHAKxmQzqrwhNTFlIQhc=
Subject key identifier: DE:CC:E1:C8:78:26:A0:DF:CA:8B:B9:D1:66:09:3B:79:71:CD:A6:88
Authority key identifier: B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
Certificate issuer: /CN=b76cbf5927c476905feda34e1140148bf805d9b0
Certificate serial: 0199FDD9EE41D789C30C0EA61E5EDB5D7BAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 19:02:21 +0000
Manifest this update: Sun 19 Oct 2025 19:02:21 +0000
Manifest next update: Mon 20 Oct 2025 19:02:21 +0000
Files and hashes: 1: t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl (hash: 0zb0jlkIuuVbJ1aJfr/0KMcngz4Kxz+AmIFNFB1vRtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:ee:41:d7:89:c3:0c:0e:a6:1e:5e:db:5d:7b:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76cbf5927c476905feda34e1140148bf805d9b0
Validity
Not Before: Oct 19 19:02:21 2025 GMT
Not After : Oct 20 19:02:21 2025 GMT
Subject: CN=decce1c87826a0dfca8bb9d166093b7971cda688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:b1:3e:ed:fa:ce:51:9e:2a:13:d0:90:9f:
c1:10:f2:01:d4:9f:43:c6:e6:c7:ba:db:e3:3b:27:
3e:a5:c3:e2:03:79:92:46:9a:d6:44:ff:e9:1b:a4:
b9:3b:9c:db:19:6f:ae:9a:cb:82:aa:0f:68:76:f6:
f3:d9:72:5d:f9:06:b7:68:c0:8c:7c:a8:3a:0d:6d:
25:cf:3c:2d:0f:33:a2:33:69:9a:2c:7b:45:f3:b8:
b7:f2:bf:80:91:e6:c4:16:54:bf:94:8d:34:de:06:
13:c3:51:5b:b7:6e:be:ad:d6:0b:1d:05:a9:2c:df:
58:ff:85:74:a6:65:8a:87:5e:5f:b0:73:75:14:95:
42:20:25:18:a7:eb:36:59:e8:fe:89:a2:5b:2b:7b:
3e:55:e2:08:5b:87:64:48:ff:2f:4a:90:c1:8e:90:
36:2d:40:92:c4:fd:ca:aa:8a:1d:32:60:19:ba:f0:
27:45:96:08:88:09:3c:9f:50:39:15:38:74:67:99:
a2:75:73:f8:79:d5:66:5e:ba:1b:5e:3f:a1:08:08:
46:6d:4d:06:61:73:78:9c:3e:bc:5f:74:e5:27:7f:
97:be:1c:05:81:11:d0:e2:0d:eb:ae:51:22:81:0a:
bf:a4:1a:24:ee:50:f4:2b:c7:8c:b3:20:18:4f:c2:
45:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CC:E1:C8:78:26:A0:DF:CA:8B:B9:D1:66:09:3B:79:71:CD:A6:88
X509v3 Authority Key Identifier:
keyid:B7:6C:BF:59:27:C4:76:90:5F:ED:A3:4E:11:40:14:8B:F8:05:D9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2y_WSfEdpBf7aNOEUAUi_gF2bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/547e8e-41ba-4272-a294-0ae2b9d9d447/1/t2y_WSfEdpBf7aNOEUAUi_gF2bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:33:ff:96:40:c5:6a:4c:c0:cb:ab:ed:a3:8f:73:c9:5f:72:
10:70:8b:9b:fe:01:a0:d6:11:ac:5b:bb:b0:92:03:bb:34:8d:
62:44:4e:04:70:80:ea:5e:43:a9:61:0e:24:5d:d9:32:47:0e:
96:69:c7:ff:48:46:bb:ce:92:1a:2a:40:98:f6:d1:8f:94:68:
d9:19:71:01:a8:da:b1:0f:a3:1d:cc:34:ac:5b:13:d4:c3:15:
ae:27:c5:74:10:a4:4c:e1:ab:09:de:bc:ce:27:83:f9:57:96:
60:dd:2a:b7:d3:b1:04:7f:a2:1b:1a:e8:bc:8f:3a:e5:3a:18:
67:e1:38:68:19:8f:7b:1c:9a:12:82:4f:16:8e:45:30:b5:7a:
40:96:99:42:19:e5:8a:b1:62:73:12:e1:18:2f:47:2d:b3:e5:
f3:08:14:98:ed:53:ef:fb:df:65:67:84:71:5f:30:91:1a:31:
3b:8d:d7:18:a3:d0:b8:2e:70:7d:a5:19:0b:74:a9:54:47:5c:
88:df:19:24:13:4e:aa:d6:c3:c4:4f:96:cb:f8:89:13:47:2c:
c8:aa:1b:47:d3:ff:05:01:ec:fe:2b:4b:93:c7:2d:62:5c:1d:
69:0e:86:2c:b9:e7:dd:61:97:7f:bf:bb:9f:cf:e7:16:12:19:
db:3c:d5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:39:49 2025 by rpki-client