Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
File: rl81puj7U5sZVMtDps516X-q4XU.mft (raw, json)
Hash identifier: Im6MoFEDXlruaZDV/3lcCVy2tEsHYVdwQCH1GhK0gJA=
Subject key identifier: A1:16:C6:B2:1B:BE:AA:70:AA:F4:5B:DC:C0:40:A7:BC:01:42:A5:B5
Authority key identifier: AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
Certificate issuer: /CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Certificate serial: 0199FBEBDCD1D840E798750AB5A1FC572DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
Manifest number: 0AD9
Signing time: Sun 19 Oct 2025 10:02:42 +0000
Manifest this update: Sun 19 Oct 2025 10:02:42 +0000
Manifest next update: Mon 20 Oct 2025 10:02:42 +0000
Files and hashes: 1: rl81puj7U5sZVMtDps516X-q4XU.crl (hash: uGT3kvXGG/alUotTSAYTZ8cb7m7IasPHDCSBWGVuBNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:dc:d1:d8:40:e7:98:75:0a:b5:a1:fc:57:2d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f35a6e8fb539b1954cb43a6ce75e97faae175
Validity
Not Before: Oct 19 10:02:42 2025 GMT
Not After : Oct 20 10:02:42 2025 GMT
Subject: CN=a116c6b21bbeaa70aaf45bdcc040a7bc0142a5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:9e:22:9c:28:bc:46:b8:ca:ea:b4:52:09:
a2:25:f1:ea:e1:9e:12:17:3b:11:3f:fd:08:83:b7:
f7:4f:51:3c:b5:d3:0c:a7:cc:11:44:73:78:0e:77:
14:9b:70:8e:a8:0f:9a:70:ef:06:87:ae:f0:d5:77:
94:0b:e3:75:3a:ac:45:74:a9:04:be:9a:a9:29:34:
4f:3a:31:e9:54:2f:94:1c:c7:fb:5f:9b:6a:e9:42:
07:42:7a:7c:72:be:c2:cf:1b:6d:76:f1:9d:dd:da:
91:2d:79:85:e2:d5:f8:d5:f6:17:29:e6:39:7d:90:
bc:9e:6a:06:3f:25:bb:87:58:9d:16:12:4a:26:b2:
61:1f:73:19:84:6b:dc:40:aa:2f:4b:48:6d:d8:de:
e9:35:f4:c0:83:f7:76:23:60:75:2e:82:0a:19:7a:
ea:f5:61:5d:05:8a:d9:4a:46:1e:c7:2b:8d:4d:ff:
68:38:6f:5a:0b:30:11:ba:33:7c:71:89:01:92:2e:
ad:c7:b6:51:83:fb:2c:ca:ce:d9:42:df:0c:3c:3d:
ef:61:32:14:99:ea:5b:dc:47:f5:3d:90:f3:1a:8e:
30:ec:68:32:83:b0:96:ff:6b:cc:89:fb:3a:61:de:
ac:64:84:db:1e:a0:49:c1:a6:f1:8b:0d:18:bc:48:
1c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:16:C6:B2:1B:BE:AA:70:AA:F4:5B:DC:C0:40:A7:BC:01:42:A5:B5
X509v3 Authority Key Identifier:
keyid:AE:5F:35:A6:E8:FB:53:9B:19:54:CB:43:A6:CE:75:E9:7F:AA:E1:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl81puj7U5sZVMtDps516X-q4XU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/feb7e0-2b7e-426c-b037-2091cca8bc48/1/rl81puj7U5sZVMtDps516X-q4XU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:88:a5:42:71:c8:9a:b7:ac:a1:3a:88:74:87:52:b2:74:af:
83:9a:01:ce:c8:8a:fa:a0:da:2f:bb:37:36:24:a0:a5:ac:af:
f3:04:f6:c8:97:47:e1:bb:b0:b4:f8:da:d0:1f:7b:ea:14:ba:
72:8d:26:90:26:d8:15:eb:af:ff:90:04:46:72:72:16:0b:c8:
7c:27:2c:14:95:ba:16:3a:26:da:7b:c7:9a:fa:b6:bf:2d:a9:
11:ac:12:7a:41:72:b3:20:19:c8:2e:6c:82:90:7f:39:b1:72:
b1:45:7f:77:fd:6c:45:9a:df:63:e0:d9:06:e7:62:97:45:d8:
03:9f:00:59:a4:dc:d2:80:ae:23:f8:40:f1:db:90:f4:f3:00:
7d:77:5b:4c:d1:5d:e6:dd:8f:7f:0f:dc:0a:ce:3f:9a:64:c7:
8e:88:ff:39:5f:d8:f5:c7:b3:5e:6b:19:1f:ba:a3:f9:e3:9a:
d8:bd:51:45:a1:d6:99:32:fc:42:95:47:21:b3:6b:f9:80:e9:
19:43:84:64:44:40:53:78:a7:71:53:ec:79:8b:ff:85:a5:ba:
10:38:30:b9:8d:bb:40:c5:92:45:fd:78:95:1e:fb:a5:67:3c:
5e:8c:04:3d:16:1a:a7:27:d1:06:cc:8d:61:e6:2e:91:d2:33:
21:6a:ee:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:11:01 2025 by rpki-client