Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
File: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft (raw, json)
Hash identifier: 5NmtmLZd563n4MgYEDC8HTNcSWX/vcDGfsQdEhBgadU=
Subject key identifier: A5:BD:9C:56:6C:4B:7F:8D:6A:92:74:AD:59:17:A0:38:27:45:B4:79
Authority key identifier: DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
Certificate issuer: /CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Certificate serial: 0199FC21B6D5D2C6DFC942EA83FAC06E0407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
Manifest number: 16DD
Signing time: Sun 19 Oct 2025 11:01:31 +0000
Manifest this update: Sun 19 Oct 2025 11:01:31 +0000
Manifest next update: Mon 20 Oct 2025 11:01:31 +0000
Files and hashes: 1: 2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl (hash: EPEV8X7HF5jcY2/IgpguxZccwJVLXTJTIcHwB+8ZVEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b6:d5:d2:c6:df:c9:42:ea:83:fa:c0:6e:04:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae57631f60adb13f0ae368671ce0f8742f5977f
Validity
Not Before: Oct 19 11:01:31 2025 GMT
Not After : Oct 20 11:01:31 2025 GMT
Subject: CN=a5bd9c566c4b7f8d6a9274ad5917a0382745b479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ef:4a:ab:6a:9b:f6:fb:b7:8f:f4:5c:98:73:
9d:09:30:b6:12:5e:17:e5:64:08:be:ec:72:c2:01:
41:7e:47:ef:4f:6d:0b:21:80:61:82:6b:05:52:27:
a4:ab:5d:19:6e:3a:e8:4e:4a:b1:3e:c5:0c:cb:d8:
a3:94:a4:50:96:60:25:3a:d3:a1:32:47:4f:39:d3:
02:80:79:c5:53:01:de:1a:84:f7:0d:f3:6d:2e:97:
2c:26:da:be:cd:7c:72:45:7a:8c:b6:7c:ca:16:c6:
37:f9:e1:e5:ae:b3:61:ce:d5:fd:eb:42:46:0c:8e:
e6:51:8b:75:c9:79:6c:07:36:ec:46:09:19:64:97:
af:f6:1b:c6:63:ad:5f:61:50:a2:57:00:31:b7:31:
15:f7:74:c0:e8:18:e0:08:f0:e9:54:2c:d5:aa:78:
97:7b:f8:1a:90:c6:01:f4:df:4f:38:8b:c7:c0:67:
8d:d3:b0:cd:82:12:0b:b5:cd:4b:5e:77:7e:79:5c:
a8:11:81:59:09:77:2b:99:8f:b8:f6:d9:ed:3c:31:
c1:1b:6e:84:31:fb:1b:40:20:30:74:70:04:9a:c7:
34:68:a7:8e:9c:7b:28:61:39:e2:70:86:a8:35:1b:
63:bd:88:a7:25:86:f7:78:5e:f9:61:70:79:f5:c3:
06:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:9C:56:6C:4B:7F:8D:6A:92:74:AD:59:17:A0:38:27:45:B4:79
X509v3 Authority Key Identifier:
keyid:DA:E5:76:31:F6:0A:DB:13:F0:AE:36:86:71:CE:0F:87:42:F5:97:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2uV2MfYK2xPwrjaGcc4Ph0L1l38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/0e825a-5bb6-4327-9a0a-439f36e1653a/1/2uV2MfYK2xPwrjaGcc4Ph0L1l38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:f1:b5:a5:8c:70:eb:71:9d:ae:10:db:e6:72:46:13:24:52:
e8:7a:cb:1f:dd:fe:3c:36:74:13:bf:25:d1:c0:71:c7:c0:15:
f2:78:a1:83:cf:d5:4f:81:23:4a:51:43:c8:af:73:af:d2:6e:
6c:50:13:c1:22:8e:04:d1:a2:de:3b:33:50:8b:5f:48:77:2b:
6b:b5:ae:a4:79:e4:45:0a:6a:ba:d0:9e:e5:65:6a:ea:aa:01:
71:de:59:75:d2:34:d1:a0:4b:ea:07:f6:c7:0f:bd:4e:3b:8e:
85:1a:e2:3a:75:ae:1d:8d:6f:ad:85:3c:ae:db:93:0e:c7:e5:
d4:2a:47:78:72:e9:16:1e:cf:06:35:39:77:6c:6d:d2:cd:d8:
2d:12:fd:97:3f:7b:97:8a:a8:71:45:24:4f:3b:45:0e:34:33:
db:8e:c1:e3:f7:00:91:07:be:70:86:e7:ba:1e:33:2c:9a:86:
f0:b1:7d:9a:c4:bb:f5:2c:83:61:7e:64:36:5f:e5:d9:a9:bd:
ae:38:3c:27:1f:1a:0f:a5:7a:8f:78:fd:73:16:59:f5:e7:49:
da:ba:f1:eb:83:68:da:b4:ac:5b:0c:ca:7e:ca:2c:08:c0:49:
90:19:a2:66:4f:bc:87:5c:65:2d:01:1f:ee:55:74:ea:2c:61:
55:a2:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:49 2025 by rpki-client