Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
File: AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json)
Hash identifier: fKNH94dZU/pJSsxC6VswDucxbr/PQecmVJMxvqKD0hk=
Subject key identifier: 30:50:B6:5F:87:2C:0A:0B:B5:8A:20:EE:A8:72:92:50:DA:D2:39:1F
Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Certificate issuer: /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Certificate serial: 0199FCC6ACC87E2B17117721A37461FA79F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
Manifest number: 0C63
Signing time: Sun 19 Oct 2025 14:01:42 +0000
Manifest this update: Sun 19 Oct 2025 14:01:42 +0000
Manifest next update: Mon 20 Oct 2025 14:01:42 +0000
Files and hashes: 1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: my2znqWsDE24JiI269gOcAS/LWfbnl+raut/JFMvARs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:ac:c8:7e:2b:17:11:77:21:a3:74:61:fa:79:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Validity
Not Before: Oct 19 14:01:42 2025 GMT
Not After : Oct 20 14:01:42 2025 GMT
Subject: CN=3050b65f872c0a0bb58a20eea8729250dad2391f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d0:ee:3e:c9:13:cc:87:f5:d7:26:ee:ce:33:
bd:c1:b9:ba:08:67:53:ca:5d:9c:b9:d1:bc:63:98:
d5:ff:29:47:ea:2e:8b:90:21:98:16:61:bb:2e:73:
d7:f4:85:44:7e:5b:10:11:ea:82:fc:90:1c:4e:10:
a5:7a:7a:7b:2a:1b:aa:75:52:d7:b4:32:72:ba:18:
61:23:eb:f9:86:a5:49:f7:b3:06:fe:82:93:2b:21:
33:fe:79:63:6e:58:3c:0f:78:78:a9:08:ce:8d:80:
f4:d9:a8:43:81:65:0a:fe:3d:37:6c:f7:46:e4:2a:
cd:79:92:eb:f1:36:a4:95:ad:75:13:7c:bb:38:c4:
ab:64:71:f0:f6:5b:d1:49:6b:30:d5:91:02:86:43:
d3:52:21:e8:e4:bb:83:3a:a4:57:6f:e7:b5:1b:c1:
4c:93:6e:0b:f8:16:ac:4a:78:82:49:91:e4:7f:01:
1a:72:39:80:41:16:b9:ff:9a:7e:75:0e:4e:82:bd:
3a:e5:28:42:a6:3b:1f:71:7a:61:d4:9f:c0:b1:37:
c2:54:7a:97:ed:75:dc:f2:ce:a6:3b:30:d9:ca:d3:
85:40:e8:75:1a:01:22:62:0a:ab:45:2e:19:4f:35:
f3:70:9c:4f:08:64:59:aa:d8:90:52:b5:46:92:3f:
1d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:50:B6:5F:87:2C:0A:0B:B5:8A:20:EE:A8:72:92:50:DA:D2:39:1F
X509v3 Authority Key Identifier:
keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d3:f5:95:67:e3:bd:93:e6:69:4f:0d:58:12:61:51:ce:70:
f3:a7:e6:70:27:8c:bd:39:ce:44:e2:52:0b:f8:f7:ee:ba:ac:
12:cf:69:64:d1:e5:45:87:1c:9d:a7:a4:89:9b:82:08:5e:9b:
3f:41:bf:fa:65:54:00:22:af:35:37:c6:5d:e3:1b:ee:93:33:
64:83:ba:4d:19:08:2b:e3:7f:a6:40:40:b5:5f:68:bc:c8:53:
c1:8f:3a:e3:ef:c6:05:97:ac:55:b2:f4:d9:29:b4:c5:9b:eb:
37:48:be:d4:9a:ce:c0:af:84:ce:11:3d:7c:94:a3:46:fd:40:
b9:f4:da:b7:d0:8c:f4:75:5e:45:3c:c2:ac:b9:b9:47:3b:10:
bd:b8:98:be:7b:64:dc:e1:48:0f:ae:22:4c:a8:9d:0c:b1:e2:
3f:86:81:74:e8:3a:7e:51:92:cb:b6:9d:ce:c7:40:ee:68:04:
ef:5e:ce:33:92:85:fa:9c:81:67:8a:ed:f5:22:10:a4:5e:05:
1f:0b:c4:d9:ac:99:6a:42:cc:7f:54:9f:1f:ca:1f:dc:51:9c:
63:2a:d6:af:f2:56:33:5e:65:5d:60:90:63:ad:23:3d:1e:80:
8c:f2:1d:60:4f:e9:40:e4:72:15:b8:eb:0f:20:bd:09:61:94:
e0:6b:3d:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:37:49 2025 by rpki-client