Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
File: bq0LWp5EY4gC_LRukPqjrbUWv4g.mft (raw, json)
Hash identifier: sb0cQXhmS6OXNWkR1FxP0BUEcQE/AP9I3NFZmnXtp3U=
Subject key identifier: EB:A3:B2:36:0D:A7:F6:C4:52:2B:B0:C4:8A:0E:36:EF:7A:9D:B1:10
Authority key identifier: 6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
Certificate issuer: /CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Certificate serial: 0199FDD8ADD9D91EA117A06C2BFB2A61FB8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 19:00:59 +0000
Manifest this update: Sun 19 Oct 2025 19:00:59 +0000
Manifest next update: Mon 20 Oct 2025 19:00:59 +0000
Files and hashes: 1: bq0LWp5EY4gC_LRukPqjrbUWv4g.crl (hash: v23fAr1TUJpMl4/wC/u59wSlvxtV0TVR151ilYrDXdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:ad:d9:d9:1e:a1:17:a0:6c:2b:fb:2a:61:fb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ead0b5a9e44638802fcb46e90faa3adb516bf88
Validity
Not Before: Oct 19 19:00:59 2025 GMT
Not After : Oct 20 19:00:59 2025 GMT
Subject: CN=eba3b2360da7f6c4522bb0c48a0e36ef7a9db110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:17:4e:68:8e:41:d8:2c:39:b8:d9:f8:f1:ed:
36:a9:fe:77:24:aa:00:ad:1d:ff:dd:d9:3d:27:c8:
38:51:83:2d:93:da:28:07:d8:12:c4:e0:41:68:07:
46:29:a8:cc:46:d3:f8:c0:e9:d2:82:7a:e3:72:93:
66:89:ff:ee:7c:96:30:bc:22:57:10:5c:4f:a5:97:
10:59:68:b3:62:fa:3a:e4:83:e7:fd:52:ad:dd:14:
f0:7f:23:61:64:30:42:64:e0:02:f6:2b:45:e4:08:
d2:f1:55:b3:7c:a2:54:93:b0:b9:be:f0:3e:3d:19:
77:3a:f2:6f:81:c0:f5:04:03:bf:57:cf:a4:5e:2e:
29:ce:98:f2:83:d1:d3:72:5e:53:43:3d:76:b2:69:
9f:f3:a0:9f:6e:06:94:ff:5a:35:2f:a8:91:94:87:
2a:55:0e:d4:59:d3:7d:dc:c8:90:01:e1:a2:4a:84:
91:5f:0b:2e:d4:c7:4b:9a:56:69:de:8f:30:f0:04:
29:ea:31:7c:e8:2f:46:35:04:6a:05:f4:6a:db:6d:
04:23:2d:75:88:61:ba:02:27:ff:9e:4f:f9:32:ef:
74:e7:d6:e4:c4:31:b9:6c:de:6e:02:3c:89:4c:2d:
84:ca:fd:74:7d:09:25:4f:6c:5d:70:ea:65:97:4a:
d0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A3:B2:36:0D:A7:F6:C4:52:2B:B0:C4:8A:0E:36:EF:7A:9D:B1:10
X509v3 Authority Key Identifier:
keyid:6E:AD:0B:5A:9E:44:63:88:02:FC:B4:6E:90:FA:A3:AD:B5:16:BF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq0LWp5EY4gC_LRukPqjrbUWv4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/dafa00-df08-408d-a8cf-7289d01ed054/1/bq0LWp5EY4gC_LRukPqjrbUWv4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:8e:55:49:da:87:1e:d7:42:d6:ab:10:a0:f4:22:e5:a4:48:
cc:44:7d:c1:7b:fe:85:d3:1e:50:19:49:eb:59:36:ff:d9:f0:
c1:c3:a6:1b:0d:d5:13:57:04:f5:cd:77:92:3e:14:70:28:54:
8f:52:9d:9f:24:19:0e:dd:04:b6:01:2f:56:20:c1:8e:83:4f:
82:77:1f:66:80:22:b1:e1:87:ad:10:64:6b:7d:dd:b4:a2:5b:
56:48:4e:fd:bd:2d:dc:d3:73:cf:6a:d6:94:fb:6c:f8:d6:8f:
83:f7:dc:72:5f:8c:68:52:f3:5c:3d:38:d6:a5:c1:24:1e:00:
7c:51:60:39:4b:79:ad:2c:75:c5:b4:39:d8:fd:09:68:fa:97:
61:8b:f5:53:8c:7b:17:37:04:1b:e2:6e:23:38:2d:67:0c:dd:
24:e6:4c:13:e6:cb:1f:4b:f5:4d:b1:48:eb:de:f2:3c:87:fa:
c3:f0:ac:02:6a:3e:6b:73:bb:f9:46:24:ef:89:a1:a6:44:e0:
20:b3:e7:1f:84:0c:18:ee:71:5b:9f:83:05:93:44:5f:81:40:
38:9c:6a:60:cc:c9:0d:fe:c0:a4:6a:7d:fc:a5:de:12:a1:3b:
13:26:67:41:71:2b:15:3e:64:97:29:d4:98:17:3e:93:1c:15:
a3:bb:d9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:40:44 2025 by rpki-client