
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
File: rl8yMzCqPoI4TGOgFadR5U7chVI.mft (raw, json)
Hash identifier: wnC00FN956GdvKiQzvUEltigCt2SVRLUm5zs45nFbwE=
Subject key identifier: 31:74:C3:05:43:17:1E:1E:63:7A:35:B5:51:22:06:DA:A5:3B:14:DA
Authority key identifier: AE:5F:32:33:30:AA:3E:82:38:4C:63:A0:15:A7:51:E5:4E:DC:85:52
Certificate issuer: /CN=ae5f323330aa3e82384c63a015a751e54edc8552
Certificate serial: 0199FBEB549A50A3876471C0843AAC432FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
Manifest number: C6
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: rl8yMzCqPoI4TGOgFadR5U7chVI.crl (hash: aaZjGTVMXP5iUxLikqUO7kS08NhHOQvJhN8k6LbL5TQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:54:9a:50:a3:87:64:71:c0:84:3a:ac:43:2f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae5f323330aa3e82384c63a015a751e54edc8552
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=3174c30543171e1e637a35b5512206daa53b14da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:4f:3a:1c:8a:a4:83:ea:a8:a4:27:3c:06:
7a:5d:43:51:85:5a:eb:7c:e6:9a:a3:a5:18:d9:23:
06:d4:09:7e:68:7d:c4:d9:c2:76:36:29:f6:6e:83:
85:ec:bb:da:e7:88:7e:8f:8b:57:44:ab:41:c1:5f:
14:2d:49:f1:f3:e9:b5:1f:82:3c:97:50:b0:ed:8c:
16:fd:b3:05:ec:c0:8b:df:8f:4a:23:fb:70:74:ba:
9e:4d:42:26:dd:52:75:18:4d:ad:4d:56:78:ba:1d:
6a:90:74:f3:cc:6e:45:5d:0a:f2:79:d2:0f:d8:cf:
ba:2b:50:1f:06:e7:77:db:4f:aa:6d:89:50:dd:1b:
f0:66:3d:8f:ca:30:a7:79:fe:f0:b5:30:9b:20:e5:
bf:e0:88:fb:b8:8d:f2:2e:5a:5b:7c:0d:ed:b0:cd:
08:f5:60:95:f9:bb:82:f3:d6:21:51:b3:51:b5:9c:
7d:41:88:48:db:48:f0:e4:fc:76:fd:4c:54:bd:7d:
50:9b:6a:ae:03:a2:47:9f:fd:1b:0b:61:02:b6:29:
87:3b:9d:5c:32:49:8c:97:ae:06:15:0c:ad:cf:93:
23:29:0a:4c:d9:9c:c3:69:2c:24:1b:c0:52:61:9d:
93:2b:81:f8:5d:9a:4c:20:da:9a:3b:23:23:54:fa:
1f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:74:C3:05:43:17:1E:1E:63:7A:35:B5:51:22:06:DA:A5:3B:14:DA
X509v3 Authority Key Identifier:
keyid:AE:5F:32:33:30:AA:3E:82:38:4C:63:A0:15:A7:51:E5:4E:DC:85:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rl8yMzCqPoI4TGOgFadR5U7chVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f16740-a2a5-4b2c-b2df-078672da2794/1/rl8yMzCqPoI4TGOgFadR5U7chVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:df:f6:89:ff:09:b6:3b:12:f5:93:04:d7:f5:01:dc:46:a5:
7b:06:f0:dd:3d:b8:b3:9b:0f:f4:7e:f9:e9:4d:a1:d5:d0:b9:
0c:d9:16:96:3b:9f:d1:af:18:81:d2:c3:fe:79:26:6d:c1:bc:
3a:22:cc:5c:30:3c:0a:ee:68:b5:06:ab:5d:2b:20:b3:32:e2:
41:a4:0c:ac:85:94:09:1d:92:ac:41:d0:2a:10:2a:a4:12:6e:
52:de:37:3c:d1:3a:50:13:50:15:b7:13:04:c3:fb:d2:f4:2d:
95:30:58:d6:e1:e0:de:03:6c:ff:be:3b:11:2d:16:a9:86:d3:
7c:ab:a1:15:e1:95:36:3b:13:10:17:d0:3e:07:e2:44:b9:a2:
38:8d:9f:5f:0c:9d:02:bb:18:c2:21:c9:a2:6e:e3:77:4a:a0:
6e:86:c5:25:b1:af:ef:ab:fb:a2:64:57:89:37:f6:6d:8d:93:
a6:77:ef:36:ea:bf:ed:ec:82:10:aa:0c:47:d3:37:49:70:96:
22:62:de:5f:91:44:c0:ee:29:8c:88:c6:31:05:2f:00:14:27:
e6:3b:52:8f:e5:ec:56:0c:32:43:73:4a:c4:f5:4d:7f:47:ec:
34:a5:4b:a0:42:c9:3c:fe:a2:15:a2:20:04:f3:06:b1:b6:39:
3a:81:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:06:07 2025 by rpki-client