
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
File: b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft (raw, json)
Hash identifier: e15fh2ToosfN6PuwTSAHxS4u7ZpsXIa/Ml3Rm5RxhTQ=
Subject key identifier: AE:81:0D:0B:5C:DA:CE:DC:17:6A:7D:1E:AE:66:67:7F:44:16:FA:AA
Authority key identifier: 6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
Certificate issuer: /CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Certificate serial: 0199FC5844A685EF8B7A186CA24D3B85886D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 12:01:07 +0000
Manifest this update: Sun 19 Oct 2025 12:01:07 +0000
Manifest next update: Mon 20 Oct 2025 12:01:07 +0000
Files and hashes: 1: b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl (hash: kequAmZjt9FFkJ4aDu+9AyF6D4HzMVM4Er3WI5wEU68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:44:a6:85:ef:8b:7a:18:6c:a2:4d:3b:85:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f82c8ae79670bfaf3ac8da88748581e39972beb
Validity
Not Before: Oct 19 12:01:07 2025 GMT
Not After : Oct 20 12:01:07 2025 GMT
Subject: CN=ae810d0b5cdacedc176a7d1eae66677f4416faaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0e:e2:9b:5a:ad:ef:e1:ea:02:c7:2b:cc:68:
b7:40:dd:44:55:85:6a:ca:f7:7d:54:b7:e5:6d:ed:
14:7e:da:99:2e:89:34:02:6f:47:01:03:8e:b7:e4:
d0:d7:96:a5:b0:ee:b0:9e:25:84:9b:82:5f:19:d8:
e6:0f:1c:18:4f:94:ba:82:41:bb:db:fe:e7:fd:09:
72:27:bb:45:95:11:34:8a:1b:de:71:ec:32:ed:c8:
bf:e1:0c:3b:ef:15:10:06:1a:98:08:c3:26:e7:ec:
77:b9:68:3e:69:cd:49:21:4c:e5:d8:9b:3e:ec:be:
98:d2:6e:f3:16:d3:91:d8:ee:8c:51:38:c9:dd:6e:
48:78:38:ab:21:a1:c4:59:70:e9:c1:68:82:a2:75:
3f:19:26:d1:8b:13:c0:a2:73:0a:c4:34:33:d0:8f:
ea:2e:29:d0:c8:95:eb:7b:b8:f7:53:87:41:3b:6b:
57:35:dc:68:87:ec:22:75:ce:e3:8b:95:2e:b0:eb:
ac:36:72:af:22:74:b7:ba:4b:2d:b8:d0:32:d7:f6:
14:6a:ea:c7:c3:d8:76:f8:21:08:de:5f:86:1e:6e:
97:25:f4:f8:61:04:bb:7b:e2:bb:c0:bc:54:a5:04:
54:85:47:44:11:b1:92:f2:66:f8:ec:82:0e:35:d3:
c5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:81:0D:0B:5C:DA:CE:DC:17:6A:7D:1E:AE:66:67:7F:44:16:FA:AA
X509v3 Authority Key Identifier:
keyid:6F:82:C8:AE:79:67:0B:FA:F3:AC:8D:A8:87:48:58:1E:39:97:2B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4LIrnlnC_rzrI2oh0hYHjmXK-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d55acd-e5c7-4307-a08f-a3867d53900c/1/b4LIrnlnC_rzrI2oh0hYHjmXK-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:83:ed:52:71:e6:dd:cc:99:5a:a9:1f:c0:b1:a0:f2:bc:c1:
cb:8e:51:6d:25:42:7a:7d:54:d8:8a:63:fa:a2:df:55:8b:7d:
c5:ad:0e:54:a5:77:b0:a8:7f:c1:fb:2c:b2:d4:73:8f:34:b3:
1d:ee:a9:51:2f:f9:d3:66:52:5c:12:ce:c2:17:b8:5b:ae:06:
c7:94:78:98:34:c4:1f:4a:5f:70:2c:37:f6:4d:3e:36:b4:65:
43:f3:05:65:c6:57:49:20:69:83:81:e1:20:d2:2b:77:b1:4b:
b2:34:f6:41:f3:cb:a5:89:c9:1b:de:67:ba:49:b6:3c:be:44:
8a:bb:9b:39:5f:1c:e3:44:b0:f1:89:ae:02:3e:a5:b2:da:d5:
2f:da:88:9c:4c:c6:c7:71:51:73:72:bf:a8:93:dd:45:36:14:
73:1f:1f:c0:9e:27:8e:6e:c8:19:bd:c7:d8:9f:0c:18:50:c7:
5c:03:9e:07:19:82:d3:8f:48:08:64:2c:27:36:f3:82:9f:95:
e0:7a:5f:30:c1:7e:ce:26:fa:f7:e3:4b:0c:cb:52:92:5f:aa:
8e:78:71:46:e4:a0:d2:20:3e:c9:bc:0f:52:16:26:eb:a8:76:
d5:5a:3e:37:72:65:88:91:72:b3:57:ad:c3:5b:15:d5:71:a7:
f7:7c:35:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:23:00 2025 by rpki-client