Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
File: d7AlLypnrNQplw-mSmQXd29y2NY.mft (raw, json)
Hash identifier: 7Lg6OndmIUXhKcR6hrGURW8wjMtN2fcrobHYVhfLEl0=
Subject key identifier: B5:11:A7:C5:34:78:3B:A6:2A:9F:3A:C8:25:B1:09:37:BA:05:C0:63
Authority key identifier: 77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
Certificate issuer: /CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Certificate serial: 0199FC8F54E22FEA0CE23E6CC1A1EF4316EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
Manifest number: 05BE
Signing time: Sun 19 Oct 2025 13:01:15 +0000
Manifest this update: Sun 19 Oct 2025 13:01:15 +0000
Manifest next update: Mon 20 Oct 2025 13:01:15 +0000
Files and hashes: 1: d7AlLypnrNQplw-mSmQXd29y2NY.crl (hash: Kn6SrtHy5uIqB8wpEMU0mWlfnI36KQXGOWdmSx3yrhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:54:e2:2f:ea:0c:e2:3e:6c:c1:a1:ef:43:16:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77b0252f2a67acd429970fa64a6417776f72d8d6
Validity
Not Before: Oct 19 13:01:15 2025 GMT
Not After : Oct 20 13:01:15 2025 GMT
Subject: CN=b511a7c534783ba62a9f3ac825b10937ba05c063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:71:4e:2c:9e:b2:57:46:98:87:72:a7:27:ca:
7d:3d:e3:16:36:67:16:50:e3:3d:dc:61:aa:a4:7b:
14:6a:58:49:61:e2:1f:52:e0:61:c7:38:c7:a0:c6:
9c:11:fd:82:7c:1f:ab:ca:34:a5:2c:7b:75:c8:a2:
fb:f5:cc:d2:49:f1:82:a6:21:98:17:6e:a3:a6:36:
9f:db:ea:88:55:87:66:93:2a:8f:f3:f0:8f:b0:d8:
9e:d0:5b:d1:39:9c:3d:b5:7e:74:3d:41:6e:0c:49:
4a:c3:b4:39:36:6a:95:fb:60:66:f3:7c:49:c1:c6:
1a:b5:06:3b:30:39:6d:a0:4b:ae:1d:a7:46:ca:5c:
57:a3:0c:1b:e6:15:2d:a2:72:5a:f6:97:a5:6d:ce:
5e:87:1d:57:92:dd:b3:87:8d:43:43:29:88:9c:6d:
4a:83:7d:cd:e8:59:de:bc:59:98:47:db:70:12:68:
68:26:c3:16:eb:eb:24:d5:9b:4a:39:a8:e3:8f:54:
47:33:d0:c6:50:04:c2:88:75:58:3e:81:81:e7:cc:
f1:a4:16:67:cd:e0:b3:80:5f:cd:8d:2e:29:67:fd:
96:5e:2e:02:21:a4:2c:86:1d:7b:ca:05:6d:21:76:
c6:ce:ff:d7:83:9a:13:c7:1e:16:51:41:57:9d:c5:
60:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:11:A7:C5:34:78:3B:A6:2A:9F:3A:C8:25:B1:09:37:BA:05:C0:63
X509v3 Authority Key Identifier:
keyid:77:B0:25:2F:2A:67:AC:D4:29:97:0F:A6:4A:64:17:77:6F:72:D8:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7AlLypnrNQplw-mSmQXd29y2NY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/296e94-9296-42e5-a4b4-996c529ec986/1/d7AlLypnrNQplw-mSmQXd29y2NY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:8c:51:f5:ec:3a:27:85:e8:6f:df:46:5d:1a:09:68:f9:7b:
14:21:dc:8e:40:74:c2:d2:8d:75:e3:d3:a2:7a:7c:f5:a1:6f:
24:90:e1:f5:60:ba:be:f0:cc:28:84:f8:d6:90:1b:7a:83:be:
4e:d5:64:6c:cf:ec:1f:9c:ca:a7:6b:b3:db:3c:4d:92:af:bd:
38:49:dd:91:68:f4:70:87:02:ca:d6:ef:ca:72:69:62:79:c3:
82:d1:5a:4c:7c:08:61:6f:14:7c:66:51:13:ae:bf:ce:ea:13:
6f:89:54:03:38:6f:ca:62:76:27:b5:0a:0b:63:09:a8:c1:48:
45:68:95:b8:ff:83:8a:fc:83:8d:2a:df:ec:7d:99:f6:5e:4b:
ba:40:67:f6:f3:db:b4:08:fc:51:c4:5c:6b:a8:84:c5:62:fa:
6f:81:bf:db:b3:10:07:17:9d:02:63:0e:91:0b:e2:60:59:f2:
79:4c:e4:de:7c:8d:66:39:5c:eb:20:c1:4d:69:f3:18:e7:96:
c5:68:2b:23:90:49:6f:d0:e6:ab:a6:02:42:58:21:bb:9a:03:
e1:99:77:0e:ea:3f:7a:b6:e7:8d:5f:9b:3d:60:19:1b:9c:0e:
fb:31:db:67:4e:db:8c:55:33:f2:08:b5:54:d4:e3:e1:20:2c:
47:5a:3f:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:36 2025 by rpki-client