
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: I59q4TM2XA5lkvgyihNvcIPpifFSbiXkgPp0KfWD0DY=
Subject key identifier: 47:13:DF:FE:43:1C:4C:66:40:56:2D:E3:90:EE:BA:C8:AA:21:39:03
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 0199FC8F4A100FD56B148618DFC099B9002E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: +30CaLJFbAop6aYlcipPPWKxl2x6ZksVuDtds6c9J94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:4a:10:0f:d5:6b:14:86:18:df:c0:99:b9:00:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=4713dffe431c4c6640562de390eebac8aa213903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b5:f4:dd:eb:14:11:85:b0:26:5d:80:d1:d2:
80:c8:b6:ee:fd:cb:24:a4:82:8e:2c:3d:bd:5b:1d:
91:df:fb:d3:46:48:75:a5:71:8f:31:0c:d0:79:24:
cb:2b:fb:b3:6d:67:bf:42:2a:d5:53:74:af:db:9f:
c2:e5:84:f2:48:d9:aa:4e:b2:9f:9a:1c:d7:61:14:
82:40:90:34:5c:74:b5:67:75:58:62:f8:42:0a:47:
95:63:0c:39:37:35:7c:3f:94:34:64:e0:e6:6a:30:
c2:8d:f9:b9:ef:2b:41:46:df:c9:d3:f3:c6:c1:98:
a2:85:32:1b:53:9b:33:dc:6c:8a:cb:e1:ff:12:13:
3b:fd:43:50:ff:6a:66:e7:ae:cb:2d:b7:bd:0c:0e:
89:bd:84:d9:e5:69:71:02:36:de:48:62:e2:af:c3:
9b:66:b8:a9:d8:40:b0:38:49:a1:a2:8f:47:b2:68:
1d:ce:a0:ec:b1:36:3b:a7:02:96:b8:10:53:df:c7:
50:ce:99:6b:33:05:bb:db:46:1a:68:f0:b8:fb:8b:
68:ba:49:36:97:81:54:c7:40:13:86:a4:b4:13:f6:
84:79:ad:95:9d:75:a9:07:7b:a8:e5:e9:c5:f0:98:
7d:9c:c4:50:e1:b3:01:a4:8a:8c:17:eb:41:fe:df:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:13:DF:FE:43:1C:4C:66:40:56:2D:E3:90:EE:BA:C8:AA:21:39:03
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:56:b2:64:96:88:cc:5d:a0:a5:53:03:12:a1:ed:06:d2:f1:
04:6a:08:6b:c2:7d:b4:fd:52:8a:76:e1:a6:93:61:99:24:37:
43:12:d8:f9:bb:bf:7f:85:c4:70:d7:b1:0a:d4:f7:2a:a4:30:
b5:2a:2c:f1:88:42:29:ae:bc:dc:d5:3d:6c:db:6e:d2:e3:cf:
9c:47:ed:7f:0f:14:e1:ab:dd:ef:18:a1:93:69:6a:21:01:a0:
40:b5:77:4f:3b:26:f5:30:6d:f8:db:00:bf:62:45:1e:82:50:
bc:7c:92:08:5b:4a:e2:b2:d9:84:9f:c2:39:3d:86:1f:16:ee:
c5:31:77:3a:c2:dc:88:83:df:9f:80:b5:b6:46:5b:34:be:9f:
36:ec:ea:1f:e8:36:6d:1c:ce:e3:ed:ba:2d:8f:78:25:e0:e0:
66:19:04:49:8b:c9:50:6d:40:ed:f3:6d:cc:c0:14:af:c4:38:
a9:79:78:86:73:5f:d3:15:29:cf:ac:c9:de:a3:21:9c:95:d7:
0c:67:e4:67:ce:ac:d7:de:d8:e6:eb:3d:28:aa:93:69:f2:fe:
e4:43:34:ee:a5:c9:04:88:a5:e9:14:29:31:33:a4:f3:4a:7c:
78:fb:b3:22:3c:9c:f6:24:ed:f6:d3:69:fd:5b:95:b3:4e:0e:
c3:c6:a1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:18:41 2025 by rpki-client