Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
File: aSmliG8vTpfb3V8J6IlmDDtuEzs.mft (raw, json)
Hash identifier: Ur30NejupPXhVbgzieHXPlHLqUsBjqLhSttyUQoc6N8=
Subject key identifier: A1:88:19:6C:C4:3D:A9:A6:BB:23:1B:B2:67:00:3F:B8:3B:93:36:AD
Authority key identifier: 69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
Certificate issuer: /CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Certificate serial: 0199FBEB57CC8F1D7B95C0F2A042C44BC25D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:08 +0000
Manifest this update: Sun 19 Oct 2025 10:02:08 +0000
Manifest next update: Mon 20 Oct 2025 10:02:08 +0000
Files and hashes: 1: aSmliG8vTpfb3V8J6IlmDDtuEzs.crl (hash: d6TZLvDFd2GDcT6dACpjKSlQv9H2CxwOG5zY0tULcbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:57:cc:8f:1d:7b:95:c0:f2:a0:42:c4:4b:c2:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6929a5886f2f4e97dbdd5f09e889660c3b6e133b
Validity
Not Before: Oct 19 10:02:08 2025 GMT
Not After : Oct 20 10:02:08 2025 GMT
Subject: CN=a188196cc43da9a6bb231bb267003fb83b9336ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0a:c3:a9:8d:86:24:da:e8:90:03:c2:e0:2d:
90:a8:c4:0f:3c:99:4a:d5:34:e1:52:28:38:e0:60:
4d:ba:3b:a9:a2:5f:b2:8a:cc:e9:5f:8a:6d:3e:f1:
da:ba:02:0a:ee:27:74:70:75:43:34:0a:91:5d:64:
e5:61:78:97:16:cc:b9:f8:96:fa:ea:3e:fd:5b:18:
9b:7f:76:3d:df:a2:24:91:65:0b:04:a1:65:29:6a:
75:5a:57:fd:f6:77:90:ae:a7:7d:11:c0:58:3b:f6:
20:09:f7:2b:ed:37:de:b9:56:33:c1:20:80:c4:6d:
11:27:e5:43:86:e7:c2:c6:31:d4:dc:c6:67:0f:bc:
ca:a8:c1:3d:41:2c:32:3c:a1:fa:75:da:7c:7b:83:
46:84:c5:6b:39:8e:9a:58:99:ae:6f:46:ca:0b:b8:
e4:1c:c0:c0:f2:51:86:90:ae:b2:0f:66:6f:51:e6:
b4:16:f3:48:1f:3d:00:d9:87:f4:ab:2a:f6:2a:e5:
ef:61:05:36:d8:c8:8d:cf:e8:ff:db:0f:e5:2f:65:
1c:c0:e2:51:ba:88:14:a9:06:9c:f6:14:c0:93:63:
3f:5e:fa:d8:d6:57:39:f8:02:89:22:e1:cd:5b:12:
bc:07:34:24:ad:92:98:77:71:16:9b:b1:2c:74:49:
54:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:19:6C:C4:3D:A9:A6:BB:23:1B:B2:67:00:3F:B8:3B:93:36:AD
X509v3 Authority Key Identifier:
keyid:69:29:A5:88:6F:2F:4E:97:DB:DD:5F:09:E8:89:66:0C:3B:6E:13:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aSmliG8vTpfb3V8J6IlmDDtuEzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6dcc07-d2a3-4e94-846a-261fbbc93066/1/aSmliG8vTpfb3V8J6IlmDDtuEzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:00:90:5a:c5:11:f0:13:6a:82:fa:f6:18:90:7e:29:b5:5c:
a7:a7:6d:d5:fb:02:a0:22:ee:e7:23:6e:aa:16:0b:29:7a:2d:
18:0f:92:59:a3:e4:61:8e:a5:fd:71:9c:69:f9:c4:51:07:c6:
62:71:a5:e9:9f:a7:8e:e5:88:86:f4:41:67:f0:0f:5c:e7:8f:
38:69:f8:4d:5a:4c:13:99:b8:13:19:f3:10:f5:6d:f7:b1:cc:
fb:b2:25:48:9e:77:6b:62:53:9b:71:89:58:f4:17:fa:db:f7:
62:6d:74:5e:03:16:41:19:fd:2c:35:f2:2a:73:e3:1a:54:b9:
79:d7:38:1a:19:ed:c2:2e:ba:43:17:1b:2a:07:63:95:46:1d:
cd:96:aa:d3:48:90:0e:91:48:f6:c9:17:bd:9d:4b:48:3b:bb:
dc:28:ca:a7:db:7f:93:15:ae:d4:8d:46:c2:13:6b:81:ca:b2:
59:d1:26:c2:aa:89:11:d9:28:07:40:3d:3e:71:38:71:27:4e:
9c:e6:37:ff:a9:25:0b:e4:2d:a7:ca:0b:77:8e:4e:22:c6:e7:
80:8a:10:b5:ca:db:1d:8b:ba:6a:87:00:2d:b9:2c:e8:e7:89:
bc:a8:ee:24:20:cc:5f:38:bf:2e:69:b7:4a:fd:2e:67:24:f0:
f7:bf:72:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:49 2025 by rpki-client