Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
File: 18uPgbjTiC19sXOlSQCWYRV0jL8.mft (raw, json)
Hash identifier: tXN039SPK4Af1BImh5n2JmF7/zrkcDhSPitFIG9qvaw=
Subject key identifier: DE:5C:E5:A0:C4:7A:45:D8:45:3A:F2:26:C7:64:47:9E:3A:E6:B4:E1
Authority key identifier: D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
Certificate issuer: /CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Certificate serial: 0199FE47247A2523D7D4A7907A9D9886BCD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 21:01:39 +0000
Manifest this update: Sun 19 Oct 2025 21:01:39 +0000
Manifest next update: Mon 20 Oct 2025 21:01:39 +0000
Files and hashes: 1: 18uPgbjTiC19sXOlSQCWYRV0jL8.crl (hash: cNtlSYjN2IzHhBSGBX+VSeNazbRRDfu10DUB2m8RyBU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:24:7a:25:23:d7:d4:a7:90:7a:9d:98:86:bc:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7cb8f81b8d3882d7db173a54900966115748cbf
Validity
Not Before: Oct 19 21:01:39 2025 GMT
Not After : Oct 20 21:01:39 2025 GMT
Subject: CN=de5ce5a0c47a45d8453af226c764479e3ae6b4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:2d:f2:98:9c:29:d8:88:95:32:21:44:1c:e7:
a6:19:1e:b7:92:c3:c2:b7:da:b1:34:c4:9d:c5:72:
d2:6f:f9:5c:f0:83:e4:6d:46:47:26:4b:a7:52:d9:
cd:93:a4:dd:e5:0b:81:a6:48:1f:c2:e1:51:5b:45:
08:1e:79:6d:00:b0:b8:5b:f0:92:1e:7b:9f:0a:62:
9e:56:e4:d2:95:59:b9:2b:04:69:21:7b:84:0f:9c:
5e:b7:e6:96:96:52:32:f8:76:7c:a2:2a:5c:98:10:
ae:5a:b3:dd:c4:2b:32:84:29:af:95:48:ee:b2:11:
66:d1:eb:a9:08:e4:66:0b:67:fc:e4:bc:40:e0:31:
b0:f3:d9:fe:e9:20:24:58:f8:28:9e:6e:cd:45:e7:
3e:1b:5a:ac:5c:74:7c:43:0b:82:68:fe:07:70:48:
b8:df:d3:47:82:a6:08:b8:bf:8e:e9:30:09:9b:ce:
a7:a1:88:51:bb:78:0b:1b:03:f3:71:40:fb:f8:fc:
dc:38:bb:8f:b8:5e:6b:36:f7:6c:49:9b:6c:e3:e9:
fd:ba:ba:26:bf:b7:ed:7c:8d:11:91:d7:89:56:7f:
a5:6d:58:40:c5:04:a3:88:0d:79:4f:18:a2:f6:bd:
08:0d:bd:c2:6d:f3:74:3a:a7:67:7d:84:26:18:4e:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:5C:E5:A0:C4:7A:45:D8:45:3A:F2:26:C7:64:47:9E:3A:E6:B4:E1
X509v3 Authority Key Identifier:
keyid:D7:CB:8F:81:B8:D3:88:2D:7D:B1:73:A5:49:00:96:61:15:74:8C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18uPgbjTiC19sXOlSQCWYRV0jL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/040dae-3430-435d-abdb-2e871c597f97/1/18uPgbjTiC19sXOlSQCWYRV0jL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9e:7d:bc:cd:c1:55:84:f5:aa:b6:69:fd:a1:c2:64:64:77:
01:ce:1b:69:cb:73:23:40:2b:94:e7:50:37:78:80:6a:05:b7:
0c:cd:00:9b:e6:05:6e:3e:25:ed:4d:bd:90:67:89:84:43:dd:
f7:37:20:d8:8c:8c:34:92:3e:b0:c4:f2:89:b2:24:2e:3e:2d:
87:c1:25:f2:01:31:8b:45:f8:cb:ee:d4:d8:5c:7d:3f:6b:14:
47:41:fd:d1:ad:3a:57:cb:af:f0:98:eb:4d:b8:0f:83:bb:f1:
04:4f:90:88:3e:2e:9b:f5:a1:6a:21:65:21:10:52:fe:86:e3:
b5:7f:15:af:5a:8f:da:ba:aa:f5:a7:f8:18:2b:6f:39:d0:f7:
6f:58:66:3a:e3:24:24:4d:c2:54:d8:74:0c:b9:e5:98:3f:40:
d7:53:25:e0:7c:e8:cd:e1:78:73:83:3c:56:4b:c8:e6:c1:49:
9a:f5:65:58:c2:2c:de:ee:06:bd:26:e2:2f:10:4a:66:a7:1c:
27:35:b3:7d:63:2b:9b:01:af:c0:3d:66:da:0b:38:72:00:18:
b6:49:23:73:75:63:e5:28:10:bc:d7:7a:0a:ba:33:4c:70:b6:
cd:6d:31:a7:d9:38:74:46:bc:35:ab:08:0d:a0:0a:a8:bc:9d:
97:13:3a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:17:57 2025 by rpki-client