Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File: 169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier: NoBDdL1H/6KnzbaWYew26Rw9sMI2RU54BuOUHcctKwc=
Subject key identifier: 22:C9:06:07:5C:A7:82:38:ED:A6:0D:CB:52:1F:E5:F1:DA:AB:94:38
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer: /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial: 0199FE7DA27AFEBDB446E33416119CB0B120
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number: 0C8C
Signing time: Sun 19 Oct 2025 22:01:10 +0000
Manifest this update: Sun 19 Oct 2025 22:01:10 +0000
Manifest next update: Mon 20 Oct 2025 22:01:10 +0000
Files and hashes: 1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: 4XbzvQyoMO68IELd5SlqRe5BNIiUAiywULMruL4WBTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:a2:7a:fe:bd:b4:46:e3:34:16:11:9c:b0:b1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Validity
Not Before: Oct 19 22:01:10 2025 GMT
Not After : Oct 20 22:01:10 2025 GMT
Subject: CN=22c906075ca78238eda60dcb521fe5f1daab9438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ed:57:0f:4d:7c:0c:2e:d4:d6:3e:cf:d4:73:
62:e1:39:85:3f:af:1f:9f:c5:83:2e:f9:e0:06:cf:
6a:9f:4c:4e:20:e5:59:8d:fe:69:5e:d0:2e:ad:a1:
d3:4c:c2:c4:37:ac:1b:58:e7:f0:0f:61:d2:25:c7:
a6:7c:dd:4e:04:35:5c:ea:1f:b4:53:10:66:35:cb:
b8:77:2a:fb:5d:e6:a9:b6:c7:e0:34:cc:fb:0d:ac:
bb:92:39:3b:18:2d:fa:a7:a5:89:bd:79:a7:53:76:
f0:0a:a0:44:15:41:bf:3b:38:47:6a:b7:57:22:53:
74:e1:c8:ad:eb:13:ec:4e:3a:e3:0f:24:fc:30:89:
d8:c4:70:d9:a3:70:03:84:4f:5b:98:77:da:cc:ac:
ea:89:47:58:bc:77:ff:80:b3:5c:4a:33:65:e7:5a:
ae:54:3e:cb:65:e4:23:5e:cc:53:97:b2:ed:8f:d2:
41:55:21:bc:90:ca:e0:93:d9:fc:c9:c9:1e:25:99:
78:c2:3d:b3:4b:74:8c:ab:c1:53:21:f7:a2:fe:ae:
23:ad:b7:7e:34:77:61:44:b7:7e:83:17:8f:c4:60:
59:ab:74:d9:e6:f0:ba:03:96:6d:62:98:44:2c:f8:
ac:cf:3f:57:8a:46:da:31:35:af:a7:4a:2d:56:db:
00:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:06:07:5C:A7:82:38:ED:A6:0D:CB:52:1F:E5:F1:DA:AB:94:38
X509v3 Authority Key Identifier:
keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:bb:a8:6d:e0:28:1b:a7:de:33:01:8b:c0:4e:52:67:02:
be:68:72:96:4e:3f:89:96:7c:89:9f:8d:66:78:c5:c8:8f:df:
f2:ca:9a:2e:09:db:dc:6f:db:7e:af:32:94:4f:2f:aa:73:e1:
41:9d:4e:f7:08:f5:48:49:fd:3a:55:82:4b:e7:38:43:3a:93:
5a:3f:85:1e:dd:83:5c:f9:fc:23:66:70:21:72:80:64:2b:bd:
b4:25:07:d1:cd:39:e0:17:6a:27:c0:9f:74:bf:6a:4a:09:b7:
b7:1d:68:cb:f5:cd:ee:de:74:a6:dc:a8:28:97:91:8f:04:78:
cc:8d:81:2d:1f:82:57:41:3a:58:c5:b7:ce:b5:fe:9f:de:1a:
96:6f:4d:05:eb:18:ab:e1:e8:65:1f:0c:6e:78:81:9d:7f:7a:
90:d2:c1:0d:8b:d5:1e:30:13:5b:07:7a:55:4b:76:bd:7b:93:
45:c0:60:bb:e3:9d:01:07:d5:bd:96:8e:d1:19:7b:dc:f8:2e:
6b:82:a8:7a:df:45:fc:52:ce:95:50:80:51:59:8f:0f:62:6e:
0f:0a:1d:f8:b9:89:a6:89:a6:33:85:6c:a9:2d:3f:86:b1:bc:
d8:8d:b4:fc:77:7b:40:b9:a1:cf:3d:28:4b:33:e0:e4:ab:70:
94:6c:2d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:39:44 2025 by rpki-client