Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: EWxPrvORldhgihZK8HrLpq4vxAcDE3x6EPcZb8ft1WE=
Subject key identifier: C6:0A:04:33:73:F5:5F:A3:BA:38:5C:68:B9:16:CA:33:58:ED:3D:D2
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 0199FB0EBDB97008AF28D8CC11465E4DF74E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 06:01:11 +0000
Manifest this update: Sun 19 Oct 2025 06:01:11 +0000
Manifest next update: Mon 20 Oct 2025 06:01:11 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: IaOCvTzwILVZePmIYM78G9P5yxPB5E1UzyUUk+EbCpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:bd:b9:70:08:af:28:d8:cc:11:46:5e:4d:f7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Oct 19 06:01:11 2025 GMT
Not After : Oct 20 06:01:11 2025 GMT
Subject: CN=c60a043373f55fa3ba385c68b916ca3358ed3dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:a4:2c:1e:04:bc:8a:4f:db:30:5e:45:e3:
6b:05:dc:73:73:14:ed:de:e1:dd:46:db:7e:31:f0:
12:b8:ee:f2:78:5d:65:d7:1a:00:f4:ad:de:c1:b2:
52:09:88:a1:5d:21:70:39:e1:de:18:d0:0d:d2:82:
95:ed:ea:37:53:e6:17:68:3e:96:14:b0:5b:6c:1f:
45:2f:b0:d3:85:e7:0c:56:32:33:5c:96:d2:5b:14:
bb:3e:29:28:84:53:ab:a7:24:cd:d7:29:af:71:35:
45:50:31:da:e3:dc:b3:83:e1:38:0e:55:04:6d:a1:
d5:2b:3a:9f:53:30:38:04:57:74:91:97:5c:cf:67:
a9:20:3c:ff:a8:cf:1a:c0:e6:65:90:af:ef:ef:a9:
d0:05:17:a2:2e:2a:2c:a0:75:96:b1:7d:1e:86:44:
09:bd:b5:c0:30:d0:4c:99:61:10:17:1f:fe:c2:28:
3e:93:f1:83:c8:3b:4d:d5:03:3b:27:41:31:04:e0:
4b:ea:64:f0:9c:f3:a6:d2:3f:e2:f7:59:29:18:ed:
54:d8:ad:75:d5:05:d9:78:d4:83:c1:cb:cd:1c:bc:
f2:c8:fc:47:4d:c9:13:ff:5b:8b:54:8e:63:91:8f:
90:2f:02:ec:28:e8:a3:72:25:1d:37:a0:31:e0:93:
1b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:04:33:73:F5:5F:A3:BA:38:5C:68:B9:16:CA:33:58:ED:3D:D2
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:75:f8:a7:a9:51:a1:04:4d:88:b1:c7:ee:e4:63:af:b8:ca:
20:8c:d3:5b:db:66:e1:0b:0a:16:0f:5b:45:a4:58:d2:36:e2:
d3:a4:23:69:9e:0f:7c:b7:73:fc:d7:6f:2e:38:5e:e9:4f:60:
b6:a0:10:61:a1:61:4d:49:a0:9f:18:3b:12:0a:d8:bb:3d:ef:
6b:7a:ab:9f:0e:65:61:37:d4:fb:cf:a4:32:fb:60:c6:34:b9:
96:96:3c:09:da:39:03:a7:0f:d6:07:3f:00:13:0c:e6:87:77:
d1:63:e0:ef:5b:3c:06:09:72:8e:c2:f4:39:13:c4:c9:48:33:
de:36:62:6d:e6:99:3d:ab:e7:e6:14:c7:dc:03:63:a2:f5:b0:
74:f0:7e:ab:eb:2c:23:82:b7:25:77:80:63:ed:cc:01:cd:6b:
3e:ff:ec:ec:93:81:62:74:72:ba:e1:21:d9:9f:9d:7b:42:9f:
49:8f:fe:2b:a3:a0:b4:e4:bd:e9:52:0b:f2:f8:cb:86:a8:62:
14:07:21:1d:31:fe:f4:f6:49:3b:2f:95:a3:02:24:93:7a:c7:
a8:4a:ad:fc:2a:5e:56:d4:78:35:c4:ae:fa:6a:60:95:96:70:
9e:95:b0:0a:8b:56:b9:de:7b:32:cf:24:27:3b:d2:d3:3a:e8:
e5:c7:17:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:45 2025 by rpki-client