Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: +3Rute9AHUwm5CvVXuqcJ0mxCC9VjFJJtz3Ow/N06KI=
Subject key identifier: 76:A3:04:48:52:0D:92:53:0B:03:A2:D8:37:6D:B3:A9:D8:BE:45:2B
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 0199FC5857BB6DF9B3E9F330AFBC94AC5A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 12:01:11 +0000
Manifest this update: Sun 19 Oct 2025 12:01:11 +0000
Manifest next update: Mon 20 Oct 2025 12:01:11 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: 5Tayl8M+2odaZSTM7gSoOudcJC5UllLfNSGUTHgK5FE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:57:bb:6d:f9:b3:e9:f3:30:af:bc:94:ac:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Oct 19 12:01:11 2025 GMT
Not After : Oct 20 12:01:11 2025 GMT
Subject: CN=76a30448520d92530b03a2d8376db3a9d8be452b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:96:64:74:5c:fb:1e:62:b9:17:3a:c5:21:
e0:9e:5b:e5:5a:32:81:de:d2:18:b2:54:0c:eb:54:
74:e3:fb:34:52:e3:98:3f:b6:df:24:1b:ef:ae:ad:
8f:fb:75:21:e7:87:16:bc:c1:91:f6:99:6a:e3:e9:
72:85:ac:4f:43:1c:43:7d:df:e9:71:1b:c0:4a:c1:
00:f7:73:2d:4a:88:fc:82:35:a6:31:59:b8:4c:0e:
9c:4a:31:00:6a:c5:23:33:47:a7:21:0f:21:bf:f6:
25:f0:f4:0a:be:ac:9b:9c:42:f9:68:4c:af:84:a7:
1a:ac:77:8a:83:b1:8f:e6:0d:1c:8e:55:b6:c3:ee:
1b:67:07:95:e2:d6:3d:22:72:2e:46:ae:ff:44:83:
c1:95:7e:b6:ee:d5:cb:61:53:63:65:42:26:c2:6d:
f2:1a:cb:45:c5:b4:ef:3a:89:80:a2:e2:80:e5:96:
5b:91:0c:28:30:59:0b:dc:4b:93:8b:22:e8:6c:89:
35:c4:11:6c:7f:c4:3b:49:a3:5d:d9:c0:80:78:8a:
56:db:bf:24:e8:e1:af:f6:ec:a3:29:37:18:7c:94:
d8:a7:fc:a0:f2:38:00:e4:d0:25:22:1c:f5:40:26:
cf:db:4d:07:9e:4f:25:9f:23:9a:e1:96:cd:29:56:
b0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A3:04:48:52:0D:92:53:0B:03:A2:D8:37:6D:B3:A9:D8:BE:45:2B
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:61:e3:04:db:48:ac:42:50:50:d6:f0:61:a5:27:76:e4:88:
21:41:e6:85:d8:5e:ee:7e:48:34:13:16:7e:48:17:ce:1f:b7:
b6:51:15:9a:82:9d:6f:a5:ed:7a:cd:78:3a:48:45:64:5e:f4:
7b:80:c4:f1:a0:7b:9d:2c:bf:b0:36:99:3f:db:e5:c3:16:b2:
4f:2d:79:26:73:c1:28:75:81:81:f7:9a:46:0b:21:eb:ce:fa:
a3:3b:bf:64:bc:62:ec:30:76:1e:40:d8:2e:42:c1:8f:39:6e:
38:1d:36:e6:6e:ff:b7:94:6b:be:5c:df:a6:ab:7f:cc:9f:f6:
96:f2:ad:46:84:63:1f:95:13:83:0e:4e:49:59:c9:41:22:7b:
9e:c5:c6:e6:55:a4:a4:d6:5b:ee:99:1f:3a:6c:d0:78:66:61:
14:c6:5d:58:b9:d9:30:81:ff:bc:2b:31:32:5f:2f:93:6f:20:
fd:65:e4:e8:6c:de:a9:78:a7:c1:e5:40:c8:98:fc:4d:0e:0f:
a4:1d:8a:b3:49:41:9c:28:48:3a:d5:12:fc:f5:7c:c8:10:1e:
05:8d:69:29:7d:63:08:5e:e4:40:ff:8e:18:73:68:0f:dd:bb:
e4:af:43:e4:f9:b9:4b:ea:e8:15:eb:fd:3f:90:df:39:73:2e:
8e:e0:b2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:35 2025 by rpki-client