Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: ITYbFhpPUYG4R0SyzeOhzuTA8STkhrdR3KdlHOsCyCw=
Subject key identifier: BC:B4:AA:12:F8:DB:A4:4A:85:80:8D:EC:23:7F:AC:02:0C:BE:89:45
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 0199FB0EF9DA6BE1C2A8781F22ACED7918FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 06:01:26 +0000
Manifest this update: Sun 19 Oct 2025 06:01:26 +0000
Manifest next update: Mon 20 Oct 2025 06:01:26 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: QOdDkfgHfLbJCK7OsTQiKPrdRvL0iQTidoqvpIvVYkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:f9:da:6b:e1:c2:a8:78:1f:22:ac:ed:79:18:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Oct 19 06:01:26 2025 GMT
Not After : Oct 20 06:01:26 2025 GMT
Subject: CN=bcb4aa12f8dba44a85808dec237fac020cbe8945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:05:2b:64:06:1d:1c:48:1d:62:17:df:b5:
d1:60:0d:26:0d:43:66:b2:9f:46:5a:e6:01:69:b9:
5e:92:31:98:7b:8f:86:f6:39:5e:5a:c7:be:1f:38:
ad:0e:bb:5d:21:13:77:80:68:9f:1a:c3:2e:86:a1:
cb:53:74:f4:3d:b1:6d:6b:33:8d:07:c8:c4:eb:93:
36:37:ac:51:ef:46:c2:80:13:26:f6:23:98:8d:e1:
c8:4f:de:0c:5a:85:10:de:ff:97:76:88:dc:50:3f:
53:6e:69:1c:5a:35:6a:2b:1c:2d:8c:c3:30:b8:a5:
7d:58:7b:f7:00:dc:e2:83:58:25:73:96:3e:0a:43:
45:55:f5:4d:e5:2d:ba:fb:03:62:7b:89:f0:de:a0:
5c:f2:26:b8:ff:35:51:7d:88:c4:f5:95:d4:d5:44:
9e:5f:38:97:fc:14:7d:d9:e2:bc:7f:8a:3a:20:3c:
27:ba:63:6d:b6:4b:b9:79:ac:bc:99:27:a9:e2:df:
17:77:0c:43:86:8e:ff:b8:a5:fc:fc:53:55:ee:3d:
d5:d2:d0:d9:be:7a:69:1b:ff:f0:46:0e:5b:5a:39:
52:77:38:02:f8:a3:ce:f3:54:1a:87:c6:e1:12:fa:
54:fb:93:17:bb:01:2c:b4:f5:63:04:4f:b4:0e:e2:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B4:AA:12:F8:DB:A4:4A:85:80:8D:EC:23:7F:AC:02:0C:BE:89:45
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:82:0c:70:e1:4c:81:cc:11:79:96:85:1a:ec:b1:1f:68:5d:
63:de:f8:df:8e:04:d5:04:c9:d2:3b:1e:54:68:53:96:34:b8:
7b:d9:02:46:c7:4e:6b:d3:73:6a:a5:73:a5:d8:39:21:f3:27:
1c:90:b9:e0:52:3b:f2:27:f2:44:b0:c9:3d:69:25:2f:d2:64:
9f:93:8e:18:2a:7a:f3:fb:d9:61:b4:46:dd:47:af:cd:ce:47:
58:79:e1:08:05:96:03:6d:e6:bd:3f:bd:bf:3b:e6:e5:f2:5e:
63:56:64:3b:cf:fa:95:57:31:1f:67:8b:86:0b:b6:02:84:20:
43:51:9a:ef:47:b8:a1:b1:8a:f4:a3:a9:6b:9f:d2:b2:5b:f8:
a7:d0:6f:81:4d:de:37:2a:b2:a6:7d:35:2f:4e:00:2e:62:90:
1e:93:37:dd:02:31:5e:2c:6b:2e:2e:cb:ed:3d:44:60:80:5b:
4d:7a:a8:36:a9:94:84:2b:83:70:6f:c1:a0:b1:e6:85:e1:74:
6e:e9:70:c4:c1:3b:39:a0:44:cc:ed:37:0c:15:49:7e:7e:a8:
71:c1:46:a9:5b:93:05:1a:89:69:15:a2:5a:fb:48:89:c7:e7:
5d:31:b8:ae:34:f7:f3:cc:81:1f:f0:41:39:67:e6:aa:26:d7:
1c:83:2d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:02 2025 by rpki-client