Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: K4vzyTr4i68Cleg86Sb5BpPCvBLbqlyNrH8HmzNZrHU=
Subject key identifier: B4:69:C3:88:B6:B9:46:EF:AD:22:B6:C3:AE:BF:4E:04:34:CC:8A:56
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 0199FB45DA6EF64011DEC4D0B0EC4C71AD17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 166F
Signing time: Sun 19 Oct 2025 07:01:23 +0000
Manifest this update: Sun 19 Oct 2025 07:01:23 +0000
Manifest next update: Mon 20 Oct 2025 07:01:23 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: yewd4I196zVqurcKlFJhgJSmpJCyqxTndLhmei+mA7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:da:6e:f6:40:11:de:c4:d0:b0:ec:4c:71:ad:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Oct 19 07:01:23 2025 GMT
Not After : Oct 20 07:01:23 2025 GMT
Subject: CN=b469c388b6b946efad22b6c3aebf4e0434cc8a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:e3:c3:5a:49:93:f8:8b:17:98:0d:6f:a6:
2b:da:7b:c1:ef:8e:ed:13:25:fe:a8:82:9b:db:dc:
ca:29:09:8f:39:70:bd:5e:1d:c8:75:1e:b4:9b:ff:
fa:79:2b:ad:88:43:c6:92:19:91:9f:07:be:00:cd:
b2:e3:9c:42:74:94:80:c2:b1:82:14:8f:3e:af:1b:
25:89:cb:76:ab:38:71:cb:c5:f5:d6:e5:ba:42:aa:
91:af:84:05:30:0f:b1:bc:d6:6c:d6:9b:a2:fb:f8:
83:af:db:bd:4f:38:d7:ee:40:12:0d:ce:c2:52:2d:
fb:45:a2:39:13:b1:57:7b:52:08:23:24:12:03:21:
19:f9:5c:fc:47:18:69:2a:e4:a1:85:9f:19:f1:69:
fd:2b:88:de:59:05:61:24:b9:3f:8d:0e:bf:95:bd:
5c:36:08:3c:5c:85:28:15:db:49:0a:f3:df:13:f8:
15:6d:45:e0:24:f8:58:68:79:38:ab:d5:7c:bb:d9:
61:a0:6f:6c:ac:98:14:3f:2d:2e:25:e4:82:53:af:
cf:6c:e3:d6:a2:97:70:d3:af:cd:cf:e9:81:c6:68:
d3:38:f1:98:43:4f:55:4b:97:7b:42:50:83:f3:f7:
1c:f3:b2:31:22:17:9f:d3:bd:70:6d:03:56:31:ca:
cd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:69:C3:88:B6:B9:46:EF:AD:22:B6:C3:AE:BF:4E:04:34:CC:8A:56
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b8:3b:5b:bf:0c:ec:2e:8e:1e:b0:22:f8:c6:92:89:0c:10:
4f:8b:7b:64:cc:50:9f:b8:75:b2:49:7b:7b:ab:ce:ca:4c:df:
95:1c:24:fa:72:98:c7:95:56:2c:ca:76:ee:a8:c2:ec:fd:9e:
cc:87:bb:85:7d:0c:c9:0a:4e:52:29:eb:f3:3e:b4:8f:5b:e0:
fd:fe:36:91:95:4e:c3:71:23:37:1e:79:b5:fe:e6:ac:ab:a0:
ad:ea:e7:39:bc:f3:54:ad:45:16:ae:f8:ae:2c:99:e5:b9:ab:
de:bd:3c:92:45:ec:8f:84:e2:35:dc:36:8c:b7:35:5e:1e:ef:
ac:af:01:93:c8:43:4c:03:b7:d5:67:63:5c:b6:f7:4a:20:45:
bc:9a:c3:15:38:cd:50:7d:b4:28:a0:aa:94:eb:91:d5:5d:9c:
29:bf:ad:27:83:5b:8e:13:74:88:fb:e8:c6:0b:ce:cd:b1:0e:
28:e7:c4:6e:c1:3b:7d:33:84:43:b5:bd:1c:d9:40:66:0c:7d:
f6:b6:9a:bd:46:9d:ba:77:d4:31:6e:c4:e6:c4:63:3c:04:f2:
ec:dd:ae:45:1f:71:f9:47:ed:22:e4:45:60:8c:df:0d:11:73:
7a:42:31:36:1b:8e:36:b2:de:7e:8f:80:bd:a6:31:9f:5b:9a:
e9:60:a6:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:23:35 2025 by rpki-client