Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: nRX+Yjh50MHy/q7dUsX1/8EGwOh4gNu8pDcvWSRtolE=
Subject key identifier: A7:28:94:44:73:F0:D3:93:03:A1:48:62:CB:F5:0F:C2:41:6C:69:1F
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 019923A0D8C2A528BC9CACD8A87312645952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 10:02:47 +0000
Manifest this update: Sun 07 Sep 2025 10:02:47 +0000
Manifest next update: Mon 08 Sep 2025 10:02:47 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: vsef27zmFttpWcVhsUhemCS2jkU0+jzFx1RutmDbdXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:d8:c2:a5:28:bc:9c:ac:d8:a8:73:12:64:59:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Sep 7 10:02:47 2025 GMT
Not After : Sep 8 10:02:47 2025 GMT
Subject: CN=a728944473f0d39303a14862cbf50fc2416c691f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c3:c1:60:64:c1:11:6b:ae:6b:76:98:89:07:
4a:83:7e:2b:ec:fe:70:32:79:55:b1:6b:99:94:d0:
70:02:8f:70:ad:32:6e:0a:77:59:61:58:50:bb:ad:
cd:87:95:4b:d0:d5:46:43:57:e3:f2:bd:d4:0b:09:
d2:bf:c1:a3:f5:03:9f:e6:61:c7:b6:4e:d9:db:8c:
d2:68:9a:ea:08:77:02:14:89:16:3d:ce:1b:f2:c1:
8c:3c:6d:0a:56:5b:65:b6:62:e1:0c:b1:56:4e:11:
35:97:5e:89:06:1a:47:ab:f9:64:9f:a8:bf:06:42:
3e:7d:0f:7e:de:15:5d:95:c2:86:b6:0b:90:3a:04:
9f:83:2d:40:52:53:9b:85:48:b4:05:14:8a:cb:1b:
19:91:30:ff:c3:62:70:12:3f:dd:73:6d:33:69:30:
a1:44:02:4f:89:a2:1c:05:a0:8d:64:e8:36:67:ae:
b3:40:3b:c8:49:8e:57:6a:62:8f:0c:c9:c2:1b:54:
06:23:ef:83:23:88:96:ff:67:61:5c:f8:f3:b3:39:
18:e7:38:b7:de:59:ea:7b:00:bf:f5:08:f3:27:12:
05:47:84:c8:e3:01:7c:31:4d:ba:86:b8:1b:30:1c:
f6:1e:65:68:25:60:ca:55:4c:2b:01:d2:46:5c:2c:
36:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:94:44:73:F0:D3:93:03:A1:48:62:CB:F5:0F:C2:41:6C:69:1F
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:99:34:b2:f5:12:56:a6:74:48:66:21:66:b6:b2:06:5b:d5:
5a:fb:11:d5:f7:51:de:44:3b:ac:ad:64:f3:66:44:9e:34:b0:
77:7f:7d:7d:6d:85:60:2b:79:79:d4:a7:32:6d:29:c0:74:59:
73:a8:49:bf:32:7a:a2:d0:a8:ec:23:6e:62:dc:6d:70:be:a2:
f3:3b:18:06:7c:5b:2b:71:68:58:e3:23:a1:cc:b9:8c:c8:c1:
7d:19:15:1e:4a:e7:ec:90:ea:d6:57:a0:19:b0:85:10:d3:1a:
0b:2a:72:d0:b9:1e:cd:7b:88:d2:08:aa:aa:c0:67:83:9b:79:
68:0e:35:54:82:01:3c:fd:83:ce:4b:35:7b:07:f8:e0:31:96:
be:10:03:57:c5:e8:88:65:4e:b6:67:f9:4b:2b:b3:75:a8:b4:
27:c7:39:18:1f:6c:9e:d2:08:76:e2:4a:52:ef:74:b4:ac:6a:
c0:96:28:9b:ae:5e:cf:66:cc:79:68:29:53:3b:61:0c:5a:de:
84:62:fd:a3:9f:5c:08:3a:68:31:12:b7:ea:bf:51:24:c1:30:
c7:51:e0:18:43:6e:f3:41:64:e3:1b:f5:92:02:de:db:57:26:
73:73:3a:dd:a8:8f:da:42:b5:cf:59:1e:8b:5c:79:ac:bc:6d:
a3:e2:0d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:26:17 2025 by rpki-client