Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier: NuAblmrJ2CZ05cokgC8lAZ7pvn8U2blkbXeGGPXToBA=
Subject key identifier: D1:A7:13:E4:E6:BA:99:8E:E8:AE:1C:43:1D:C4:D7:AF:67:21:7F:B8
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer: /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial: 019A71B8B2D340E0262597BBA3DD320945D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 07:02:01 +0000
Manifest this update: Tue 11 Nov 2025 07:02:01 +0000
Manifest next update: Wed 12 Nov 2025 07:02:01 +0000
Files and hashes: 1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: UI/waPLbwHCJtw/wBK8CxjV7d7Df/wrVB7UvTSd/6jQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b2:d3:40:e0:26:25:97:bb:a3:dd:32:09:45:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Validity
Not Before: Nov 11 07:02:01 2025 GMT
Not After : Nov 12 07:02:01 2025 GMT
Subject: CN=d1a713e4e6ba998ee8ae1c431dc4d7af67217fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:99:88:a6:32:52:96:ba:74:ca:c3:3c:14:
cf:f9:ba:f6:67:b3:22:df:90:df:85:a2:16:cf:d2:
b6:b1:d6:7f:1d:42:27:52:de:7a:b4:4b:13:f9:c7:
02:99:50:e2:16:d3:68:12:80:1b:6c:53:b4:8a:47:
c9:64:2b:50:9d:19:0d:7b:24:ce:74:bc:85:d2:f4:
03:23:27:30:8a:37:34:ce:16:d1:e2:89:b3:a1:dc:
5e:77:68:6f:91:fa:43:a5:0b:f4:71:3d:42:b5:bf:
92:e8:69:7a:3c:49:5e:25:c0:47:a7:7f:4c:39:af:
06:50:02:db:c1:15:6b:8e:9d:e5:06:60:31:98:93:
e9:9b:9c:70:14:a2:7d:6b:d1:94:97:0c:3e:6f:df:
15:53:0c:4c:f4:12:4a:9b:c2:76:15:4a:d9:ae:87:
38:61:af:fd:73:bd:5c:1f:8d:c6:61:66:22:77:92:
5d:e6:be:ab:a5:68:87:de:65:9a:2f:82:29:90:46:
12:62:7f:30:32:5f:c1:83:24:ad:6f:0a:64:d4:b3:
ff:33:cf:4a:be:ff:bb:1e:53:d8:d1:52:cc:8d:1c:
ae:99:e7:8a:da:cb:99:ae:43:4f:1c:08:1c:e4:72:
ea:7e:25:19:21:9a:22:b6:c8:ed:2c:0f:ca:1e:0b:
e2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A7:13:E4:E6:BA:99:8E:E8:AE:1C:43:1D:C4:D7:AF:67:21:7F:B8
X509v3 Authority Key Identifier:
keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:1e:9f:09:28:a1:56:e9:dc:e4:1f:66:c3:c7:d4:92:57:95:
86:d0:6d:08:d3:d0:15:be:8d:57:45:b6:27:e7:4e:05:1b:d7:
d0:60:14:a7:a6:53:9b:38:b8:f4:4c:32:e6:9f:6f:db:19:f0:
10:1d:30:aa:a9:28:82:00:bd:0b:91:90:af:2e:f6:ef:1f:8e:
24:cd:31:fd:9a:67:51:1c:8f:51:c0:88:0c:4a:30:bb:4c:1d:
b0:93:ff:10:6b:b3:3f:61:a5:4e:ca:45:ff:12:16:a1:e6:8b:
30:47:0f:df:7b:44:05:06:a5:85:3a:44:9d:ae:70:51:ae:98:
da:07:73:92:9b:85:e0:b3:2a:2b:e6:55:93:a3:ad:83:a9:2b:
db:82:47:1e:c9:2a:84:3b:59:26:fe:8f:c7:41:cd:64:af:74:
84:43:a4:02:b7:53:b7:2d:11:4e:05:5c:58:41:ed:b0:7e:e1:
1b:b8:20:3d:b8:53:f0:0c:df:5d:c8:3c:01:59:d9:f7:e2:e3:
a9:14:da:bc:b5:62:8d:eb:68:4f:f5:b4:41:fc:e0:f2:2b:c2:
15:61:0f:61:10:4c:a6:fe:e1:5e:ad:52:f9:73:a1:8f:de:d6:
27:49:cb:e9:8e:44:a2:e6:e6:28:ef:c4:27:d6:68:d8:64:4c:
9c:92:7f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:47:30 2025 by rpki-client