Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier: GbOrs37yCF3MFHPf2e8OhJQUzYOC/QtaI9PIA+MOR3g=
Subject key identifier: 71:EF:2C:96:2B:0D:54:18:81:16:55:52:E2:61:7A:39:90:59:36:3E
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial: 0199239FFD00DBBB0C2B3A39966C5FD9FBB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number: 0A3A
Signing time: Sun 07 Sep 2025 10:01:51 +0000
Manifest this update: Sun 07 Sep 2025 10:01:51 +0000
Manifest next update: Mon 08 Sep 2025 10:01:51 +0000
Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: 52pK7fZF6p7KuZBDGuT4jJVzJN0+tBXccGVnYLkR+sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:fd:00:db:bb:0c:2b:3a:39:96:6c:5f:d9:fb:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983ea291971990dc486f93812783fadd87ade863
Validity
Not Before: Sep 7 10:01:51 2025 GMT
Not After : Sep 8 10:01:51 2025 GMT
Subject: CN=71ef2c962b0d541881165552e2617a399059363e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:8f:71:c2:e3:34:52:e3:50:e4:b4:33:17:
a8:06:fe:64:16:43:95:68:67:02:71:0d:6b:ff:c5:
7c:6a:da:34:bf:58:fa:3d:55:20:d9:ad:cc:5b:16:
52:75:bc:f7:6d:3f:2d:e2:f8:0c:94:d2:4a:17:aa:
dc:c6:08:ef:fa:06:34:d6:d6:2e:a4:e6:c2:7f:f3:
6a:15:f9:7d:a6:31:cf:59:00:5a:29:ed:0b:90:a4:
e3:7e:33:ce:b1:23:67:0a:ec:7d:dc:74:f6:21:1b:
c1:6a:2a:bd:f5:a2:42:c2:db:4c:c6:ac:22:54:d4:
76:19:ae:7a:09:87:41:ec:5c:fe:75:0d:32:64:ed:
ce:cd:f6:8f:4c:17:95:c8:ee:36:5a:36:cd:d8:7a:
01:7e:08:08:68:d6:4e:f4:44:d9:d7:44:fe:f8:06:
dc:e2:bc:67:55:d3:f7:1d:6a:d4:d5:87:bf:e5:e9:
ff:e3:e3:8b:76:df:91:44:10:71:f0:7d:73:c0:18:
2c:4d:d6:8e:e5:c5:30:ed:5f:66:02:a2:83:5f:c4:
a6:46:5d:e3:e3:aa:f9:1f:34:b5:0a:87:07:8b:0a:
c1:ec:15:5c:18:d1:7d:ca:f6:4a:da:b4:76:49:3c:
d5:cc:21:bc:66:95:77:6e:09:1d:dd:e0:b7:92:9f:
b8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EF:2C:96:2B:0D:54:18:81:16:55:52:E2:61:7A:39:90:59:36:3E
X509v3 Authority Key Identifier:
keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8e:aa:65:53:a4:43:ee:7c:dc:d4:3a:27:72:f0:0f:59:33:
22:74:b2:d8:a8:24:4d:25:16:c0:61:f7:af:44:16:7b:bc:c2:
92:90:b1:25:0e:57:7f:4e:69:63:d1:a3:99:24:78:a9:bd:33:
50:93:86:f6:fd:84:7e:1d:8a:a1:3b:04:cc:1f:50:dd:9c:7c:
4a:73:63:1e:ea:ce:b6:1c:c1:4c:85:d9:0f:77:f7:0b:0c:f5:
1e:12:44:37:e5:10:f7:dd:ca:93:36:a1:f8:ff:1e:79:8c:24:
89:b7:40:40:3e:d8:8b:a2:e8:83:0a:93:66:59:de:f4:51:1b:
ce:e7:16:94:8a:d2:65:ea:8d:9d:32:8f:eb:6a:e2:9d:0d:22:
65:50:98:48:7f:f0:b1:e9:fa:ab:b6:aa:d3:31:d2:f2:7c:6a:
06:9b:45:4d:72:39:9a:a1:14:36:f1:38:4b:12:6f:a8:e0:76:
e8:65:1c:ce:74:fa:88:47:98:85:5f:96:45:9a:c9:ce:c7:c2:
a8:33:bc:20:da:ea:8c:b6:d3:a8:00:0f:35:51:31:45:68:ef:
af:d7:d9:85:f9:d1:fa:90:0f:71:77:f8:5e:4e:de:50:09:bd:
68:ee:67:88:f7:2b:ae:be:30:76:31:04:07:04:fc:aa:ca:a7:
9f:04:fa:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:10 2025 by rpki-client