Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
File: mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft (raw, json)
Hash identifier: pCCjtiYqRqFwZX9S+x8mAKOr6wqdegTVr8U490LItLY=
Subject key identifier: A8:2A:06:32:1C:DA:6C:FC:B1:41:DF:59:63:0E:2B:DA:5A:D1:EF:89
Authority key identifier: 98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
Certificate issuer: /CN=983ea291971990dc486f93812783fadd87ade863
Certificate serial: 019A71B79A6A3673C250DACEDC741BFF1E00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
Manifest number: 0AE7
Signing time: Tue 11 Nov 2025 07:00:49 +0000
Manifest this update: Tue 11 Nov 2025 07:00:49 +0000
Manifest next update: Wed 12 Nov 2025 07:00:49 +0000
Files and hashes: 1: mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl (hash: BM0cfl15NA/LJXTFcWp42Ecv4K9+lpwb0yoZuJVGeDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:9a:6a:36:73:c2:50:da:ce:dc:74:1b:ff:1e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983ea291971990dc486f93812783fadd87ade863
Validity
Not Before: Nov 11 07:00:49 2025 GMT
Not After : Nov 12 07:00:49 2025 GMT
Subject: CN=a82a06321cda6cfcb141df59630e2bda5ad1ef89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:40:76:32:62:54:47:a3:e4:22:e4:9f:f9:39:
bd:51:51:1d:ae:b8:49:12:7c:f0:ae:a7:76:eb:02:
99:2f:1c:0e:20:01:41:66:e4:43:f8:39:6a:41:2e:
4f:18:3a:5d:f1:d8:05:c7:e0:7f:ff:c1:e4:29:fb:
a1:c3:71:00:60:06:5b:41:6a:05:48:ec:c9:77:90:
d7:32:79:2d:5d:0c:71:1f:97:d8:6d:6b:ad:14:06:
ec:2c:e5:8c:4a:8d:22:60:4f:e8:ae:58:61:71:70:
e9:f6:5f:7e:3c:ef:fe:38:e2:2e:c2:16:9f:c0:ff:
d5:61:d7:83:56:e1:a8:4d:dd:f2:e0:81:dd:f2:ae:
2f:64:d9:1e:3b:36:32:b2:ac:80:68:39:50:38:f3:
d2:13:03:be:9b:a1:ae:37:ba:9d:81:83:60:38:79:
4d:4f:f3:77:88:0d:bd:9d:0a:2d:1c:2b:74:24:1b:
fa:99:da:65:e6:17:fe:6b:1d:e9:41:92:74:7d:c4:
51:2e:07:d5:3f:2e:7f:76:4d:bf:22:78:c2:d2:81:
81:27:d4:9a:ca:4b:d3:39:23:77:05:23:93:6b:98:
3e:7d:bb:ff:3a:85:45:c3:8d:cb:4b:dd:45:50:47:
17:7e:b3:09:b1:de:51:f7:f1:59:7a:6e:8c:dd:a5:
b8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:06:32:1C:DA:6C:FC:B1:41:DF:59:63:0E:2B:DA:5A:D1:EF:89
X509v3 Authority Key Identifier:
keyid:98:3E:A2:91:97:19:90:DC:48:6F:93:81:27:83:FA:DD:87:AD:E8:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD6ikZcZkNxIb5OBJ4P63Yet6GM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/42e99c-74a7-4155-b2b4-c6e9e0fd7080/1/mD6ikZcZkNxIb5OBJ4P63Yet6GM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:23:35:54:a1:e2:e5:51:3b:69:b3:53:1e:54:a2:8c:55:a2:
7f:4d:41:07:eb:f2:13:70:67:97:85:77:1a:cb:6b:84:9c:ea:
d1:19:2e:ff:cb:05:2b:72:6e:22:87:42:07:a3:f3:b0:77:f8:
05:ae:48:63:ae:21:bd:71:15:1e:16:b7:f1:2c:0c:ce:34:d8:
16:02:e2:9b:40:50:fd:0f:3d:b4:33:b0:6e:95:d4:b3:9c:fc:
c3:4c:d6:02:7e:46:d1:dc:5b:14:2f:0e:36:d9:c9:1b:b6:c8:
2b:79:69:95:2c:40:4c:2e:8d:66:9d:1f:6a:f1:11:3e:be:ec:
31:b1:20:62:c7:f3:26:3e:53:71:55:72:20:f6:d8:a8:f7:51:
27:da:fc:d9:8f:b4:f0:47:9a:7a:01:90:c4:8f:3c:a5:6e:a0:
b6:ba:bf:fe:bd:1b:23:d1:a0:10:9f:f2:fd:15:ed:7d:14:6c:
58:7f:e1:68:0e:bc:37:54:a5:9a:39:e0:5e:98:e1:97:0a:44:
b1:e3:21:6f:49:9c:35:65:8d:7a:e2:3b:c3:70:af:c9:9d:9e:
28:aa:bb:ec:3d:75:2b:61:2a:33:a4:e1:3c:67:31:d5:ce:e3:
29:b4:9a:75:f4:e5:db:47:c1:fa:7d:f7:da:6d:53:f4:29:20:
b3:cd:77:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:43 2025 by rpki-client