Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File: RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier: dJ5Er9o0XtR4QubYVaOLxOHpfR37V3XdpACvDLRsFQo=
Subject key identifier: 27:66:0E:CF:7D:31:5E:C9:27:92:DB:2E:66:B1:82:92:09:21:50:B9
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer: /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial: 019A209BE4AD620902FD9C201D518DB8B183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number: 16F1
Signing time: Sun 26 Oct 2025 13:01:18 +0000
Manifest this update: Sun 26 Oct 2025 13:01:18 +0000
Manifest next update: Mon 27 Oct 2025 13:01:18 +0000
Files and hashes: 1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: wbMSkjMWiiuD4B9rhuhtqJp6KCZ2/W4GsU6pHB1JU9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 13:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:e4:ad:62:09:02:fd:9c:20:1d:51:8d:b8:b1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
Validity
Not Before: Oct 26 13:01:18 2025 GMT
Not After : Oct 27 13:01:18 2025 GMT
Subject: CN=27660ecf7d315ec92792db2e66b18292092150b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:a3:17:27:d2:e7:16:12:32:2d:de:7a:5e:
88:52:44:3d:cd:77:e1:35:ca:bb:8e:d1:3b:7f:26:
27:0f:f4:2d:a0:6a:79:8f:01:7f:98:de:2c:51:81:
79:f1:67:7a:e7:a4:17:36:2e:fb:60:82:65:06:cf:
78:7f:cd:9b:13:d2:9c:8e:f6:48:54:e4:33:ee:73:
27:21:28:72:57:e4:98:d0:20:b2:be:fd:f3:cc:7a:
96:09:5d:33:8c:dd:a6:b3:f7:38:1a:6f:92:a1:48:
49:0b:c4:32:37:67:9f:27:ed:36:1b:98:4a:62:26:
38:04:00:df:6a:b7:b8:07:d5:98:f7:03:19:d9:9e:
2b:13:85:22:a6:45:ae:e4:22:55:aa:15:04:8f:a7:
3c:89:74:71:11:52:20:e9:38:b0:0f:5e:e6:82:a9:
41:74:7f:1a:56:f1:bc:56:ae:89:5e:32:4c:88:34:
42:3f:09:aa:88:9b:8a:f0:b5:0d:c6:0f:32:02:c1:
de:c0:80:c7:f7:1c:e2:9a:a8:74:89:f5:90:85:8d:
b1:31:9b:16:40:4b:2a:cc:13:bf:23:33:2a:8c:5a:
6a:77:01:d8:a0:6a:01:cd:43:27:07:92:14:19:fc:
07:fe:a9:b4:e1:c3:be:dc:1d:9c:11:be:b2:8a:8b:
f6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:66:0E:CF:7D:31:5E:C9:27:92:DB:2E:66:B1:82:92:09:21:50:B9
X509v3 Authority Key Identifier:
keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:87:c6:06:8a:0c:4c:6c:f2:6d:76:a9:2a:88:44:f8:78:66:
86:ce:ee:f3:c5:8f:a3:32:67:22:06:27:db:50:b1:ce:03:ec:
20:ff:8f:89:2a:a4:02:dc:ad:ce:07:91:82:9b:ab:9e:1b:00:
33:47:d5:51:43:c7:b4:f6:8b:39:18:22:fe:cc:1e:1b:c9:61:
e5:fe:41:e8:b2:ae:83:23:dc:93:ad:2e:5b:76:1d:86:fe:37:
34:d2:dc:1a:70:30:f5:6a:91:4c:f3:e9:be:0d:92:8c:b8:55:
ff:de:dc:60:fd:ef:11:58:7f:05:27:f2:88:53:42:94:9f:3c:
65:a9:d1:27:ca:ae:2e:f0:b2:89:b0:24:16:94:cc:40:97:22:
89:79:ad:44:5b:5f:a3:fd:5a:84:7a:e9:43:37:ed:38:e0:41:
8a:b9:6a:19:0c:59:95:a8:7e:36:48:e3:94:74:fd:aa:db:62:
09:ab:fe:c8:85:67:d3:8a:ce:d5:60:d4:65:b0:00:15:a6:95:
a7:e8:85:61:79:55:f2:7b:a7:9e:04:09:b5:64:4e:b7:84:0d:
e4:80:4f:72:f9:66:8f:a6:d6:ea:46:a3:2c:58:e5:79:62:01:
5c:bf:63:32:c9:17:cf:7b:95:22:71:5c:87:1c:f8:7c:5f:1a:
91:95:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:57:28 2025 by rpki-client