Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: 6bS+RGoDPtNyyymcC9lGrVfsjW0W2HQLP0mw5RCj1uw=
Subject key identifier: 67:E6:65:58:01:A3:9F:25:14:F4:CA:5C:DC:83:48:91:59:D3:EA:E4
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 019A217758712F91E0C3ED0E1C8C735E643C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 16F6
Signing time: Sun 26 Oct 2025 17:01:00 +0000
Manifest this update: Sun 26 Oct 2025 17:01:00 +0000
Manifest next update: Mon 27 Oct 2025 17:01:00 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: vMwdpzSMqy+TUxNWVSnzHYXdf+zDrrdx+zret7+R1Io=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:77:58:71:2f:91:e0:c3:ed:0e:1c:8c:73:5e:64:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Oct 26 17:01:00 2025 GMT
Not After : Oct 27 17:01:00 2025 GMT
Subject: CN=67e6655801a39f2514f4ca5cdc83489159d3eae4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:3f:23:22:97:3a:ce:af:2d:f5:1f:1c:0b:
06:75:24:c7:56:ce:95:3b:e1:42:f4:e6:23:a4:03:
72:d4:bc:b5:9d:f3:ec:e7:16:c8:0e:2d:a3:bd:b8:
6e:98:3b:0b:e9:f8:5d:dc:71:db:f3:03:23:27:f7:
4c:a6:47:71:e3:ed:8a:0e:cf:78:ad:70:d3:f2:29:
44:73:03:4b:27:fb:26:52:a8:47:7b:d3:ce:4f:98:
48:74:02:73:d4:bc:ac:4b:6a:45:62:a6:ad:34:16:
9c:5c:16:88:b7:c0:1e:9d:fe:08:59:a9:9d:94:91:
c1:37:dc:8e:87:72:f8:62:b2:be:57:96:9c:f3:5f:
76:4a:27:3e:a8:b0:7c:23:4e:8d:4b:2c:1b:fc:d4:
84:3a:21:b9:5f:0b:8f:49:44:45:47:b4:d3:49:ac:
a3:69:a4:c0:68:b9:57:4b:7c:26:3c:da:26:1b:6e:
5d:36:67:8a:ef:37:05:4c:e1:97:54:00:bc:8a:c5:
f8:d5:2f:c7:da:cc:d3:8c:24:ed:28:2e:6e:05:e9:
b4:11:19:4a:8a:e3:77:1c:3a:cd:08:fe:42:10:18:
d6:d8:5d:ff:65:2a:ba:1d:34:9b:4a:f9:7f:90:1c:
66:d1:23:19:a3:37:e5:9d:05:23:8f:09:0f:13:40:
01:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E6:65:58:01:A3:9F:25:14:F4:CA:5C:DC:83:48:91:59:D3:EA:E4
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c3:1f:e5:7b:3d:97:ed:99:74:be:e8:45:a5:74:ab:05:89:
c3:37:5e:84:ed:37:cb:ad:4e:14:ab:07:e2:c3:40:2d:e3:81:
64:6a:b5:5a:4b:13:5d:a6:ea:37:20:78:51:da:d1:fc:ea:39:
75:70:22:eb:8b:a5:bd:c5:a6:1c:b6:ff:c3:6d:67:1a:02:53:
c2:fe:3a:01:94:4f:ff:0e:4e:bd:ca:4e:eb:99:d1:e7:12:79:
56:f6:0a:9d:6c:b3:44:bc:9b:b0:bd:98:11:09:b0:44:8e:ae:
20:f2:3f:6c:ea:2f:d5:00:6c:77:d2:c5:64:d8:0b:ba:30:3d:
c5:09:c7:8e:33:f6:e4:6e:7c:be:79:55:04:e0:14:14:2d:6b:
00:e2:bb:c1:e7:f0:c0:28:48:d9:11:e9:8d:a3:70:10:96:05:
6d:66:3f:d4:2c:08:fa:61:23:5e:1d:4b:db:14:db:89:a4:5a:
dc:10:7b:77:1c:8d:ea:2f:78:56:e5:8d:db:49:72:f2:79:39:
bb:b5:e2:af:05:36:eb:48:3b:47:f5:c7:a9:f4:8a:69:de:58:
03:0f:d4:df:e5:a2:e4:07:14:2e:ce:8d:59:9b:11:47:67:59:
02:6b:46:eb:c5:35:26:1d:67:06:a0:d2:5a:ab:aa:74:1a:4d:
45:6c:9c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 22:58:19 2025 by rpki-client