Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
File: AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json)
Hash identifier: WQBgs6QksgFc4vUji6NOvLeirmVKu3FEjoc17mC8co4=
Subject key identifier: 33:C1:9D:B8:8F:90:7E:EF:96:A5:55:A1:1F:B3:31:1D:3A:CD:03:55
Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Certificate issuer: /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Certificate serial: 019A72939B5B4F7BE5B4EE545547CE68D75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
Manifest number: 0CA0
Signing time: Tue 11 Nov 2025 11:01:07 +0000
Manifest this update: Tue 11 Nov 2025 11:01:07 +0000
Manifest next update: Wed 12 Nov 2025 11:01:07 +0000
Files and hashes: 1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: odkXrY5sxrYuhdQ6ZB8a5xcCwpfDBGffyFzb1Lp3aaE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:9b:5b:4f:7b:e5:b4:ee:54:55:47:ce:68:d7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Validity
Not Before: Nov 11 11:01:07 2025 GMT
Not After : Nov 12 11:01:07 2025 GMT
Subject: CN=33c19db88f907eef96a555a11fb3311d3acd0355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:c7:4b:b6:1f:e9:a2:10:2e:ef:b8:8d:ff:
52:12:a1:f0:3f:2d:1f:02:a0:cf:e0:4d:b1:39:c8:
77:9f:af:73:3a:a7:f5:46:a9:62:27:b6:4b:4a:92:
1a:0a:8d:c8:14:35:8f:4c:9a:6e:b6:5e:fe:1f:dd:
35:b8:2b:8f:21:0e:d2:d0:b6:ef:c3:fc:ad:6f:2d:
79:43:7d:20:06:0d:62:cf:e6:c4:7d:c1:6e:24:75:
9b:4b:b6:36:94:da:9c:b8:92:05:3a:9e:48:a0:cc:
a1:97:a8:17:2d:76:5e:18:45:61:87:a8:94:41:07:
a5:18:d0:57:91:69:7e:64:cf:83:fd:10:8d:68:08:
82:4a:c5:9c:d5:86:75:62:74:da:3b:92:57:93:d3:
0e:0d:6f:ea:3f:c1:f1:77:9e:dd:5d:6e:73:7e:cd:
2b:39:8e:9c:7d:a8:57:0b:4e:e0:22:4c:bb:fa:5b:
3c:cb:74:a7:18:62:98:d3:cf:26:49:59:3c:2d:53:
ec:6e:d1:40:12:11:55:7c:cf:d0:bf:95:3d:92:fc:
a6:5d:2f:31:f5:c1:c8:db:7b:c8:ed:da:60:3d:a6:
41:94:78:c3:e8:d0:7b:02:5b:e6:cf:e9:cd:cd:7c:
e7:16:e5:d9:1d:b8:d9:38:b3:5e:c5:ac:64:5b:55:
9a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C1:9D:B8:8F:90:7E:EF:96:A5:55:A1:1F:B3:31:1D:3A:CD:03:55
X509v3 Authority Key Identifier:
keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e8:74:f8:2f:9f:6c:26:48:89:e4:0a:6f:d3:42:b7:55:d5:
4e:ba:1c:b1:ca:40:23:ac:57:5a:ee:8e:2d:5d:c7:f2:ad:28:
6a:73:a3:ba:d2:54:36:4c:fc:7a:0f:94:e5:8b:e2:ad:93:27:
10:8c:c0:b4:ab:48:cd:2d:d4:53:07:04:a8:53:2f:d4:61:dc:
27:a4:34:6c:eb:fb:8e:7f:1c:c8:5e:a9:71:20:f4:7d:d2:a5:
15:15:f9:33:e1:b2:d0:bd:d1:5c:29:dd:23:f1:71:39:7a:35:
39:ff:32:29:94:cd:d0:1b:ab:36:1c:f7:92:5f:89:b3:3e:b5:
9a:6b:14:f7:c9:8c:b8:d7:00:fb:9f:ad:70:90:22:b9:c5:b1:
ae:61:05:a4:40:9d:a4:73:fa:fa:0b:f3:83:81:f7:6d:7c:dc:
cd:b7:64:26:cc:72:cd:16:9d:fc:0c:3c:d3:c2:48:fa:93:32:
35:fe:16:27:ca:8a:e8:80:cb:34:c1:a7:a3:5d:04:23:c4:18:
63:9f:04:b8:2b:f8:28:85:2b:e9:28:bb:5a:5f:c2:16:ee:17:
4d:c1:13:ec:c7:70:35:a2:ad:6d:d6:9d:bb:32:12:d7:77:be:
8d:17:9a:4c:2a:bd:f7:d4:45:c7:68:9b:85:b1:d7:65:9b:dd:
54:0b:54:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:04 2025 by rpki-client