Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
File: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft (raw, json)
Hash identifier: zoWhZcCsfhuKOuFSsqpAnF0yGYQf5wny48kYYR7QhXA=
Subject key identifier: C7:BC:79:04:53:04:F8:46:DA:EC:83:CF:FC:76:38:B3:B2:5E:E1:57
Authority key identifier: 00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
Certificate issuer: /CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Certificate serial: 019A725CDD39A3E456AC8A342CE300100959
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 10:01:19 +0000
Manifest this update: Tue 11 Nov 2025 10:01:19 +0000
Manifest next update: Wed 12 Nov 2025 10:01:19 +0000
Files and hashes: 1: AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl (hash: w/GbYI+iZBAJDBKd42C2eAyE8obHOV1NDe3d6YnOPTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:dd:39:a3:e4:56:ac:8a:34:2c:e3:00:10:09:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00006d5e0c279311d1a81fd0bbd210d0bdad5942
Validity
Not Before: Nov 11 10:01:19 2025 GMT
Not After : Nov 12 10:01:19 2025 GMT
Subject: CN=c7bc79045304f846daec83cffc7638b3b25ee157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:c1:82:5d:13:6d:0f:f3:b1:51:4e:53:7c:
2b:92:91:e8:5d:69:1f:a4:96:2d:a5:4c:eb:22:a6:
ae:d4:23:df:37:6b:4a:33:11:8f:5f:6c:5f:27:5f:
ef:29:e7:bd:a8:49:35:4d:63:5e:8c:3e:41:c6:8c:
f6:32:07:64:a8:f6:48:cf:a0:2a:28:71:21:57:9b:
32:fb:f9:52:bb:75:ea:9c:45:0f:05:96:4c:87:6c:
f9:08:fe:3d:a4:ae:9d:48:c7:42:c0:4a:98:22:df:
b3:6f:65:5a:84:1f:9b:07:7b:a5:06:2c:9f:ac:a2:
01:fd:5d:dd:a9:d7:07:29:d4:53:10:de:4c:e1:0c:
4e:19:24:b8:89:1b:27:28:07:dd:be:5f:b6:35:1a:
c3:bf:31:ee:7c:d0:63:75:a2:06:79:0e:01:80:0e:
7b:19:dc:81:aa:e0:3c:92:06:6c:92:ce:45:1f:77:
91:c0:af:cf:e8:11:9c:f5:1f:e3:6f:ed:e2:f8:8b:
3b:33:c9:b2:50:7f:13:55:fe:80:b3:d7:d1:10:7c:
d2:7c:ae:14:31:3c:81:e3:f7:f5:5d:6b:fc:83:b5:
29:56:0b:09:6d:16:41:48:4f:99:4d:65:bf:12:f9:
1e:e9:9b:18:5b:46:62:c9:a7:66:a8:63:f3:a0:4c:
f5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:BC:79:04:53:04:F8:46:DA:EC:83:CF:FC:76:38:B3:B2:5E:E1:57
X509v3 Authority Key Identifier:
keyid:00:00:6D:5E:0C:27:93:11:D1:A8:1F:D0:BB:D2:10:D0:BD:AD:59:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/97b7d0-8383-4a37-8cce-1f918d93756f/1/AABtXgwnkxHRqB_Qu9IQ0L2tWUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9f:d5:00:86:24:5a:9e:d6:8d:23:ae:b0:d3:7d:30:18:4b:
57:7e:ce:bd:1a:91:05:ae:92:ff:bb:f0:a5:b1:76:59:4d:52:
cd:d7:f9:4a:5a:ef:76:a5:24:ee:53:1b:73:ac:c1:2f:f1:59:
10:eb:f1:2b:b6:29:8b:ef:8d:93:fc:9d:ff:ce:49:6e:fe:9b:
3b:7d:5b:bb:ce:b0:b5:b4:8b:30:e9:12:c8:03:d1:6e:3b:8f:
d3:60:59:31:50:1e:6c:3f:48:2f:f2:90:a5:5d:81:6a:c2:bd:
e7:cf:66:4f:c5:47:a3:96:98:28:25:a8:74:1d:33:2f:4c:ab:
bd:0a:40:82:92:ef:cc:3e:fc:b1:12:e7:4e:98:9c:a3:2b:7d:
cd:e2:c5:b3:2c:4c:51:01:62:74:28:74:23:2e:03:9b:c7:5d:
5f:7f:57:7a:3e:57:52:16:16:71:07:62:d9:2e:0d:e8:47:23:
18:16:f2:a0:00:94:bd:f7:a2:bd:18:b6:cb:a6:1f:6f:76:4e:
54:1c:44:4b:3a:6c:57:bb:57:8e:f0:9c:e3:e2:d3:1e:b8:34:
f4:da:e6:21:ce:d3:ec:c4:5b:39:bf:d8:d6:b4:b2:cd:fc:e1:
b3:c4:9d:ee:1f:d6:ae:e6:b7:5a:21:a0:78:00:89:ff:89:90:
19:76:d7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:56 2025 by rpki-client