Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
File: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft (raw, json)
Hash identifier: SZOdk11oyCx6oKx8fIr08Fsm3ZpLiOsBLXYrz1eqqPE=
Subject key identifier: 74:6A:1D:16:FF:F0:12:AA:FB:4A:F7:2F:A8:AA:24:58:43:D9:F5:70
Authority key identifier: DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
Certificate issuer: /CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Certificate serial: 019A251CB282AD10BA9CED4C79ACDD269B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
Manifest number: 12AD
Signing time: Mon 27 Oct 2025 10:00:28 +0000
Manifest this update: Mon 27 Oct 2025 10:00:28 +0000
Manifest next update: Tue 28 Oct 2025 10:00:28 +0000
Files and hashes: 1: 20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl (hash: 4emYCspmH+krsI9jJ08JeHMhHxqNyEWohBlmyR1BPrw=)
2: O7dVmdulXoSGFdWUdpvv3bkJxU8.roa (hash: hmlWALQMbQbIcNvaSImT+aYBz0m3Sm9TMeYp/ubqBkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 10:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:b2:82:ad:10:ba:9c:ed:4c:79:ac:dd:26:9b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db489fbe98994cbc098c876ba63e560ac17e5b2f
Validity
Not Before: Oct 27 10:00:28 2025 GMT
Not After : Oct 28 10:00:28 2025 GMT
Subject: CN=746a1d16fff012aafb4af72fa8aa245843d9f570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:45:fc:04:da:79:8c:ad:68:de:17:72:09:
fd:dd:bf:83:40:75:9f:71:3a:77:d7:1b:97:78:e8:
06:98:4f:eb:d8:f4:ad:ab:e9:32:98:33:ed:a5:03:
83:10:ea:55:3f:6c:e9:76:bc:1a:62:9a:34:c8:7e:
40:46:19:cf:79:59:f2:29:60:c9:a7:64:e5:dd:b6:
09:61:15:ae:c3:cc:3f:0e:ec:c2:fb:5f:f8:4c:71:
e0:73:85:ae:14:b8:e5:23:e8:6c:29:77:bb:d0:88:
11:ed:f0:e6:af:dc:39:c6:5c:e5:2b:3a:4b:96:51:
b4:e6:9c:c7:f6:87:b8:fd:26:df:5f:6b:87:90:25:
75:21:26:77:b2:aa:4e:80:cd:a5:f2:75:9b:4a:b3:
ce:98:93:fb:d7:a8:1f:c4:7a:dd:7b:11:e0:6e:b3:
22:70:25:d8:68:90:3f:59:eb:e5:b0:a9:cd:80:39:
fe:09:b0:3b:86:68:24:26:95:59:a7:b1:03:1f:f3:
b3:a1:e6:48:4a:09:08:77:3a:08:a5:d2:ad:32:85:
0a:33:f5:c4:fb:a8:69:d8:37:91:b1:36:67:8e:c8:
cd:2b:36:e6:2e:13:a5:bb:64:4c:92:d8:c3:86:6f:
ec:0f:48:ae:7e:c6:89:43:46:14:d7:bc:d7:69:a2:
21:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:6A:1D:16:FF:F0:12:AA:FB:4A:F7:2F:A8:AA:24:58:43:D9:F5:70
X509v3 Authority Key Identifier:
keyid:DB:48:9F:BE:98:99:4C:BC:09:8C:87:6B:A6:3E:56:0A:C1:7E:5B:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/20ifvpiZTLwJjIdrpj5WCsF-Wy8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/6cac50-3f13-4ef9-8b6d-decec41a71d1/1/20ifvpiZTLwJjIdrpj5WCsF-Wy8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:01:f6:50:44:1e:00:f8:ca:93:7a:d1:6a:79:0c:0e:97:1d:
f0:c3:e3:86:de:88:d6:8a:35:c5:ab:ad:67:1c:56:0d:15:25:
b7:08:e6:f9:92:62:c2:f0:4d:cf:25:65:67:ac:cd:f3:45:3d:
a5:cf:27:7a:33:aa:10:17:53:8e:4d:16:f9:1d:2c:ec:4b:03:
34:35:f4:8d:a6:c3:54:1c:0c:9d:cd:c0:a0:fc:01:1c:52:95:
60:e9:46:ef:2c:85:85:8d:1c:3f:d0:b3:50:27:4a:62:31:13:
7e:eb:bc:e4:c1:34:27:4b:0c:20:12:e0:bb:90:7a:79:eb:c4:
6c:c0:87:67:c0:35:40:88:55:a5:33:25:57:f7:0a:0b:2b:df:
fd:5b:d3:a8:79:b2:12:4f:3b:f0:4d:fc:4d:e0:d5:b9:f9:c7:
bd:9c:cd:b7:b2:68:ac:21:2d:94:20:80:e7:35:79:65:a9:e4:
3d:56:d9:e8:6b:c7:72:12:b0:c8:77:10:00:34:41:ea:da:a4:
5e:5d:c7:06:7f:72:c2:13:0d:5a:62:cf:21:68:5c:bf:5f:2d:
00:ca:74:aa:e1:0d:bb:c6:8a:ba:44:40:8c:9d:49:35:d7:f9:
7f:94:b8:91:0e:08:2d:93:0e:d0:63:2c:94:3b:21:14:a5:6a:
69:dd:3f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 19:50:31 2025 by rpki-client