Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
File: t64i7alidO6Wl8qqy1PfkXNwngM.mft (raw, json)
Hash identifier: xKq0Ym8rQUmjWqMBvy7sXhsDvY8M2NmUxyLM7L/hfVY=
Subject key identifier: D6:81:D9:6A:51:62:70:B0:40:DB:5E:42:B8:6D:22:A6:CB:1E:CC:8B
Authority key identifier: B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
Certificate issuer: /CN=b7ae22eda96274ee9697caaacb53df9173709e03
Certificate serial: 019A71EEA9143F230EA9F5AD8D409198AAD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
Manifest number: 147E
Signing time: Tue 11 Nov 2025 08:00:57 +0000
Manifest this update: Tue 11 Nov 2025 08:00:57 +0000
Manifest next update: Wed 12 Nov 2025 08:00:57 +0000
Files and hashes: 1: t64i7alidO6Wl8qqy1PfkXNwngM.crl (hash: 3zmWjbps7xcSe4xcRnqme3xUK9jBl83Z2bs1LPqS620=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 08:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:ee:a9:14:3f:23:0e:a9:f5:ad:8d:40:91:98:aa:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae22eda96274ee9697caaacb53df9173709e03
Validity
Not Before: Nov 11 08:00:57 2025 GMT
Not After : Nov 12 08:00:57 2025 GMT
Subject: CN=d681d96a516270b040db5e42b86d22a6cb1ecc8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:06:b9:ef:ae:c9:0b:9f:46:41:69:b7:13:
18:28:6c:a5:79:c5:3b:ca:90:25:ba:24:4b:42:71:
58:be:dd:7c:ae:fd:9e:0f:11:09:6f:fc:dd:d6:cf:
e2:fe:71:d2:bf:7b:d1:25:b8:ed:bf:5e:7f:32:3c:
ff:0d:3e:f1:82:14:6a:7b:00:79:34:b3:8e:1a:57:
46:54:07:2d:02:ed:34:e5:18:d0:bb:d7:f4:2e:8c:
5c:72:56:5d:09:76:4a:5f:9d:39:31:4c:2d:85:f1:
ba:e2:d6:0f:6f:26:80:be:92:2b:0e:6e:22:8e:0c:
ae:e0:93:05:b0:a2:1f:fd:21:a6:51:eb:6e:a9:d4:
17:eb:34:8c:cc:71:31:7f:f7:be:1e:9c:a4:9d:5c:
e6:bd:5d:80:34:ce:a1:55:b0:cf:0d:93:3c:5e:30:
f1:c1:a8:e1:da:05:f3:ca:67:14:af:17:14:7a:ea:
2e:f6:35:98:75:42:1c:52:b2:30:0b:ff:90:75:78:
37:10:08:2f:80:ad:6a:28:cc:5c:62:6a:b1:2c:b0:
21:87:b3:fe:d6:f9:02:e2:57:fc:44:dc:8f:14:8c:
72:b2:fe:76:54:01:af:f2:c2:af:89:57:50:de:23:
97:3f:4a:c8:46:4c:b1:f3:62:cf:d9:2c:44:a3:4d:
56:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:81:D9:6A:51:62:70:B0:40:DB:5E:42:B8:6D:22:A6:CB:1E:CC:8B
X509v3 Authority Key Identifier:
keyid:B7:AE:22:ED:A9:62:74:EE:96:97:CA:AA:CB:53:DF:91:73:70:9E:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t64i7alidO6Wl8qqy1PfkXNwngM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/244086-e974-4b48-ae74-370f000c3c0e/1/t64i7alidO6Wl8qqy1PfkXNwngM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:69:fc:cc:a3:29:88:62:5a:dd:f5:37:db:d4:b9:40:27:22:
4b:bb:46:91:6c:6f:d8:f5:1b:0c:d8:d8:11:1d:c3:4d:f8:74:
3b:57:96:1d:38:e0:bd:53:93:2f:b5:c3:c0:45:38:cf:4e:e5:
e6:90:8b:5b:0f:8c:d6:7c:0c:15:73:8e:3e:51:53:64:d8:b4:
d2:51:c0:a8:3c:e0:59:2d:39:f0:4d:ca:1b:b8:03:f0:ba:4c:
f9:42:af:2d:3d:78:15:ce:e8:b5:39:99:de:d1:4f:61:1f:42:
3e:08:06:2f:c1:79:44:1d:7b:86:37:f0:c1:03:6e:15:79:ff:
80:19:0b:70:1a:fc:45:73:b0:41:0e:0f:e8:db:c0:46:22:e1:
ce:d5:4d:11:c4:df:69:8a:1a:65:76:b9:32:25:e6:f3:0f:85:
75:95:bc:4b:c1:cb:84:58:15:76:73:c2:b3:43:86:d5:61:ba:
43:1e:d6:1b:e5:fe:ba:8f:c0:86:fc:fa:90:92:df:31:69:d9:
a3:5c:95:1a:ea:73:0c:87:c4:4a:63:e6:ab:08:96:64:83:af:
b6:48:d6:5d:20:4e:2b:e2:f2:4c:87:ad:9a:c7:6b:2e:55:37:
81:0c:49:cf:1c:46:42:ce:ee:dd:6f:dc:b1:df:86:1d:f2:21:
e6:0e:20:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:50:21 2025 by rpki-client