Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
File: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft (raw, json)
Hash identifier: xVz6MHhc0crIwajafBXVNqdbPQMmhPU/k2jdUZ/yjZA=
Subject key identifier: 50:EC:A9:79:29:77:45:F5:D8:F1:78:D9:37:D4:30:87:0B:71:D3:47
Authority key identifier: 6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
Certificate issuer: /CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Certificate serial: 019A0BCA72A59D6083C54A05FF4463A481E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
Manifest number: 16EF
Signing time: Wed 22 Oct 2025 12:00:08 +0000
Manifest this update: Wed 22 Oct 2025 12:00:08 +0000
Manifest next update: Thu 23 Oct 2025 12:00:08 +0000
Files and hashes: 1: aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl (hash: AB9YJLpW3/W+LpHs5+2pnAX7nA+5MOPwIxjy5UpsQbk=)
2: wIBTBVQwXEpg1VcEfToXz9-SzCM.roa (hash: eXQVXHA1mPOdG0CF4A2ulRbni+b23x4utE4DVukqO5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ca:72:a5:9d:60:83:c5:4a:05:ff:44:63:a4:81:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b0ecdbf51360cecae617abe1a3ac6a6ff0a5b6c
Validity
Not Before: Oct 22 12:00:08 2025 GMT
Not After : Oct 23 12:00:08 2025 GMT
Subject: CN=50eca979297745f5d8f178d937d430870b71d347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:ee:ed:51:1c:6e:37:ae:65:91:0a:a6:c0:
20:7a:37:14:6a:9c:7e:b9:4a:17:f6:e4:6a:86:fc:
76:56:30:35:a6:80:4d:8f:8a:88:a5:ac:9a:77:bb:
53:d8:e6:e8:fe:ee:fc:a1:99:ad:7a:8b:19:60:b1:
7b:a5:67:a0:2c:6f:fc:f4:79:9f:33:0b:06:41:cb:
91:8a:52:46:89:28:9f:0f:68:36:86:44:a8:ec:1f:
ff:9d:d0:29:59:62:80:8e:ad:01:b5:e6:51:78:e6:
51:26:26:5e:8b:d0:9e:55:29:b5:c1:c3:1e:04:85:
9c:1a:83:90:53:42:21:8d:82:64:f8:71:06:1f:d6:
40:5d:44:5f:18:ac:b0:e3:7d:36:17:58:04:76:d1:
e6:6c:42:51:44:44:c6:b6:c1:4f:46:6e:90:de:99:
37:9d:64:93:10:b8:a0:37:8d:2e:08:d4:b5:29:38:
15:18:37:c7:b8:17:ea:22:08:d3:d0:c2:fe:25:2b:
12:1e:f4:70:b7:75:3d:91:07:d9:70:ce:c3:77:ec:
22:f9:02:81:23:ba:04:08:ab:78:82:12:60:45:eb:
17:0c:92:9b:be:dd:a1:60:99:c8:46:19:a0:62:eb:
0e:af:ce:d8:6a:a6:8c:2e:89:e7:c5:9c:b6:ee:6d:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:EC:A9:79:29:77:45:F5:D8:F1:78:D9:37:D4:30:87:0B:71:D3:47
X509v3 Authority Key Identifier:
keyid:6B:0E:CD:BF:51:36:0C:EC:AE:61:7A:BE:1A:3A:C6:A6:FF:0A:5B:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1acb0c-31a3-4718-993d-11dffe108147/1/aw7Nv1E2DOyuYXq-GjrGpv8KW2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d8:cf:3d:a1:9d:ed:06:03:2c:ec:d4:1e:b5:6b:f8:2e:34:
9f:84:6c:b3:3a:62:62:91:b6:a2:57:71:1d:e1:a9:41:ce:b0:
46:e5:6e:2a:df:08:69:2f:dc:d0:5b:43:39:eb:e6:7c:bb:9f:
2d:32:27:76:6e:75:9d:50:a9:22:d7:fd:94:8e:b1:5a:90:0e:
fc:0a:37:37:75:8e:f3:74:1e:be:3c:ba:d4:c7:e5:f8:c5:de:
be:b4:fa:d7:1b:f1:a8:ba:43:0d:0a:69:69:c3:17:41:aa:0c:
98:5d:7b:25:dd:05:90:09:5b:f5:99:38:97:3a:e7:4c:18:d2:
c9:4c:da:f3:1e:98:30:fd:c0:a6:59:77:ae:e7:78:56:dc:2c:
6e:56:29:3f:b6:5c:d4:de:f5:c1:fb:31:ba:fe:4a:27:79:1c:
e2:05:f9:4e:19:de:13:f4:83:b9:79:96:b3:6e:40:fd:0a:f7:
ee:61:52:c5:3c:12:59:da:25:8d:bf:4f:d3:b5:6e:29:fc:9c:
e0:f9:d3:e1:24:d0:02:61:cc:50:e0:44:43:f0:73:45:6c:0c:
b7:06:45:55:03:91:6e:ad:13:0f:20:e8:33:a9:0a:6b:d6:c6:
c6:3f:10:71:f0:1b:bd:00:0b:e7:b1:6e:f4:73:e6:45:50:21:
fb:b5:3d:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:02:26 2025 by rpki-client