Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
File: 16gAaL1zKO9BEg9HiMKNOpIEcGc.mft (raw, json)
Hash identifier: UlyzPnYpQ4ejxsQo+MDiTTuR56PCvWwDjC4v+aIs7cM=
Subject key identifier: A5:53:21:F7:2C:76:90:0F:2F:78:17:3B:71:03:62:AE:89:E7:98:7F
Authority key identifier: D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
Certificate issuer: /CN=d7a80068bd7328ef41120f4788c28d3a92047067
Certificate serial: 019A7180912B0FBB295ECAF2353F944E3A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
Manifest number: BA
Signing time: Tue 11 Nov 2025 06:00:42 +0000
Manifest this update: Tue 11 Nov 2025 06:00:42 +0000
Manifest next update: Wed 12 Nov 2025 06:00:42 +0000
Files and hashes: 1: 16gAaL1zKO9BEg9HiMKNOpIEcGc.crl (hash: 1wkQ0OzT0ua+3G7gYoHNoXpzZw8NxF8gKB39VCdzrvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:91:2b:0f:bb:29:5e:ca:f2:35:3f:94:4e:3a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7a80068bd7328ef41120f4788c28d3a92047067
Validity
Not Before: Nov 11 06:00:42 2025 GMT
Not After : Nov 12 06:00:42 2025 GMT
Subject: CN=a55321f72c76900f2f78173b710362ae89e7987f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:a3:82:7f:7e:1f:01:59:a6:d1:b5:85:a1:
15:b8:1e:99:b1:4e:6e:fd:36:c6:e2:9e:c0:e1:79:
fa:c7:0e:9c:39:57:89:08:1f:26:b7:97:74:3b:59:
94:83:4c:92:b8:22:61:9c:20:67:3d:39:a7:58:ee:
4b:9e:f9:ee:49:4d:75:9c:93:0d:9d:d6:0d:55:b3:
33:03:04:f6:d0:f0:8d:13:b2:c8:fa:99:d8:e6:33:
1e:8f:e7:db:77:d0:11:9c:81:03:bd:ca:b3:fe:50:
c8:32:f0:27:02:37:37:48:57:0f:fd:70:77:4c:d2:
82:f8:4a:3e:0f:9b:89:8c:36:c0:6e:da:e7:74:a3:
8e:00:12:6e:c8:be:cb:38:8b:e1:4c:47:d3:69:0d:
26:47:e6:3d:78:33:35:76:dc:fb:fd:f5:6d:0f:39:
16:ee:4f:b3:0b:47:7b:fd:af:f2:73:54:40:a6:5c:
03:51:27:4d:7c:24:74:9c:87:b2:48:e2:e5:e6:aa:
01:e2:c1:ae:3c:69:b3:b6:1e:70:10:b4:fb:68:90:
40:f2:f6:2a:53:e8:22:8c:ab:9b:76:03:0a:6b:4b:
3c:98:e7:2b:cf:08:38:c2:44:d2:b9:d3:77:92:78:
7f:82:f4:08:44:00:a4:44:5a:64:74:b0:2e:d5:c5:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:53:21:F7:2C:76:90:0F:2F:78:17:3B:71:03:62:AE:89:E7:98:7F
X509v3 Authority Key Identifier:
keyid:D7:A8:00:68:BD:73:28:EF:41:12:0F:47:88:C2:8D:3A:92:04:70:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16gAaL1zKO9BEg9HiMKNOpIEcGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a45d1c-e3b6-4f23-a8c6-ef332a0256d6/1/16gAaL1zKO9BEg9HiMKNOpIEcGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:07:5c:f5:c0:a9:09:49:39:6d:35:d0:64:e3:d6:bb:f4:b8:
0d:d5:77:1e:af:21:00:bc:f9:a6:32:43:86:09:d3:d2:69:e5:
bd:e0:0c:84:6c:fd:15:7b:0d:c8:29:2e:e3:86:ec:41:8b:a6:
38:99:90:23:f2:37:16:5e:e2:ae:50:27:04:fa:ae:2f:56:9d:
e7:9c:2a:9c:d5:d7:ad:7e:9d:96:a9:11:43:d3:73:05:e4:8e:
9e:59:87:51:fd:70:95:40:b1:b2:d5:af:5c:53:a4:e0:ca:7a:
90:a8:5f:0c:40:4a:52:31:f9:92:49:dd:7d:0e:9b:4f:a7:29:
55:63:fe:d1:2b:fe:2f:ef:f0:69:ee:97:04:93:0b:b0:57:f4:
1f:0b:32:be:94:6c:00:66:b6:9e:95:6c:0d:6b:5b:34:64:be:
b8:4d:3c:da:b1:f3:b2:2e:b3:0d:82:1a:ad:c9:54:4f:a3:34:
2e:e5:71:f4:5e:88:93:4c:98:0d:f5:05:67:38:d7:97:ed:7b:
33:1f:0e:b6:1b:83:2f:d0:f1:8e:02:81:dc:c3:a0:9d:bd:7b:
f2:57:23:0b:97:a1:69:ed:a3:b8:35:0e:d8:27:0b:b5:b3:af:
7f:55:e5:0c:ca:8e:11:e8:a9:ac:09:97:bd:ac:69:f3:d1:9f:
bc:13:7e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:38:18 2025 by rpki-client