Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
File: 12UrrkezA7urED_3ukWgqQYMPcw.mft (raw, json)
Hash identifier: rQan8txOKCTPfitbeXAqmJ98sWLQnV2bbE+aIuM4+ng=
Subject key identifier: FC:1C:DA:62:9B:A9:8F:25:80:16:70:92:02:6F:7A:F0:A1:6A:0D:5F
Authority key identifier: D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
Certificate issuer: /CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Certificate serial: 019A70DC31325C44A48A63F4AF92AE2654E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 03:01:09 +0000
Manifest this update: Tue 11 Nov 2025 03:01:09 +0000
Manifest next update: Wed 12 Nov 2025 03:01:09 +0000
Files and hashes: 1: 12UrrkezA7urED_3ukWgqQYMPcw.crl (hash: 5IYBJeOqXqtAFaQM20VgGwUw980esoD1sTINrYsoTTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:31:32:5c:44:a4:8a:63:f4:af:92:ae:26:54:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7652bae47b303bbab103ff7ba45a0a9060c3dcc
Validity
Not Before: Nov 11 03:01:09 2025 GMT
Not After : Nov 12 03:01:09 2025 GMT
Subject: CN=fc1cda629ba98f2580167092026f7af0a16a0d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:c7:2c:a5:af:ab:ed:b7:a3:17:9e:7c:72:
d9:bb:8b:d4:29:ea:33:90:3f:53:2b:74:5c:92:9d:
f2:4b:cd:96:a3:35:83:c4:23:a7:a6:ad:88:d5:98:
c3:48:cb:16:97:f5:1f:23:e0:24:bc:0a:46:9f:d2:
45:ec:f7:80:76:c2:cb:5c:5e:36:71:1b:ce:7a:1e:
67:ae:46:db:a9:32:a6:c5:32:ab:99:5d:89:b5:d6:
b9:88:0b:1b:19:3c:08:e2:9d:05:96:7f:e2:d8:a2:
ff:83:e0:ba:18:54:80:37:fa:c4:26:7a:a3:16:60:
9c:7c:c7:a3:14:b3:6f:c7:12:f0:46:8a:d7:5a:b0:
08:bd:e8:15:21:2a:54:e0:48:90:a6:e3:7e:0f:7e:
b0:51:af:6d:8d:2f:51:b0:96:5c:f7:32:dc:2e:bb:
0d:42:d8:60:00:db:89:bc:d1:f9:e8:a1:eb:80:a3:
1e:89:02:7e:15:8c:bd:53:4f:6e:8c:bc:61:f8:58:
44:20:f9:5e:ac:29:84:72:28:9a:26:98:84:9c:e1:
6f:33:43:13:ff:6b:f5:35:82:c4:0c:fa:27:d1:42:
32:7c:9f:20:a7:4f:de:7d:e5:d4:c9:7e:5d:68:d5:
d0:74:83:3f:43:e2:0b:54:e1:a4:23:13:57:50:4b:
e2:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1C:DA:62:9B:A9:8F:25:80:16:70:92:02:6F:7A:F0:A1:6A:0D:5F
X509v3 Authority Key Identifier:
keyid:D7:65:2B:AE:47:B3:03:BB:AB:10:3F:F7:BA:45:A0:A9:06:0C:3D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12UrrkezA7urED_3ukWgqQYMPcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ee0113-8162-4d0a-85eb-ab76a098aebb/1/12UrrkezA7urED_3ukWgqQYMPcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:72:a7:d6:79:43:4d:d5:7f:65:10:57:46:5f:8c:03:75:1b:
c1:74:3e:f3:b9:e9:e1:c1:8d:f0:af:37:fa:af:b1:97:e4:34:
3e:ef:80:bd:2a:f9:9f:70:6e:68:ec:66:11:e1:de:ed:fb:71:
08:3b:5f:ae:90:dd:80:da:09:1b:fb:63:fe:cb:96:64:57:68:
a4:eb:94:8d:e4:22:ac:d5:26:95:62:41:58:2a:84:d7:78:c3:
7e:c5:f9:78:c8:31:21:19:98:31:00:b8:8e:2d:a8:88:e8:05:
1f:ac:79:66:1e:a1:b5:83:2a:98:59:bd:28:b0:44:34:7d:ab:
fd:d8:6e:f8:6c:32:8c:50:74:3a:0e:bb:35:25:ab:73:4c:fe:
9c:ba:f8:1b:84:24:05:5a:78:47:4a:ed:5b:49:e0:4f:f8:d3:
4a:19:07:88:ee:e0:a4:0c:58:f5:42:15:ae:39:7b:69:68:8e:
64:53:d9:7a:01:83:f0:4e:fb:d0:49:9f:21:e8:d7:da:72:ff:
1f:d2:44:7c:72:ed:d4:8c:7b:80:13:a1:fc:df:1e:47:5e:51:
ea:32:e9:ad:10:a5:55:34:7c:6a:4f:cd:45:8f:32:c9:63:10:
73:b0:4f:f8:8d:07:e9:55:08:4d:e9:7c:25:13:8f:29:1b:81:
54:07:01:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:28 2025 by rpki-client