Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
File: A5D0YbjFGyArIQDfLMQzD2kiGME.mft (raw, json)
Hash identifier: op124Y+92whkbuGUM7K1jW26eF/PMscH20pf5zkjpBU=
Subject key identifier: EE:63:63:BF:D2:AF:CC:70:F8:B9:C6:F6:EE:AD:93:FB:D2:69:06:F7
Authority key identifier: 03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
Certificate issuer: /CN=0390f461b8c51b202b2100df2cc4330f692218c1
Certificate serial: 019A730117955CDFE91CA2264DA2F8E95943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
Manifest number: 16AD
Signing time: Tue 11 Nov 2025 13:00:42 +0000
Manifest this update: Tue 11 Nov 2025 13:00:42 +0000
Manifest next update: Wed 12 Nov 2025 13:00:42 +0000
Files and hashes: 1: A5D0YbjFGyArIQDfLMQzD2kiGME.crl (hash: WLQ4KwG/LmwsyQwI6OXWpS4J1FxQsIE/8fQUvMeT1Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:01:17:95:5c:df:e9:1c:a2:26:4d:a2:f8:e9:59:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0390f461b8c51b202b2100df2cc4330f692218c1
Validity
Not Before: Nov 11 13:00:42 2025 GMT
Not After : Nov 12 13:00:42 2025 GMT
Subject: CN=ee6363bfd2afcc70f8b9c6f6eead93fbd26906f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:54:30:3e:ba:46:c5:fa:31:97:e0:8f:c8:59:
ad:f5:5a:95:27:5b:0e:87:95:98:fc:16:21:b2:0b:
d2:6d:e3:d3:0c:a2:34:fa:39:14:1b:52:b3:e6:a3:
98:be:1c:bd:48:ce:57:15:f3:75:09:cf:bf:51:a0:
0d:35:9e:32:ed:97:74:ff:8c:bb:b0:b3:a4:ff:56:
12:7e:cb:f3:f6:2e:00:b6:53:9a:39:e9:40:e7:a4:
ad:4a:1e:00:a0:47:88:3a:32:f6:93:79:32:6e:d1:
d8:92:12:3d:49:f8:55:76:03:95:d8:ff:5f:f8:e4:
c9:c5:c3:db:6b:06:94:1e:88:35:a8:13:70:57:69:
bf:a2:70:b9:88:b8:d0:5e:f8:72:63:c0:d2:56:82:
69:aa:6b:c8:3b:f4:0e:a7:4d:02:26:b2:60:e5:32:
1f:9a:eb:2a:b6:46:b1:e3:e7:88:e7:21:13:db:b0:
d5:06:e7:20:e1:dd:cd:8b:51:34:b4:f6:57:be:12:
ab:47:bf:e1:06:57:ab:11:1a:d5:ae:88:77:53:31:
41:1b:40:21:e7:b1:d8:bd:58:92:ba:67:d9:15:73:
0d:cb:01:ad:a2:61:e0:6c:69:1d:f5:83:4f:40:30:
31:a3:35:91:ae:04:c6:13:e4:4b:ee:8d:6b:f9:c6:
3c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:63:63:BF:D2:AF:CC:70:F8:B9:C6:F6:EE:AD:93:FB:D2:69:06:F7
X509v3 Authority Key Identifier:
keyid:03:90:F4:61:B8:C5:1B:20:2B:21:00:DF:2C:C4:33:0F:69:22:18:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A5D0YbjFGyArIQDfLMQzD2kiGME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f72a6c-da27-42c7-9483-d0017fcd42f1/1/A5D0YbjFGyArIQDfLMQzD2kiGME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a2:e2:46:7c:fa:55:a9:f6:c9:ad:1d:75:de:4d:6f:22:e1:
ed:58:c9:6e:ca:07:49:52:0f:be:59:b5:52:c6:6e:13:1c:b4:
f0:8e:17:8e:c7:4c:49:bc:b7:9c:c4:77:c8:a1:76:3f:eb:86:
5c:18:9d:51:59:59:0e:73:51:4a:49:3f:cc:71:f3:c2:6e:b6:
1e:4b:c5:da:d8:2b:21:e5:ef:0f:f8:3f:4f:a6:91:b9:58:a7:
3e:ef:7c:a5:2c:53:a0:ff:c2:2a:a8:e0:e4:50:f2:94:14:b2:
14:1c:55:d4:fc:f3:26:48:54:98:9e:3f:d3:4c:8a:db:84:5f:
51:f7:16:5c:79:ab:d6:48:81:a9:80:16:ae:6f:54:da:ef:26:
b1:c3:51:8c:ca:27:a0:90:44:8e:e5:bf:09:90:f7:9d:ab:fe:
05:ae:a0:45:d6:5b:17:26:b2:5f:66:99:3b:c3:03:e7:dd:48:
c8:8b:f6:80:e4:35:41:a7:51:6a:64:b0:69:a8:44:49:de:f4:
b2:1b:ca:9f:76:20:dd:af:05:18:79:70:af:95:8f:15:6e:96:
39:14:96:31:01:33:7c:e8:0c:dc:25:25:65:e6:cb:bb:75:91:
d2:ad:cc:4e:bd:f2:84:5c:21:30:7e:f9:74:b1:9f:cd:1a:96:
f2:12:68:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:58 2025 by rpki-client