Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
File: rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft (raw, json)
Hash identifier: gOaQIzAU6vBfcRuyupq0TkqjfnCYZ4Yq2Lwvx6HZ7/8=
Subject key identifier: 82:42:A7:B6:F4:77:09:B2:CC:B9:90:C1:B0:4F:84:E3:DE:48:C0:61
Authority key identifier: AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
Certificate issuer: /CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Certificate serial: 019A50E3E3A6EC89AB2338F07E1BFE3D5908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 22:01:43 +0000
Manifest this update: Tue 04 Nov 2025 22:01:43 +0000
Manifest next update: Wed 05 Nov 2025 22:01:43 +0000
Files and hashes: 1: rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl (hash: BaepFYQK9JsOKbLsaxUiQPDwBe81Ww+F1VyIdw4lZcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:e3:a6:ec:89:ab:23:38:f0:7e:1b:fe:3d:59:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae50ec352e8dbb0cdf6e08c57c71caa11a445003
Validity
Not Before: Nov 4 22:01:43 2025 GMT
Not After : Nov 5 22:01:43 2025 GMT
Subject: CN=8242a7b6f47709b2ccb990c1b04f84e3de48c061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:6f:b2:24:9e:50:f9:fb:f1:15:7a:e5:8c:70:
97:23:7b:2d:6d:0c:0f:25:ce:c5:89:d2:19:2f:5f:
8d:58:15:72:24:3e:ab:85:7c:b4:83:f1:73:87:7d:
48:5e:42:b3:30:23:70:45:51:d3:25:26:81:f9:9e:
a1:20:fa:b5:47:e3:f4:f7:52:b4:68:00:89:52:38:
b1:11:e5:90:52:86:bc:87:31:58:da:a6:13:1e:47:
48:3a:b2:74:9b:23:af:f7:2c:6e:cf:65:b7:f5:51:
71:60:fc:b7:57:c8:b3:6e:da:01:6e:8c:a6:ff:35:
da:ff:c1:48:f7:e2:43:9d:b0:e3:29:12:99:c1:da:
1f:d9:76:e2:ed:d3:8a:7b:f6:73:61:b1:40:a7:77:
8a:4e:90:ba:1e:5f:12:23:71:1f:46:00:61:cd:9d:
a0:08:2e:3c:92:d6:06:0a:79:8d:16:ad:45:46:ed:
dd:b0:68:d1:19:ef:b0:4b:1f:67:70:31:63:ed:df:
57:85:9a:05:bc:ad:5c:8e:29:5d:67:5c:63:d8:69:
bf:3c:50:9f:fb:b7:45:66:f8:58:f4:d1:82:87:ef:
fc:e7:e0:02:41:c0:4f:2e:53:58:1a:c1:de:f4:20:
65:fc:aa:25:50:95:e7:b8:b9:c1:75:3d:2c:88:8d:
02:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:A7:B6:F4:77:09:B2:CC:B9:90:C1:B0:4F:84:E3:DE:48:C0:61
X509v3 Authority Key Identifier:
keyid:AE:50:EC:35:2E:8D:BB:0C:DF:6E:08:C5:7C:71:CA:A1:1A:44:50:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rlDsNS6NuwzfbgjFfHHKoRpEUAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c8961f-d1d7-46ac-9f8d-33ebac095077/1/rlDsNS6NuwzfbgjFfHHKoRpEUAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ec:b5:16:bb:ef:a9:d0:fa:c7:b7:e9:f4:bf:6e:0f:8f:25:
98:17:a8:c7:8f:9d:47:9f:12:27:12:e8:2d:71:71:64:6e:7a:
9c:d2:2c:86:21:bb:d6:6a:9b:e9:82:14:2d:71:f8:f4:88:0d:
de:8d:94:8a:cb:45:4f:0e:1a:c7:12:c6:dc:ab:6f:80:6a:26:
7d:6b:78:b3:d0:5f:cf:9e:ee:cf:21:08:0b:72:0b:89:42:03:
a8:55:74:84:84:8d:95:97:13:16:71:85:ea:6e:aa:cf:d2:b7:
68:12:7e:e5:78:38:8c:07:6b:86:e5:5d:2a:8c:be:a0:61:ff:
d2:d3:04:6f:88:55:86:b0:28:53:46:58:38:f3:bb:6e:3d:42:
6c:1c:20:02:df:05:18:83:7f:ea:b3:5c:47:75:c4:96:25:d3:
9c:5f:2d:82:3f:ba:73:69:73:d5:53:9b:cd:50:cd:3e:84:99:
59:28:4b:18:2c:f8:43:01:11:ad:4c:33:94:5f:09:e1:c4:ce:
2e:d3:79:2c:a6:a7:a9:5d:ef:d2:58:e4:bf:b9:7c:b3:1c:31:
3e:e3:cc:9c:a3:10:1f:f5:b0:75:70:44:c8:93:bf:3b:e3:d1:
3d:dd:59:11:d1:99:b4:3a:4c:e4:d4:c0:ff:6d:64:c5:a2:4e:
e1:22:b3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:28 2025 by rpki-client