Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: IAWk9HQM1b1UBY1snezaovwe1jFxm45YdHSH04i597o=
Subject key identifier: 38:61:BD:0C:2C:BA:93:DD:77:80:4C:93:89:90:C2:95:00:9A:6C:62
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 0199FE7D9D74FCA4148EF45CB6C59E32EA52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 22:01:09 +0000
Manifest this update: Sun 19 Oct 2025 22:01:09 +0000
Manifest next update: Mon 20 Oct 2025 22:01:09 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: eCikzbusU8So/MhnRVkbrzdvS8vyhLDVCA1aFk0UPQU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:7d:9d:74:fc:a4:14:8e:f4:5c:b6:c5:9e:32:ea:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Oct 19 22:01:09 2025 GMT
Not After : Oct 20 22:01:09 2025 GMT
Subject: CN=3861bd0c2cba93dd77804c938990c295009a6c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:b8:42:ce:a9:01:46:dc:7c:dd:e5:47:86:
f4:96:49:0c:05:ed:01:5d:e0:4e:35:13:ce:e9:1a:
43:5f:fd:14:37:4e:57:24:d4:8c:48:94:a5:e8:a9:
cf:65:2c:de:98:e5:36:1e:35:47:5f:a5:54:88:21:
d2:ae:98:4f:1d:92:53:b9:2f:bb:63:70:5c:cc:18:
e0:ea:30:f7:b1:dc:73:42:eb:69:7f:de:5f:d3:89:
d9:8d:87:93:43:4c:25:39:e5:2c:0a:bd:c3:c1:12:
7a:db:fb:dc:1f:44:d0:bd:0d:fd:65:41:03:53:05:
78:1b:5a:e8:aa:db:28:18:8d:a2:3d:76:b8:59:82:
7c:ef:27:12:0b:0e:5a:47:91:50:6d:71:b7:4a:c4:
23:f2:f1:60:dc:a2:9a:8a:4c:7c:4e:3b:5e:3a:5c:
28:a9:f0:9c:08:c7:5f:57:55:d0:b4:4d:88:1b:27:
f0:cf:5c:cd:02:23:28:68:d9:2f:e2:bc:7e:a6:98:
6c:d0:98:62:b3:b7:a2:8c:7b:7d:96:fa:4f:e8:ce:
93:08:75:7d:5b:80:51:bd:6b:8a:82:eb:78:73:ca:
9c:83:0e:63:9b:9c:5f:a6:5f:38:7c:d3:4c:02:88:
47:52:09:2d:2f:15:76:d3:07:30:af:af:d7:08:77:
fb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:61:BD:0C:2C:BA:93:DD:77:80:4C:93:89:90:C2:95:00:9A:6C:62
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a2:3e:5f:81:81:c0:b0:54:c5:3c:e9:6b:41:a5:db:9e:f7:
ff:11:b2:e5:93:5e:0e:ff:ff:32:a5:65:11:32:2a:4e:c5:b7:
88:73:2b:85:27:bf:6a:65:2e:10:30:8e:4d:63:d5:6d:f7:26:
0d:e6:b8:8f:26:bc:16:80:31:af:64:bc:e4:94:0d:37:78:96:
fd:d6:97:0b:e2:83:de:3c:4f:96:85:da:df:2a:bc:bf:53:d5:
c7:a9:93:0a:c3:0b:a5:aa:0f:45:ae:b6:3b:71:f3:e6:8c:a3:
8b:c3:92:ea:ac:34:d4:5b:b8:a4:a2:d9:3b:7b:12:cc:10:3d:
31:77:75:9f:45:6b:c0:d7:35:6a:be:a9:90:8a:a2:0f:63:d2:
69:5f:45:aa:08:e4:f7:a1:8d:b3:b0:6f:03:59:1c:b5:f6:c5:
5c:56:a5:16:0b:02:88:c8:37:69:0d:b9:3f:f0:55:72:93:9c:
0c:d6:28:11:d2:57:33:b9:e6:b5:37:dc:54:67:4e:7a:16:c2:
c3:1c:37:4f:ce:39:04:21:9e:79:d5:88:8a:f0:ea:ba:cf:d5:
89:e6:77:91:a1:2f:13:db:97:45:f6:a8:79:82:3d:96:5f:76:
98:72:31:b9:29:e0:15:5f:9d:68:f9:33:5a:d1:f4:eb:8a:09:
0d:d9:e8:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:53:16 2025 by rpki-client