Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
File: idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft (raw, json)
Hash identifier: 272MWO1y67TwiHukxUeh9PyHlCNX1J6fPbPh/y0XlU0=
Subject key identifier: BC:D2:D2:52:D4:F2:DB:B0:0B:E2:EB:44:84:F9:31:95:6C:7B:02:DA
Authority key identifier: 89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
Certificate issuer: /CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Certificate serial: 0199FBEC37CA9791A82BDE6A9A9A466D350E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
Manifest number: 1001
Signing time: Sun 19 Oct 2025 10:03:05 +0000
Manifest this update: Sun 19 Oct 2025 10:03:05 +0000
Manifest next update: Mon 20 Oct 2025 10:03:05 +0000
Files and hashes: 1: idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl (hash: tHubXI3eov1d3svYGgPfPosAs42AI2s2QFZaLd/pOVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:37:ca:97:91:a8:2b:de:6a:9a:9a:46:6d:35:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d2cd5dd8d513d4ae87ecfdc557ebf5f623ec34
Validity
Not Before: Oct 19 10:03:05 2025 GMT
Not After : Oct 20 10:03:05 2025 GMT
Subject: CN=bcd2d252d4f2dbb00be2eb4484f931956c7b02da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:9d:6f:a1:89:d0:c4:2e:3c:9c:40:12:b2:
02:d2:03:da:ec:95:52:40:3e:73:9b:8e:a5:5b:e8:
f8:4b:4f:4d:1e:a3:30:3b:56:8e:de:a7:43:7e:e7:
67:39:0b:c4:b0:a4:f8:37:14:1e:0d:90:cd:03:d6:
9d:fc:97:45:b3:a5:0c:ae:a9:f2:ff:ad:b7:32:a8:
e4:04:93:ea:7b:e4:59:6a:2e:5f:8a:a4:c9:a1:9f:
02:a4:81:26:d9:ff:f9:95:cf:a2:56:59:51:fd:d8:
5e:ed:8c:e8:55:d0:20:82:6a:89:2f:a8:59:b3:4f:
55:9e:72:22:2c:36:24:b6:f5:bf:0c:e2:87:a2:aa:
65:0b:5c:6b:1e:86:98:3b:7d:a8:76:f4:eb:49:f9:
c0:aa:30:0f:c7:6c:e1:ae:5e:53:98:b8:a3:c8:ed:
04:e0:f0:0e:aa:b3:01:18:1e:ed:93:44:d0:af:87:
5a:0d:f3:ae:62:d1:5f:84:38:10:81:21:de:98:3f:
40:e7:a3:c5:00:aa:54:af:db:f6:2a:15:bf:fe:7c:
75:d5:15:22:16:f8:54:6a:f7:4f:b7:31:2c:15:6e:
ec:41:ad:da:ac:71:78:de:44:d0:91:40:4f:3a:61:
93:37:35:94:5b:c5:9d:e8:ff:a8:12:f9:c1:c4:f9:
4b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:D2:D2:52:D4:F2:DB:B0:0B:E2:EB:44:84:F9:31:95:6C:7B:02:DA
X509v3 Authority Key Identifier:
keyid:89:D2:CD:5D:D8:D5:13:D4:AE:87:EC:FD:C5:57:EB:F5:F6:23:EC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idLNXdjVE9Suh-z9xVfr9fYj7DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/5b2960-d3c4-426d-bab0-5ae35c030686/1/idLNXdjVE9Suh-z9xVfr9fYj7DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e7:cf:9e:01:5e:3f:63:a4:5f:78:5d:62:63:7f:b4:50:65:
93:55:d4:49:c4:38:27:21:83:e8:61:f4:24:7c:ad:76:f5:96:
ec:57:48:dd:11:78:b0:55:1f:21:63:b5:f6:fa:97:21:82:31:
9c:0a:01:82:c8:42:85:bf:cd:d1:79:c8:2d:fa:2a:6e:1d:16:
f1:d7:09:75:b6:fc:17:50:a1:e9:aa:71:6c:f5:db:b0:eb:21:
43:59:0e:60:f9:fa:ed:6e:29:e5:bb:d6:d8:8e:c3:0f:00:79:
d0:38:a6:f1:07:2e:5b:8d:0d:c9:51:47:2b:b2:31:46:6d:c5:
a0:3d:d1:ba:0d:c5:e2:33:56:c2:ed:b9:f1:94:2c:c3:3e:65:
b3:89:cf:4e:c8:d9:e4:c2:fa:22:0a:6b:26:9f:19:7a:2c:f6:
3d:c2:a8:02:3a:44:33:66:f8:32:a5:3d:74:8f:04:6b:63:c7:
d2:43:66:d4:46:52:c6:1f:5b:a4:98:1e:60:d5:25:75:96:bc:
16:fc:08:24:fa:3c:a0:7d:cb:ce:76:f5:db:f7:c0:ef:9a:87:
75:77:cf:0f:50:d0:bf:cf:5c:2a:dc:62:05:d5:b1:f4:8c:98:
79:28:c9:e2:63:4b:39:8d:18:6e:e3:96:bc:c6:da:67:0f:5e:
28:65:1b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:13:45 2025 by rpki-client