Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: YgNuqIqWhGspccAU/kFScpGQAcl6rNclI9FBVeAo8xY=
Subject key identifier: E1:DE:F4:D4:A8:A5:0C:FD:DC:25:71:09:4B:47:CE:14:67:78:05:3D
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 0199FC21BF5A60EAE1EE9EC3749E6C94EF8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 1401
Signing time: Sun 19 Oct 2025 11:01:34 +0000
Manifest this update: Sun 19 Oct 2025 11:01:34 +0000
Manifest next update: Mon 20 Oct 2025 11:01:34 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: wje+lRTQL16cP9Ho4mEH1fGpI+THNZWvWvVK/NxqOGo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bf:5a:60:ea:e1:ee:9e:c3:74:9e:6c:94:ef:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Oct 19 11:01:34 2025 GMT
Not After : Oct 20 11:01:34 2025 GMT
Subject: CN=e1def4d4a8a50cfddc2571094b47ce146778053d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:6d:4e:99:e4:fb:45:63:f2:db:bb:c9:12:
b6:e3:c3:c6:d8:c3:5f:0d:7a:ca:c8:1a:78:0b:82:
c2:95:e3:3e:05:04:07:69:9c:2f:bb:98:ee:b9:2b:
e2:3f:64:48:a8:59:e2:43:bb:3d:3f:b6:2d:c9:07:
0c:c7:ab:c2:78:c7:0a:c0:e4:ee:62:fa:df:07:c4:
61:f1:1e:7d:fe:ee:e7:48:79:e0:e3:f3:c6:db:d9:
38:42:16:9a:4e:88:b7:96:1d:ae:2e:a7:89:80:90:
6c:06:58:9e:d4:7a:73:5b:7c:41:04:34:69:eb:45:
1f:51:e9:70:88:25:e7:4a:7c:f6:a4:45:6e:7f:fd:
67:8d:1b:77:15:cb:9a:54:f6:3f:f3:28:13:a4:88:
ae:64:e3:a2:51:8f:bc:79:72:81:86:27:69:bd:1a:
43:b8:90:2b:70:ca:e7:2a:86:ba:c8:d7:91:78:d5:
c6:46:af:39:ba:be:cc:c3:cf:55:3c:cb:ba:a3:f3:
14:3a:37:eb:ec:02:e3:89:42:7c:f9:7c:6c:46:c1:
01:79:58:d8:41:40:f2:d3:14:6b:35:bb:47:66:ce:
ca:6d:98:d3:e9:e1:cf:5d:17:d5:82:65:27:11:16:
b8:57:83:e9:cb:c7:cb:9e:c0:ed:ef:5d:32:83:af:
a4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:DE:F4:D4:A8:A5:0C:FD:DC:25:71:09:4B:47:CE:14:67:78:05:3D
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:78:d7:94:23:5c:bd:79:ab:2e:9d:bc:f6:e6:3d:a8:ee:de:
a1:ca:8c:36:73:79:79:94:db:d1:a2:2b:38:a7:30:db:6a:2f:
ac:fe:49:a6:37:6c:13:d4:fe:ae:4b:2c:38:1c:9d:96:76:da:
d9:e1:3e:34:03:17:81:a5:ff:0c:76:5f:46:5d:2a:6a:a7:b9:
fa:52:3e:cd:cd:fe:fb:8c:da:32:de:81:bc:73:33:e0:16:4c:
1c:5f:f8:5b:d7:ed:f2:b8:f6:25:58:89:93:a2:94:47:05:34:
52:b0:42:fa:7c:f3:7e:51:c0:72:2e:44:53:23:5b:8c:a3:ab:
3b:62:7f:d4:ad:2b:6d:d3:97:be:ff:3f:7c:d4:5a:61:8b:1c:
67:b3:1d:15:aa:b2:9f:f5:2b:8d:6f:8f:0f:31:ac:7b:89:22:
b0:df:be:7c:6c:6e:90:66:0f:65:42:71:9d:2d:7a:e1:e5:e6:
3b:02:7a:34:ef:93:dd:64:c4:42:a2:32:dd:be:a4:1e:a5:3d:
80:39:9f:f7:6d:6e:c1:2f:70:ec:e1:4f:02:f3:0f:5a:92:89:
ca:ba:7f:e1:46:b5:b6:dc:a4:84:02:8e:22:34:08:79:f0:d1:
1c:fd:a3:ff:18:25:2e:2e:12:19:dd:3f:64:a5:7a:35:af:c3:
aa:d4:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:42:17 2025 by rpki-client