Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
File: inwNQWIenTgIi43T5t4VVBvuHIw.mft (raw, json)
Hash identifier: Ptfl1ajzzONpJPB75fu7vI7sS6HLUbExdlxg/O8tAaU=
Subject key identifier: 68:D1:DC:51:BE:15:8A:46:F4:D9:8A:BB:C3:DB:BF:90:D9:84:C1:A6
Authority key identifier: 8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
Certificate issuer: /CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Certificate serial: 0199FCC60DBEB4C88874704B517B180B7A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 14:01:01 +0000
Manifest this update: Sun 19 Oct 2025 14:01:01 +0000
Manifest next update: Mon 20 Oct 2025 14:01:01 +0000
Files and hashes: 1: inwNQWIenTgIi43T5t4VVBvuHIw.crl (hash: qK1Mbs2Fv04IERpn6E1tl7FwNk5kyQJ89kSLPwJp3PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0d:be:b4:c8:88:74:70:4b:51:7b:18:0b:7a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7c0d41621e9d38088b8dd3e6de15541bee1c8c
Validity
Not Before: Oct 19 14:01:01 2025 GMT
Not After : Oct 20 14:01:01 2025 GMT
Subject: CN=68d1dc51be158a46f4d98abbc3dbbf90d984c1a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b2:fa:b2:6c:09:41:2d:a0:9a:c8:ec:22:d1:
40:90:a1:9a:56:23:42:44:c8:b4:ec:dd:a5:10:14:
9e:b3:e1:2a:33:56:c5:65:7d:c1:c7:4c:6c:a5:e8:
b0:cc:4c:1a:af:7c:c6:58:d8:86:d1:78:1d:46:4c:
db:13:86:67:31:f6:60:5d:66:f0:1c:fc:7c:97:86:
f3:a8:bd:4b:35:d5:b9:a5:09:10:1f:44:ec:cb:e6:
00:f0:9e:87:4b:99:20:28:64:12:e2:93:14:9e:7d:
05:f3:02:b8:f9:cf:5c:dc:d3:b6:0d:9d:69:3d:d5:
ca:4d:98:47:ff:f6:9d:ab:66:73:35:55:da:be:8b:
a8:ba:91:37:6e:59:b5:5a:4c:09:7e:45:0a:2a:05:
0e:20:4c:57:31:9f:a3:ee:c7:d3:ec:c6:fc:3a:06:
7a:38:85:c3:82:8b:3e:1e:dd:e3:7a:03:c4:a5:4c:
f8:5a:7f:e9:ba:5c:1d:9b:c2:41:c4:b2:a1:ec:88:
a7:20:7c:93:f6:59:e0:a1:ce:c6:5a:b8:30:b5:81:
41:5d:39:1a:98:81:c3:9c:77:9b:77:a6:83:80:61:
05:5e:d6:ce:db:ee:7e:a5:0f:b3:21:d9:29:5a:e7:
18:90:22:21:7d:c7:cb:c2:2c:46:f0:f9:61:66:57:
1b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D1:DC:51:BE:15:8A:46:F4:D9:8A:BB:C3:DB:BF:90:D9:84:C1:A6
X509v3 Authority Key Identifier:
keyid:8A:7C:0D:41:62:1E:9D:38:08:8B:8D:D3:E6:DE:15:54:1B:EE:1C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inwNQWIenTgIi43T5t4VVBvuHIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dd32a3-dfe9-4160-85df-a1b2703b0a9e/1/inwNQWIenTgIi43T5t4VVBvuHIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:97:85:e2:4e:86:83:2e:d1:45:38:aa:de:e2:36:e6:6d:36:
db:21:b2:01:02:00:43:e9:2e:ad:1c:07:87:b7:c8:cb:a7:26:
4a:bf:9d:33:dd:10:76:84:f2:5e:f9:9b:53:6c:6a:af:d4:85:
6b:4d:b6:99:10:cd:ee:1c:54:cc:ff:e4:a3:c3:58:2d:70:a7:
88:63:15:b5:eb:20:76:5c:08:d8:bf:6b:8c:68:9d:62:b3:ca:
9e:4c:c1:e4:8b:9c:7a:22:4e:92:e5:87:70:48:ca:9f:65:71:
db:87:72:08:f0:65:33:88:75:0c:1f:ff:a7:d9:cd:30:8c:05:
b3:c9:0d:e6:42:00:bf:99:9e:92:da:01:f6:c8:40:47:e7:3c:
0d:de:95:9e:0b:aa:1f:05:88:1b:e5:2b:ce:4b:10:6f:b8:19:
2f:d3:5f:e7:9d:28:1b:47:e5:13:f7:53:cd:98:d1:e3:f3:d9:
b9:52:88:9d:01:d2:a8:07:3f:cf:00:70:bd:bb:30:38:c3:4e:
bb:eb:db:5e:0e:35:3e:39:53:4d:38:12:cd:be:35:27:ec:1e:
ef:d4:fa:b4:49:16:58:45:7c:4a:78:35:e5:c8:99:99:bc:cb:
ad:4b:c5:ec:4d:17:8a:ee:57:c7:48:cb:68:2c:94:8a:e8:7e:
1b:2f:1c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:34:41 2025 by rpki-client