Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
File: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft (raw, json)
Hash identifier: /me/SYATbZI+SNoe8OTwP0xqJD9GYHxT6GpxEm53iWo=
Subject key identifier: 69:C2:30:D9:09:1A:3A:0B:A8:6B:6B:05:63:30:CC:D5:B7:77:F1:E6
Authority key identifier: 23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
Certificate issuer: /CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Certificate serial: 0199FD34968235CAAC6DB46A99F9D8AA8CC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl (hash: 8eMx9J6iPyxLeTLs8pzYPBV5SyYDvKefS/jfSevbIxo=)
2: Tp4BAItGYlXYP71Yl1jvkjdBkns.roa (hash: BUC2R1hzU4lwEDEogKCUTPLUZZa/Hz8pj9j9ce25uwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:96:82:35:ca:ac:6d:b4:6a:99:f9:d8:aa:8c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f1e09f0e6ed891ad17d6ce4a3c7328d759b4c8
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=69c230d9091a3a0ba86b6b056330ccd5b777f1e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:72:f1:b0:47:36:e6:43:85:da:20:5a:26:e8:
5e:8a:6f:37:a4:52:b3:4f:c6:8e:d2:70:03:38:a9:
15:20:30:4a:b1:15:70:9e:9e:76:b1:b4:bc:a9:6a:
1a:30:60:68:9b:24:68:f5:5d:0f:71:49:93:3a:88:
28:2f:e0:b2:11:ca:2b:c2:32:e0:96:e6:b7:c6:a8:
f2:50:0b:50:a8:cf:fb:d6:c2:01:83:02:f2:91:49:
bf:31:96:ba:b1:ad:d8:6a:52:d4:ec:3a:bb:38:aa:
d7:05:9e:a8:61:e4:9c:05:de:ad:29:19:8d:fb:53:
f7:3b:41:1b:3b:1a:1a:0b:e4:01:88:eb:2d:7a:dc:
2d:49:3d:99:df:6a:84:78:d2:dc:3c:d7:9b:fc:e4:
e9:d7:97:61:a2:78:d5:f0:a2:99:ba:7c:b9:81:6d:
39:55:2e:89:4e:08:31:68:8e:1b:a0:ec:9a:dd:66:
97:97:f4:e0:89:b4:0a:dc:ea:af:7f:73:de:c9:30:
09:20:76:d3:ee:ec:ad:86:4c:7d:cb:d1:35:e1:e1:
12:22:0a:ea:26:99:36:4b:8d:85:86:a7:9a:3f:18:
a6:5d:5f:8d:c8:b0:83:ea:e6:b5:ee:f6:bb:06:46:
67:21:d1:da:da:d5:a1:24:7c:69:5a:ec:13:14:4f:
b1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C2:30:D9:09:1A:3A:0B:A8:6B:6B:05:63:30:CC:D5:B7:77:F1:E6
X509v3 Authority Key Identifier:
keyid:23:F1:E0:9F:0E:6E:D8:91:AD:17:D6:CE:4A:3C:73:28:D7:59:B4:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/955ed1-8b40-4185-84a9-2ddcf56a763e/1/I_Hgnw5u2JGtF9bOSjxzKNdZtMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:dd:f6:2a:53:07:4e:b4:c6:6c:3c:e6:69:c4:48:42:17:80:
4e:22:3d:a8:3f:66:50:f8:0f:a5:86:40:8b:b5:a4:67:64:69:
61:bc:2d:0a:50:ff:27:34:3e:32:01:3e:37:2c:f6:9e:32:66:
37:ba:e6:10:39:f0:6f:07:80:78:25:30:22:81:96:68:35:12:
97:f1:6a:a7:95:02:13:5b:17:7b:55:a8:3d:cf:e0:6c:27:06:
21:37:f0:5b:54:b1:79:62:8d:34:dc:59:66:d6:85:8f:29:46:
39:ea:2b:dc:0d:da:a4:8e:28:45:56:3b:e5:2c:36:1d:6b:9d:
6a:87:02:60:0f:28:56:ab:c3:2f:7e:b9:1e:75:b6:18:1d:38:
d9:82:2c:84:cc:f6:fc:46:c9:ab:ae:9d:c9:4a:5b:c9:95:19:
3a:0f:45:c8:99:02:a0:cb:75:ce:ca:22:65:27:00:df:72:66:
b5:09:4b:e0:f2:75:9a:c8:e5:d2:87:79:5b:4c:b4:6f:1c:86:
47:3f:9e:a4:9d:e6:55:ee:b5:2b:5f:1c:7c:b6:46:8d:5e:ae:
d3:2e:44:eb:0d:b7:ff:0c:85:61:5d:35:8f:b0:0a:c4:01:6e:
b2:96:41:8b:48:a0:60:3d:c1:41:69:b3:ca:57:03:7f:ec:58:
5c:92:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:02:03 2025 by rpki-client