Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
File: Rii90MjhtQTSlPijkEyNV65jg_Q.mft (raw, json)
Hash identifier: RD9kdGvOTFDVF64C4ytYqQABF5KbEQr0D+1GcbF4yyc=
Subject key identifier: EC:55:46:AD:22:C6:30:39:EC:C1:44:C1:28:81:00:15:7A:80:2A:3F
Authority key identifier: 46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
Certificate issuer: /CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Certificate serial: 0199FDDA13E0B50C6AE912B6F8F899E4E01E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
Manifest number: 16DF
Signing time: Sun 19 Oct 2025 19:02:31 +0000
Manifest this update: Sun 19 Oct 2025 19:02:31 +0000
Manifest next update: Mon 20 Oct 2025 19:02:31 +0000
Files and hashes: 1: Rii90MjhtQTSlPijkEyNV65jg_Q.crl (hash: Hsp26jI14W/GHAgOu4zDR0ZK446wVgH1/rK3OvQXaVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:13:e0:b5:0c:6a:e9:12:b6:f8:f8:99:e4:e0:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4628bdd0c8e1b504d294f8a3904c8d57ae6383f4
Validity
Not Before: Oct 19 19:02:31 2025 GMT
Not After : Oct 20 19:02:31 2025 GMT
Subject: CN=ec5546ad22c63039ecc144c1288100157a802a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:fd:2d:98:58:0e:e0:be:a5:33:9c:30:cb:
47:15:72:5a:ec:ce:41:33:41:fa:48:4e:0c:82:49:
03:27:33:07:1b:61:28:e2:83:88:58:2e:dd:4c:94:
df:a8:2e:d0:68:32:82:db:e6:94:1e:56:4c:61:4a:
89:ae:9b:5f:80:77:cb:a7:a9:f2:ed:02:ff:5c:68:
4f:a0:7d:cc:58:70:57:d4:b6:f1:11:7c:21:3d:9f:
27:72:82:62:49:27:65:91:ba:84:3f:ec:59:96:e5:
d9:2e:0e:8d:6a:09:9f:c5:2d:e9:0b:ab:0e:81:09:
a3:1a:14:14:75:8d:59:4e:7d:fc:0c:e7:5a:16:78:
12:8d:8d:89:dc:5e:70:0d:08:b4:29:dc:bb:f8:c9:
f0:6e:5e:a9:a0:cd:fe:5f:34:0b:40:2b:24:a0:75:
bb:ad:ea:99:9a:be:aa:c7:e8:ad:ad:5c:05:e6:da:
87:d4:01:83:06:e7:69:cc:19:d8:81:f6:b6:63:94:
e3:78:5f:db:42:90:a3:a0:5c:ca:a6:e6:a3:8a:ad:
4a:f0:3e:f9:58:f3:3e:11:92:0c:d7:13:24:ea:ce:
5d:29:2a:c4:71:cf:a3:20:8d:03:e9:e0:66:07:05:
99:29:08:66:1b:4a:2a:fe:5b:21:58:92:f9:15:f9:
0d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:55:46:AD:22:C6:30:39:EC:C1:44:C1:28:81:00:15:7A:80:2A:3F
X509v3 Authority Key Identifier:
keyid:46:28:BD:D0:C8:E1:B5:04:D2:94:F8:A3:90:4C:8D:57:AE:63:83:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rii90MjhtQTSlPijkEyNV65jg_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2a7573-9161-45ba-b93b-5f8b63b11f0b/1/Rii90MjhtQTSlPijkEyNV65jg_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:5e:67:7c:1a:8a:4d:b1:c4:6c:cb:8f:1c:ba:02:3f:78:ab:
ef:2c:b7:b6:08:1b:b1:19:b5:d2:0d:10:cb:bf:9c:38:32:7e:
c2:f1:4f:e9:39:d8:04:c0:71:53:4c:7c:97:15:fe:ed:b1:e6:
c8:6e:12:40:7c:2e:8e:9b:b4:59:f4:fd:76:4a:58:c0:a9:83:
44:b8:07:0d:49:bd:56:cc:ba:c0:d4:be:54:80:e9:ac:2e:97:
47:d3:98:41:ae:9a:a4:22:19:c4:0f:83:1c:be:93:f1:bc:3f:
6a:f4:a7:b1:dc:1b:bd:07:3b:68:8b:27:41:c8:55:f1:7b:59:
cc:08:9a:0c:c2:2a:83:22:39:11:56:f8:25:43:15:d9:a1:71:
01:ce:d5:66:20:23:12:02:87:64:00:86:81:fe:d0:b5:c2:b5:
58:bf:34:eb:ce:55:97:eb:e9:af:6a:10:e3:92:16:05:ab:d7:
eb:32:65:7e:27:54:aa:1c:4c:bf:38:9c:ac:14:f7:c6:cf:08:
ac:58:36:21:af:d3:e4:8b:a7:90:be:05:7f:65:19:07:49:b1:
ce:a6:7b:1d:80:b5:7c:1c:d9:ec:1a:24:a3:9f:cf:6c:a8:1d:
32:31:47:39:aa:c3:f7:b2:d2:07:60:12:86:c5:96:40:64:2b:
3f:e6:57:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:51:37 2025 by rpki-client