Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: nAMkye5Eworq/GBD88NdQ2UxJ+fWiHXLTCPH+tupsG4=
Subject key identifier: D6:FC:CC:C0:FF:43:57:1D:73:6B:7E:CB:9A:2B:55:B2:81:38:4A:B8
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 0199FBEBF3D4AAA55A4FA37B60A091A4A3BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 0E18
Signing time: Sun 19 Oct 2025 10:02:48 +0000
Manifest this update: Sun 19 Oct 2025 10:02:48 +0000
Manifest next update: Mon 20 Oct 2025 10:02:48 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: X0YNdL7r5Bt4kxDtuspekSXSpyBJ9PFlUa/xTJKJNis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:f3:d4:aa:a5:5a:4f:a3:7b:60:a0:91:a4:a3:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Oct 19 10:02:48 2025 GMT
Not After : Oct 20 10:02:48 2025 GMT
Subject: CN=d6fcccc0ff43571d736b7ecb9a2b55b281384ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:28:4c:87:f9:e5:9f:5b:0c:19:8e:19:e6:a3:
98:d0:06:a4:37:1a:92:4f:ba:ef:27:c7:d4:c8:33:
49:a2:94:bc:f9:6b:ff:2b:67:1f:4b:77:a1:ad:89:
05:fc:8a:d1:a7:00:53:87:59:8d:82:30:de:a8:5a:
98:aa:58:f2:34:d8:99:00:25:b2:dc:33:c0:1f:60:
d5:ee:93:f8:8f:e8:77:84:ae:f2:55:0e:2b:80:15:
c5:f7:4d:ed:f9:fe:2a:1f:62:b0:37:af:0a:69:6e:
1f:d2:47:0d:a8:3d:ef:00:37:c1:95:95:d9:4c:01:
bb:4c:02:b2:a4:ed:c8:62:e7:cc:4b:b1:27:bc:b5:
c1:69:ea:38:ff:05:41:81:78:1a:d4:9d:d6:92:8c:
50:0d:aa:48:cd:35:81:74:72:03:06:59:ab:a6:62:
ea:ea:85:fa:44:9b:fc:3c:de:1d:11:12:54:81:17:
01:e9:e8:d3:85:a5:7f:7c:94:60:86:c4:5c:d6:8b:
68:7d:24:f7:4c:af:09:d9:3b:e2:d0:86:c2:1b:de:
0e:ae:bf:ed:1b:28:94:6e:ae:73:0c:b5:46:2d:f6:
04:ed:e4:71:2f:34:11:f2:7f:e9:a0:0a:ac:37:01:
60:79:a8:2c:f2:b1:1f:c3:6b:f0:ad:2b:67:ff:26:
24:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FC:CC:C0:FF:43:57:1D:73:6B:7E:CB:9A:2B:55:B2:81:38:4A:B8
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:45:ce:6e:bc:bf:db:9e:24:50:e5:a5:5e:6d:0c:f8:63:94:
13:56:33:e0:cf:7a:b7:63:50:8c:9b:3c:e0:71:22:b3:e0:0e:
b1:c7:79:a8:6b:4a:ef:81:55:c3:99:f3:45:2f:bc:9b:fa:da:
a9:07:2d:41:bd:92:1c:52:80:35:1a:ab:71:7d:b5:02:5c:dc:
fa:28:e2:9e:5f:86:65:0f:a4:0e:6f:96:67:35:26:07:e0:8b:
a9:89:49:5b:b2:54:e3:16:13:1d:21:7f:c9:93:ae:e1:fb:a7:
43:f3:88:81:a6:14:70:56:aa:fd:d7:e0:b6:1f:69:23:e2:13:
37:6d:a0:a2:35:40:23:7a:6e:4c:ef:67:53:09:bf:68:7e:b8:
85:e3:88:7c:b0:5d:fb:9a:5d:69:b9:12:c4:d8:b4:0a:ec:9d:
3e:b9:2b:26:26:7b:53:ee:80:d3:c8:fd:5c:3d:b6:6b:b4:7f:
92:26:78:37:52:77:15:e4:00:2b:19:8b:db:f7:ec:14:1c:65:
f4:41:33:d8:a7:bc:45:ae:e4:2e:e6:1d:70:43:9c:0c:d2:48:
18:24:21:b5:22:ec:45:db:52:4e:fb:7a:bb:4d:37:6a:cb:9a:
dd:f3:a8:9e:32:a2:78:e4:35:2f:dd:bb:b7:11:e6:e3:61:cb:
a0:c0:13:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:46 2025 by rpki-client