Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
File: INShQtHjFwTrW88Dp4X2N4NVt5k.mft (raw, json)
Hash identifier: wiuaSgg7gbBxAeytojsnna4ko2ShkvxKnCxL+9747JE=
Subject key identifier: 7E:62:20:1B:B4:AD:95:1B:50:02:E6:78:A9:93:75:BE:3E:E6:E9:DF
Authority key identifier: 20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
Certificate issuer: /CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Certificate serial: 019A01EC18163DF51A2A850AC90171BDEDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
Manifest number: 0709
Signing time: Mon 20 Oct 2025 14:00:41 +0000
Manifest this update: Mon 20 Oct 2025 14:00:41 +0000
Manifest next update: Tue 21 Oct 2025 14:00:41 +0000
Files and hashes: 1: INShQtHjFwTrW88Dp4X2N4NVt5k.crl (hash: gM8Z2SS75mYO48LEhWkq7H2mKmmFkIPYYZ23BGWd9s8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:18:16:3d:f5:1a:2a:85:0a:c9:01:71:bd:ed:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d4a142d1e31704eb5bcf03a785f6378355b799
Validity
Not Before: Oct 20 14:00:41 2025 GMT
Not After : Oct 21 14:00:41 2025 GMT
Subject: CN=7e62201bb4ad951b5002e678a99375be3ee6e9df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5c:cd:ae:ff:65:c6:f0:fb:3a:7f:0c:c6:99:
30:66:d5:d2:27:71:4c:4c:e5:57:97:81:a6:d1:31:
fe:f4:50:79:68:e5:ab:dd:47:70:25:08:27:a2:c2:
4c:99:2b:97:90:fb:f8:1e:45:40:04:8b:c2:fb:e6:
f6:b7:8b:e9:8c:e3:ba:22:64:af:b7:83:25:4f:0d:
f1:ec:e5:6d:ee:13:ad:a2:09:49:ec:81:56:e9:28:
54:86:e3:d8:29:60:da:6f:06:83:9c:71:0f:e8:73:
19:6e:d7:8a:27:86:d8:60:77:84:82:4b:6c:02:51:
35:f4:cc:8b:31:4f:b1:79:41:c6:96:e3:07:ab:0f:
7c:2e:a0:0f:e5:07:4a:0f:88:0f:b5:45:20:bc:3d:
66:b0:19:de:45:5a:08:4e:5d:d4:ce:a7:32:f6:0a:
e3:0e:92:d6:87:6e:91:dd:81:fc:a9:04:da:f8:84:
8d:81:33:d4:c8:3e:90:18:14:7e:1f:cb:8f:bd:52:
ae:88:ac:de:74:07:f2:bd:4c:db:1e:08:79:8e:70:
32:06:8f:56:bf:64:c6:e4:c7:7b:50:f5:c7:69:f7:
70:67:f6:96:c3:17:b4:b3:74:9f:81:8e:ea:e6:26:
52:b5:b2:d1:0d:2e:25:51:1e:a8:ce:7c:67:63:0d:
10:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:62:20:1B:B4:AD:95:1B:50:02:E6:78:A9:93:75:BE:3E:E6:E9:DF
X509v3 Authority Key Identifier:
keyid:20:D4:A1:42:D1:E3:17:04:EB:5B:CF:03:A7:85:F6:37:83:55:B7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INShQtHjFwTrW88Dp4X2N4NVt5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/099e79-16fb-40be-a918-db7c1af3a073/1/INShQtHjFwTrW88Dp4X2N4NVt5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:06:09:d2:43:7f:c3:38:69:54:00:6e:fd:41:13:45:a7:25:
22:39:8b:a3:d4:3e:b9:9b:42:60:3a:eb:80:de:fb:11:39:73:
60:ab:3a:b7:d2:c6:cd:76:0f:b2:01:82:03:ea:94:a0:8c:d9:
db:52:7a:26:64:5a:75:63:c0:b7:ce:a1:2a:5c:ed:c1:da:c6:
ef:a8:d4:fa:49:ae:65:38:8d:41:83:98:f5:9e:bf:88:e9:5d:
3b:89:42:36:25:c6:f6:e7:b0:0b:59:66:01:e6:eb:f5:33:c8:
8f:27:77:30:28:cf:39:85:c0:0d:63:09:8d:f3:8c:6f:be:c4:
f6:25:4d:6e:c7:49:37:b8:73:d0:66:25:46:c2:1e:a8:bd:e7:
fa:31:7f:d3:d8:a1:61:d6:81:3d:36:43:64:94:f3:7f:47:22:
1a:84:2e:e9:1c:cc:5e:e1:fe:11:c8:8e:b0:d8:f3:96:57:57:
47:2e:c9:8a:6f:52:bc:bd:a3:85:50:f2:37:e7:3c:7a:9f:1b:
0f:78:b2:c3:d6:ba:f1:bc:7d:97:79:9c:e4:3b:ee:83:e8:97:
f2:b5:aa:9e:31:a8:63:55:e3:48:e9:07:36:56:51:57:40:b3:
83:3f:63:07:f4:78:ed:00:a9:cf:85:bc:b0:ce:96:4a:9b:a8:
f3:02:e7:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 19:51:46 2025 by rpki-client