Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
File: i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft (raw, json)
Hash identifier: S2oQ5v7Nm07eAso6kZRRrnHLlR0/xUVKtnGYUE31DEA=
Subject key identifier: 49:6A:77:EE:C4:C3:A8:99:2C:B3:DD:EC:B8:3D:9D:23:2B:1F:74:98
Authority key identifier: 8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
Certificate issuer: /CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Certificate serial: 0199FD344D8AC7AD715664F9D6BDE9C0B63E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
Manifest number: 0BBA
Signing time: Sun 19 Oct 2025 16:01:27 +0000
Manifest this update: Sun 19 Oct 2025 16:01:27 +0000
Manifest next update: Mon 20 Oct 2025 16:01:27 +0000
Files and hashes: 1: i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl (hash: yEtjLSSZz7hD6LiHebatDDtRXBhHeZ3w+xm1QFR1Vf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:4d:8a:c7:ad:71:56:64:f9:d6:bd:e9:c0:b6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd8931f63579428bf08ccb199a3a98dcba6b824
Validity
Not Before: Oct 19 16:01:27 2025 GMT
Not After : Oct 20 16:01:27 2025 GMT
Subject: CN=496a77eec4c3a8992cb3ddecb83d9d232b1f7498
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:86:24:78:81:77:81:0e:9f:05:1a:6a:d6:
10:87:55:90:92:22:82:fa:64:04:7a:b4:5e:39:a2:
1a:9f:6b:3f:b8:b4:cf:23:e1:01:d2:80:09:05:b4:
c6:30:a0:fd:3b:b7:01:25:45:57:49:d4:9d:14:d6:
43:e5:2a:51:9d:04:6f:d9:5c:2c:89:76:7a:e8:64:
d4:41:14:e7:31:99:58:cd:be:d1:99:dc:2e:5b:f3:
d8:f1:35:1e:f0:73:06:4d:fe:b5:16:f3:a0:93:8c:
4f:dd:88:87:23:2d:74:b8:8b:b1:87:36:4f:3c:8a:
ff:b4:5b:fc:22:7e:3f:2d:a6:22:7b:a8:9c:7d:0e:
d9:83:50:96:bf:bd:03:68:13:ee:2c:e5:51:6b:8b:
06:64:ee:0d:60:01:e2:72:d5:0d:17:40:ca:63:0e:
82:59:64:dc:b8:f0:bd:5e:ad:f9:fd:c5:37:ea:e6:
2f:07:b8:87:e1:0f:46:e4:21:bf:9e:5d:51:d3:0e:
57:bf:f4:1d:32:32:db:ad:81:27:59:b3:68:96:52:
bd:34:4b:d5:a6:24:81:67:a0:65:ba:7b:20:5f:9f:
26:26:78:f0:8a:8d:3b:47:e1:ff:fa:97:d0:df:f6:
73:c8:88:91:41:da:f9:ed:7d:98:10:59:ef:cf:8a:
02:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6A:77:EE:C4:C3:A8:99:2C:B3:DD:EC:B8:3D:9D:23:2B:1F:74:98
X509v3 Authority Key Identifier:
keyid:8B:D8:93:1F:63:57:94:28:BF:08:CC:B1:99:A3:A9:8D:CB:A6:B8:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i9iTH2NXlCi_CMyxmaOpjcumuCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/7ac7bb-21dc-4a11-9791-4ee16d6c80a6/1/i9iTH2NXlCi_CMyxmaOpjcumuCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:aa:5d:19:26:b0:20:30:03:64:86:8a:d9:b8:9d:b4:35:0f:
09:5e:09:e5:31:3f:0e:b6:59:67:a8:24:53:a1:cf:6c:50:95:
f7:d1:30:16:9e:07:a1:e6:2a:ae:35:bb:3b:69:96:73:25:23:
4a:5a:e9:23:7e:41:3c:60:d3:47:10:cd:eb:fc:f0:7b:2c:a5:
c1:ab:7a:08:9a:48:2d:c9:e6:6a:30:53:29:ca:16:1c:7f:0e:
81:7d:0a:0c:0c:23:a8:90:c6:0b:e6:77:a5:13:7e:4d:99:67:
e8:53:89:09:4c:a8:b4:5c:df:c0:ac:5b:4c:fb:b8:99:b4:9d:
7b:76:56:1b:47:1f:fa:00:3b:f8:fd:61:a3:b8:68:f7:bb:2f:
7d:d8:92:da:39:78:98:db:3d:ad:2c:a4:35:ad:0a:90:85:68:
a9:fa:34:db:f4:2c:e5:68:85:b3:5e:a4:e0:f5:b9:69:3e:92:
6b:29:4a:4e:82:15:65:1d:d2:45:ef:58:11:c1:e5:45:57:41:
13:14:e6:2a:ce:97:41:5d:47:4b:80:62:90:c5:fd:e8:3b:6d:
ab:e0:d0:51:20:1a:f5:7d:29:8b:41:22:19:12:1c:95:f9:86:
9b:fb:74:6b:3d:6d:96:88:3d:af:2f:49:1e:ab:2c:01:4c:fa:
ba:fa:ac:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:04 2025 by rpki-client