Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: AzN8K4xzmUAGVtvb89qAt6VYPofQqvWXD01X1SNOFQo=
Subject key identifier: 28:FA:45:4D:26:BB:BE:76:4B:32:02:1D:76:F5:29:8A:2B:69:5B:63
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 0199FFFE8AE65791483461B1AFC4F1994608
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 16DF
Signing time: Mon 20 Oct 2025 05:01:35 +0000
Manifest this update: Mon 20 Oct 2025 05:01:35 +0000
Manifest next update: Tue 21 Oct 2025 05:01:35 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: o88URjmjdNWxtOZNV6wEXuZNX5H9GAlZY11rzLZFhNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:8a:e6:57:91:48:34:61:b1:af:c4:f1:99:46:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Oct 20 05:01:35 2025 GMT
Not After : Oct 21 05:01:35 2025 GMT
Subject: CN=28fa454d26bbbe764b32021d76f5298a2b695b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c2:d5:f7:d4:66:2a:b1:10:11:ce:f0:9a:60:
62:b2:6b:70:32:08:98:e8:03:6f:bc:2e:d4:81:58:
0a:e8:13:3f:a0:c1:80:55:7d:b7:8c:c1:08:21:c1:
58:2c:57:5d:5f:52:7d:fb:84:f5:c2:db:ed:9d:b1:
ba:a6:20:76:84:a0:3f:35:2f:68:64:fb:d7:88:e9:
e8:26:f4:ea:06:43:c3:98:9d:98:36:b2:57:b4:63:
84:17:59:76:45:d4:4f:07:e0:68:cd:94:b6:62:62:
c4:58:e0:83:91:6f:6a:1b:c2:ce:4e:0f:ee:5f:16:
99:e8:da:77:28:48:72:fd:8a:7e:b5:b0:04:03:56:
21:7e:41:72:e0:be:41:2c:24:6d:26:b5:49:04:a9:
66:ab:4f:f1:5b:fb:0e:40:5c:70:3f:fe:25:ff:cb:
8b:46:d1:8f:01:82:aa:5b:e5:e3:a8:33:4b:48:d4:
bf:5b:4b:95:57:c8:b7:fb:16:5d:98:93:de:c6:e6:
c5:ec:ed:f3:6a:a3:c3:0c:50:0f:f1:fd:b4:52:2d:
b9:1d:f1:bd:80:51:22:3d:72:0e:25:d3:c5:12:86:
50:8a:de:57:9f:e3:f2:6e:1b:a7:7e:4b:69:72:0e:
52:24:0f:f5:e8:12:d9:ef:d7:33:3e:a8:45:84:73:
98:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FA:45:4D:26:BB:BE:76:4B:32:02:1D:76:F5:29:8A:2B:69:5B:63
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:84:19:f2:b1:d5:6d:c8:b8:6d:64:7d:6f:86:38:7a:3a:73:
19:09:7a:f7:cb:ef:ac:9d:6e:ad:e8:57:f7:b5:9f:2a:0e:83:
15:b6:bf:a9:20:b6:93:0c:30:ad:e5:3b:99:86:55:14:89:39:
2c:e5:96:64:86:27:5d:68:70:fd:1d:a5:f9:07:63:32:25:0b:
86:e2:32:99:49:2f:1f:a7:0c:b4:f5:5e:ff:0d:f2:e7:20:49:
1a:62:58:a9:ab:a2:0c:af:aa:38:8d:46:20:f2:9a:64:ae:8b:
08:e0:94:08:89:cc:07:93:31:03:b0:20:b6:79:d4:39:b7:9c:
6f:86:4b:d9:1b:a5:98:e2:1c:a5:29:36:86:c6:c2:c1:7d:c4:
44:4c:f7:ce:55:c7:7b:98:84:f9:3d:2f:f9:39:e0:80:d0:7e:
de:b1:5b:7c:7b:26:39:7f:6c:92:b3:f8:7d:a3:8c:8b:5d:e3:
76:f9:96:89:8f:57:e9:a5:04:f0:6c:a6:af:b6:ad:c8:34:94:
95:a6:8c:61:ea:57:c9:2d:fd:93:be:b4:a4:9c:a9:c1:89:57:
3a:6c:58:42:d5:08:77:de:d4:a9:18:06:0f:95:a2:b8:c2:f2:
60:cb:d5:39:aa:93:b2:1e:2c:a1:8b:35:81:77:fa:5f:f9:33:
07:81:c7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 07:56:02 2025 by rpki-client