Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: xBRqOvrFBPUE0gjL0oEpl6mUeph2KHQ2+xpxEX8DtsE=
Subject key identifier: 8F:6A:16:26:DE:6E:0C:BE:4C:F7:63:E7:7A:76:3D:EA:60:83:98:7C
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 0199FCFD7C2DAB4AE3D09058D54775BBB915
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 0664
Signing time: Sun 19 Oct 2025 15:01:34 +0000
Manifest this update: Sun 19 Oct 2025 15:01:34 +0000
Manifest next update: Mon 20 Oct 2025 15:01:34 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: Cz/n4Un057eurLnmpAzagda/fr4tzXacH3+HtBM2Z2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:7c:2d:ab:4a:e3:d0:90:58:d5:47:75:bb:b9:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: Oct 19 15:01:34 2025 GMT
Not After : Oct 20 15:01:34 2025 GMT
Subject: CN=8f6a1626de6e0cbe4cf763e77a763dea6083987c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5e:d7:2f:45:99:e1:66:d1:a5:3f:5f:1e:f3:
82:8c:e0:e5:45:14:00:d4:81:63:29:cc:39:1f:4e:
da:11:3d:92:f8:35:5c:0e:95:8e:e4:3f:ed:f1:b3:
75:27:a9:f3:ff:5b:8d:ba:91:06:46:4d:a2:11:53:
87:c5:90:cb:de:41:f6:22:db:f8:59:41:d4:02:01:
3f:ea:0f:94:d3:04:94:1b:93:c9:75:14:76:57:f9:
00:53:94:22:cf:d4:35:72:75:8d:73:2b:59:a5:56:
c9:f9:63:e9:01:74:0a:08:63:f6:eb:d4:ba:63:dd:
4f:93:f2:2a:43:6d:94:72:27:9c:af:d3:41:67:d1:
08:8e:39:da:c9:cc:b7:aa:e7:35:2e:ac:69:d1:10:
ee:0d:d8:de:9c:91:65:14:cd:30:96:32:c6:ea:6e:
1f:6c:a4:58:8f:c8:8a:fd:61:a3:a0:34:35:9e:e0:
3c:29:ca:62:b8:89:f1:34:ab:1d:3c:e8:dd:d3:f8:
93:89:aa:56:2e:d9:d2:98:ac:68:0b:c8:c9:2b:70:
0d:bd:92:86:94:de:34:84:fc:5f:7a:fd:01:22:f5:
b6:c1:5d:33:51:a3:c7:2a:48:75:e5:61:49:78:61:
8b:41:fc:ab:03:1e:9c:4f:b2:bd:c3:d3:2c:fb:ca:
a3:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6A:16:26:DE:6E:0C:BE:4C:F7:63:E7:7A:76:3D:EA:60:83:98:7C
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:e1:8f:fb:2f:da:20:5d:60:fb:93:b0:31:38:d6:58:89:4d:
c0:e1:73:49:4c:96:fa:72:c6:08:a3:84:1c:68:ae:d8:ba:e2:
44:19:90:ce:da:76:ff:9e:3b:3a:c3:8c:eb:bc:00:1a:1c:9c:
62:76:a6:24:98:6c:fe:aa:98:a0:99:7a:f8:ee:59:03:72:b6:
8f:be:20:9c:87:8e:5f:bf:c9:52:3f:32:6e:ee:6a:45:0b:4e:
36:91:8c:31:08:98:d7:d0:1c:76:cf:ef:fe:4a:35:53:6b:e3:
0c:0b:04:2b:77:b1:af:25:56:56:0f:e8:19:e6:7d:9e:27:58:
71:09:75:97:1c:04:19:6e:94:72:aa:94:d0:12:3a:db:44:d0:
e4:c3:73:01:8c:75:46:1a:ef:b8:96:b2:c3:55:50:ac:a1:39:
86:14:a2:15:84:6f:3c:e9:4b:6d:53:26:db:9a:1d:f5:2b:52:
d5:fa:a9:a4:3d:99:2b:7f:8d:b7:ba:0b:2c:d9:b1:81:4a:d5:
55:62:30:84:8a:2f:1e:e3:30:90:2b:d4:38:4f:bc:fa:96:a4:
f8:de:3a:bc:af:68:7a:d4:3e:85:e1:c4:d6:87:a7:fd:66:7c:
44:38:ad:c2:37:d6:94:c9:d5:d9:8c:06:e0:d2:a3:46:42:ec:
0a:3b:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:24:09 2025 by rpki-client