Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
File: iqrwV67ry_cGh34qqnSjljgL4hU.mft (raw, json)
Hash identifier: 0mlrhYMVUpdik+virhziAYkeqQqr1+LVOZ9A3nj1Ipg=
Subject key identifier: 4D:80:FC:66:E8:8D:DA:C8:DD:9D:CC:01:A8:E3:8B:AB:5E:6E:E9:13
Authority key identifier: 8A:AA:F0:57:AE:EB:CB:F7:06:87:7E:2A:AA:74:A3:96:38:0B:E2:15
Certificate issuer: /CN=8aaaf057aeebcbf706877e2aaa74a396380be215
Certificate serial: 0199FC8F3689C4C43B8E856E6109093EF67A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
Manifest number: 0474
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: iqrwV67ry_cGh34qqnSjljgL4hU.crl (hash: s9rnZb8JmYb2dUI+GoXW0mseOS+GpXU4Vo9Aspaleuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:36:89:c4:c4:3b:8e:85:6e:61:09:09:3e:f6:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aaaf057aeebcbf706877e2aaa74a396380be215
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=4d80fc66e88ddac8dd9dcc01a8e38bab5e6ee913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:52:87:bd:d4:17:8e:1a:6c:2e:cc:c5:cf:
0a:a7:3a:a1:ab:43:44:b7:c2:0a:d5:4b:88:35:0a:
43:e6:75:62:56:77:b7:f8:e6:62:0b:b9:c4:b7:71:
6f:e9:d6:16:60:05:c2:9f:0f:2a:76:fa:7f:37:99:
9b:9c:ab:78:66:22:46:67:fa:94:38:a7:3e:7b:0f:
e6:9d:2a:a3:f0:aa:35:20:86:73:05:e1:71:43:04:
75:18:40:83:12:f1:5b:f5:09:cd:f4:fa:f1:da:01:
ee:a1:6f:66:21:8f:29:4c:dd:44:48:b0:e6:87:1b:
82:09:2c:f4:eb:ca:b5:e8:14:26:a1:b6:f0:95:79:
52:fe:16:c7:1d:6c:c6:17:1f:3f:ff:2e:d2:3d:cc:
29:ef:3b:69:23:6f:7e:0b:57:eb:d4:ee:9a:33:95:
36:69:bc:cf:a8:d4:d8:9f:bb:c3:e0:d4:c0:16:8c:
27:54:7f:a7:63:c2:c7:d7:22:d7:62:84:b9:4c:c2:
ea:f1:ea:e0:c1:c7:e5:50:8a:20:50:77:b7:db:6c:
11:76:f9:1d:e6:ac:5a:40:00:6a:55:3f:3a:00:c8:
40:ca:23:a3:8d:35:5c:2f:f5:78:f1:53:0e:d8:41:
81:6f:3f:3b:31:32:1f:78:19:41:de:f1:9e:11:62:
08:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:80:FC:66:E8:8D:DA:C8:DD:9D:CC:01:A8:E3:8B:AB:5E:6E:E9:13
X509v3 Authority Key Identifier:
keyid:8A:AA:F0:57:AE:EB:CB:F7:06:87:7E:2A:AA:74:A3:96:38:0B:E2:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqrwV67ry_cGh34qqnSjljgL4hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2240a9-54d5-4b82-8731-53090b3baa81/1/iqrwV67ry_cGh34qqnSjljgL4hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:38:cb:9f:82:4a:97:98:b5:93:95:bb:6c:07:57:42:1c:27:
b8:05:01:2e:4c:d6:e9:e7:b5:1b:8e:59:66:53:3a:15:c3:28:
44:dd:be:13:37:56:07:01:ce:46:e9:ed:31:45:d2:12:02:41:
dc:b2:eb:2d:a8:e1:ca:a5:2f:0e:f7:94:cd:15:29:48:28:0a:
d8:45:f5:58:ec:6d:df:be:a0:f5:77:61:c6:c8:ef:64:c0:f0:
1e:06:02:56:a4:fc:b3:f0:46:87:d1:c7:8d:1f:53:73:ca:43:
43:ab:51:f5:c9:bc:7f:ff:d8:fc:5d:1d:41:e7:6b:f3:a9:2a:
c0:6d:a6:1d:e2:5d:8a:9d:d6:58:7c:0c:3d:5a:6f:96:26:9f:
f6:09:f0:8c:8a:25:73:55:79:d7:26:1a:87:07:67:c5:37:fe:
91:11:a4:81:a6:08:46:00:e7:13:cf:84:c8:5e:d1:3f:77:f9:
9c:8c:3a:e5:f9:69:d1:28:6c:9d:82:b9:1f:8f:38:7e:f1:b0:
de:4f:aa:92:0c:c1:63:50:ee:4d:25:61:c2:dc:b8:15:21:4c:
80:4f:eb:49:ef:5b:df:f5:e3:0f:30:28:93:d1:13:e8:5b:74:
fe:35:29:c1:44:e6:f1:c7:a6:50:60:42:c1:03:3f:ab:4b:03:
f2:00:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:50 2025 by rpki-client