Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
File: I1PVKkAkkfT5n-VHG90aXdb0K7w.mft (raw, json)
Hash identifier: 9kKRhqRjPZY9nO+pKUGJ1z3+W3fow8ASHwOHqSV8/xU=
Subject key identifier: 76:71:7D:2D:92:0C:97:0B:AC:A8:EE:1C:49:62:C4:1F:48:1F:44:CB
Authority key identifier: 23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
Certificate issuer: /CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Certificate serial: 0199FC58A733E04A26ABF586156B9A317342
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
Manifest number: 16DC
Signing time: Sun 19 Oct 2025 12:01:32 +0000
Manifest this update: Sun 19 Oct 2025 12:01:32 +0000
Manifest next update: Mon 20 Oct 2025 12:01:32 +0000
Files and hashes: 1: I1PVKkAkkfT5n-VHG90aXdb0K7w.crl (hash: tuS66S0/R9jgPbvhx/GowFWAD6wqZahg8UDeYhY1MMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:a7:33:e0:4a:26:ab:f5:86:15:6b:9a:31:73:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2353d52a402491f4f99fe5471bdd1a5dd6f42bbc
Validity
Not Before: Oct 19 12:01:32 2025 GMT
Not After : Oct 20 12:01:32 2025 GMT
Subject: CN=76717d2d920c970baca8ee1c4962c41f481f44cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:1c:4c:51:75:09:4e:bc:b6:0b:15:bf:79:
26:23:d7:02:58:bc:2d:18:f4:37:93:11:93:4d:3f:
98:22:8a:e9:d9:8a:5b:9c:5c:9a:6f:d6:b8:c5:3e:
bc:44:3d:4b:7b:cd:cd:0d:1f:8d:8e:81:eb:19:ac:
f8:5c:9c:e2:9d:3d:a3:a6:96:47:2c:c3:9b:6c:16:
5c:2c:14:35:a1:d4:4b:4e:a3:fa:92:87:25:e5:09:
b5:be:2e:c1:53:f6:e5:da:54:66:ae:79:cf:86:c0:
a8:04:b0:0c:3b:0f:f7:21:45:1a:b1:ea:74:58:ce:
50:34:ae:28:db:68:db:17:33:3b:f9:35:46:23:97:
ee:81:8e:27:3f:b7:dc:09:e8:fc:bb:5b:26:62:88:
c4:55:21:00:f6:85:8d:7e:d0:f5:cb:25:67:6f:82:
42:c3:16:bf:d4:ac:84:a1:bf:a8:f7:dc:2e:57:58:
b4:56:f4:50:e3:4d:0f:62:fb:ea:c6:07:57:60:25:
fd:18:ab:da:92:0a:4a:b6:99:40:e1:06:8b:cc:08:
a6:cd:2b:e1:ff:4b:5a:bc:c4:8e:18:fa:06:ea:bd:
9e:5a:6f:4c:ab:a8:7c:95:e8:39:12:bb:cd:49:b7:
38:2a:02:50:46:b9:fd:96:d2:f6:05:b0:83:27:4e:
fe:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:71:7D:2D:92:0C:97:0B:AC:A8:EE:1C:49:62:C4:1F:48:1F:44:CB
X509v3 Authority Key Identifier:
keyid:23:53:D5:2A:40:24:91:F4:F9:9F:E5:47:1B:DD:1A:5D:D6:F4:2B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1PVKkAkkfT5n-VHG90aXdb0K7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1f1af6-dd1b-4117-ac17-deab8586f2ce/1/I1PVKkAkkfT5n-VHG90aXdb0K7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:39:0a:ae:a7:c3:3f:fb:b4:39:f7:3c:9f:1c:e9:30:2e:c2:
7b:a0:51:c0:0d:3e:3d:35:b6:3d:18:d9:90:58:65:8b:5d:4a:
bc:1c:bf:74:ae:4e:f7:35:f0:7b:fb:97:e1:f2:f6:28:af:6f:
6f:68:0d:51:aa:31:9b:3f:24:8c:6b:2a:51:48:3c:be:d5:2d:
f0:eb:e5:f9:29:af:5a:a5:76:68:b0:10:f5:0d:5a:1e:6f:3f:
27:17:14:bf:28:9a:50:b1:d4:ee:5d:5b:45:15:8c:4e:3a:91:
e7:0b:fc:24:85:47:f7:9a:0e:80:1f:ec:bd:f0:68:c4:ed:3f:
64:b0:57:13:be:fd:f1:05:1e:41:b4:59:a4:3f:dd:d2:4e:cc:
8e:39:14:5e:af:56:23:51:8e:78:1f:f4:10:14:eb:cd:79:d8:
0a:43:ad:c7:66:65:d6:6c:93:dd:cf:ab:a3:62:fa:5b:31:93:
91:12:3b:7e:b7:bc:05:44:eb:ff:92:44:3d:ee:26:04:8e:1f:
33:9b:de:2f:c6:58:1a:0c:3f:f9:2e:92:b7:b8:5f:1b:2d:38:
65:74:a1:52:fd:db:ff:a6:b7:e5:3b:4f:44:a8:88:59:21:ad:
89:99:a8:08:bb:62:4c:41:3b:7d:54:4d:ee:4a:03:ab:08:db:
2f:c0:da:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:06:51 2025 by rpki-client