Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
File: iOr6__gbldzuV3JwV-1nEUozgZM.mft (raw, json)
Hash identifier: 34ChsdnfyrkPEhJovuuoPpFO/5jdbfwxPF1bjBoXXuI=
Subject key identifier: DF:0A:9A:9A:54:3C:A7:B7:99:E4:BA:33:F9:B7:4F:2B:DA:E3:F0:21
Authority key identifier: 88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
Certificate issuer: /CN=88eafafff81b95dcee57727057ed67114a338193
Certificate serial: 0199FF22658F8DD2B13BBF270A3E08DCF1B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
Manifest number: 070B
Signing time: Mon 20 Oct 2025 01:01:08 +0000
Manifest this update: Mon 20 Oct 2025 01:01:08 +0000
Manifest next update: Tue 21 Oct 2025 01:01:08 +0000
Files and hashes: 1: iOr6__gbldzuV3JwV-1nEUozgZM.crl (hash: 0V9pkRRcSwPrg5Do2EvH9Oem5+5L9z4GPDJ4Ak284A4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:65:8f:8d:d2:b1:3b:bf:27:0a:3e:08:dc:f1:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88eafafff81b95dcee57727057ed67114a338193
Validity
Not Before: Oct 20 01:01:08 2025 GMT
Not After : Oct 21 01:01:08 2025 GMT
Subject: CN=df0a9a9a543ca7b799e4ba33f9b74f2bdae3f021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:59:f7:ff:ab:14:4a:1d:9a:c3:69:00:ef:4f:
46:40:8b:48:5c:fb:d4:fc:f1:9e:4d:3e:cb:71:a8:
9f:52:63:2c:a4:e0:70:81:27:a1:0e:02:f8:37:e0:
87:e5:d1:72:73:89:02:4e:eb:81:a3:6a:40:cd:21:
f6:fd:e7:39:a7:a0:59:25:10:69:02:60:97:13:bf:
3d:d7:87:01:c4:7b:38:80:fb:78:cd:4c:12:05:e3:
17:45:50:fc:27:25:c6:0d:c7:bc:b7:f3:6b:6e:0f:
4a:71:0f:a9:f2:81:d4:05:2b:d8:eb:8e:17:8f:1d:
4b:a0:b1:78:b6:68:5c:86:5d:5f:74:c3:5f:da:33:
a1:dd:43:b6:cb:92:f7:f8:b0:8c:7b:f9:09:99:4d:
a1:84:c8:fa:9b:be:a3:86:eb:bb:91:0f:e4:de:f6:
da:aa:a4:f4:03:e2:9b:3d:3b:1c:27:c7:60:47:28:
67:98:2c:2f:50:e0:5b:c9:93:ea:83:5d:90:cc:fa:
f2:bc:9e:52:5e:c9:57:d8:87:6e:d9:00:11:35:5e:
86:29:b4:f9:1d:4e:7c:2b:7d:39:46:7e:a0:c0:7d:
5a:d9:7d:cd:62:e5:83:03:e5:3f:61:12:5b:26:26:
fe:ac:e3:f0:6b:89:18:b2:d4:83:49:cf:f2:fc:c0:
05:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:0A:9A:9A:54:3C:A7:B7:99:E4:BA:33:F9:B7:4F:2B:DA:E3:F0:21
X509v3 Authority Key Identifier:
keyid:88:EA:FA:FF:F8:1B:95:DC:EE:57:72:70:57:ED:67:11:4A:33:81:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOr6__gbldzuV3JwV-1nEUozgZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f9ed64-5cc3-4a0d-a70c-1a387a456579/1/iOr6__gbldzuV3JwV-1nEUozgZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ee:dd:61:e7:39:08:54:c8:01:6e:f2:33:5e:46:fc:a6:ac:
24:1c:ab:6c:8b:3e:66:2f:cf:00:08:e5:df:20:64:25:64:3f:
c5:4c:01:7a:90:90:dc:63:e5:8a:7d:db:63:61:28:f7:5d:36:
4a:8c:f8:59:44:5e:30:30:e2:25:2c:eb:5e:15:fc:13:c9:dc:
0b:2a:f0:34:c7:b7:f4:22:07:bf:81:e1:ef:a7:8e:1c:6a:aa:
27:89:ce:cf:ce:8f:5d:64:05:2e:5a:b0:bb:df:df:96:36:90:
0f:e5:c7:4c:a8:99:ef:aa:88:ba:11:84:e8:b3:22:dc:b3:24:
13:98:d6:4d:c2:9f:40:0d:af:0b:cd:31:f1:de:62:5b:c8:40:
05:c4:77:cb:bf:d7:27:2c:3a:fb:53:9e:d2:82:8f:5b:ab:d8:
e0:ed:8e:f2:0c:74:ad:d2:33:c3:9a:5a:67:6f:e7:9a:a8:d5:
00:21:13:68:3b:20:05:13:cb:60:6d:95:a4:3a:aa:89:aa:7c:
e3:79:08:02:de:52:a8:43:fc:3e:21:6c:e9:a7:b4:0e:62:ce:
49:f7:c3:08:6f:ea:de:df:a3:4d:22:22:c5:6f:b3:89:9a:07:
f0:ca:f8:83:51:90:7a:74:35:7d:6e:6a:08:31:3c:cd:c2:27:
c0:ba:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:28:15 2025 by rpki-client