Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File: IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier: oUbnKhcMZEP0IEG6s6UrPudMBhiFukI0jSEJt750TCg=
Subject key identifier: D9:9D:37:23:09:27:54:84:31:5D:DE:D4:8F:7F:CA:6D:85:1F:0B:84
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer: /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial: 0199FC8F6925E9E6B18A095AF6C8D34F612A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number: 0EFF
Signing time: Sun 19 Oct 2025 13:01:20 +0000
Manifest this update: Sun 19 Oct 2025 13:01:20 +0000
Manifest next update: Mon 20 Oct 2025 13:01:20 +0000
Files and hashes: 1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: d54vHvIvF2xmMfspaKKd252zIUMo3vvHMZ3heaS5I04=)
2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:69:25:e9:e6:b1:8a:09:5a:f6:c8:d3:4f:61:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
Validity
Not Before: Oct 19 13:01:20 2025 GMT
Not After : Oct 20 13:01:20 2025 GMT
Subject: CN=d99d372309275484315dded48f7fca6d851f0b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:fc:1e:5b:47:fc:7b:22:48:b9:8a:9c:71:
30:10:c0:a4:f6:f0:69:e5:c8:2b:3c:12:40:53:f3:
aa:ca:76:00:f7:04:f9:f2:2e:e5:35:48:e4:58:d3:
27:f7:d3:d1:99:d0:ae:25:d0:52:58:50:67:7c:a7:
0d:e4:a8:25:8c:66:8f:d7:f5:5a:21:81:5e:37:4a:
2b:47:d3:47:62:55:13:fb:a5:94:39:9c:af:af:a5:
23:6b:45:33:cf:4c:c9:98:36:cb:f9:89:06:2a:f9:
c7:57:9a:cf:40:22:e6:d6:80:0c:79:9e:01:70:b4:
5c:0c:dc:25:cb:e1:c6:3d:21:24:21:a8:da:0a:80:
c5:cb:b7:07:78:07:c3:05:07:d2:37:3f:c1:97:ec:
78:99:b1:dc:07:69:38:6b:98:03:ea:e1:6a:57:57:
11:21:07:13:f3:d9:bb:d7:16:d8:ab:c9:dd:d7:14:
bf:88:c3:5b:c4:fc:62:34:aa:f4:30:91:23:65:22:
8f:5b:50:fa:ca:f2:9f:d0:ec:80:14:73:9c:56:80:
8c:c8:c8:dc:0b:37:9e:39:00:e1:ff:b7:81:2d:8a:
90:ab:1d:f5:ea:6b:4f:ba:60:0c:13:72:89:a6:78:
43:62:4a:ae:36:83:a9:ac:58:f4:14:4a:25:f5:1c:
a4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9D:37:23:09:27:54:84:31:5D:DE:D4:8F:7F:CA:6D:85:1F:0B:84
X509v3 Authority Key Identifier:
keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:08:ef:ec:ba:1c:70:aa:2a:c2:93:0e:ea:b9:a0:f5:ec:f1:
c1:99:82:99:41:eb:44:7b:be:b9:4e:aa:61:2a:d9:7b:ac:10:
e8:ac:54:6f:b2:c9:b3:12:bf:0e:f1:d8:1e:ee:d5:4f:6a:ff:
62:12:c0:fb:a3:3d:d0:36:fd:75:c9:29:56:d5:e8:db:9c:90:
d9:05:a1:ff:7f:6f:30:e9:3b:79:af:e6:02:43:fa:27:cd:fe:
54:63:6c:fe:ff:ca:06:4a:df:9c:e8:27:d5:6f:82:6f:43:ed:
ee:ec:fc:a0:3e:8b:50:b4:2c:d4:c9:bd:f9:60:4a:08:20:d8:
6b:6e:4e:8f:d0:26:9d:fe:fc:a2:ac:5e:bf:4f:12:92:c9:06:
59:92:2b:4e:7f:f6:d5:45:bd:cd:ea:5d:7e:02:e0:87:54:3e:
37:34:36:84:d9:69:21:f8:79:f1:d4:6b:5b:c1:65:f3:f4:4b:
82:66:a7:b3:a6:00:74:59:ae:f0:3f:85:2b:38:1e:7e:8d:da:
c7:c4:77:6d:77:16:cd:81:d9:ac:1d:ac:8b:ab:b9:06:4c:df:
d9:c1:be:ae:59:85:35:e1:50:ca:b1:d4:e4:0d:ac:50:f8:5f:
28:d6:db:8e:35:b5:a2:fe:5e:da:8e:72:3a:50:ba:f0:a7:93:
1d:ee:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:52 2025 by rpki-client