Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
File: iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft (raw, json)
Hash identifier: Fc4qQbtSAYBijRHPmSowVKwWE9FGmVmsnK8yim78x5E=
Subject key identifier: 87:33:CF:83:C8:28:BC:53:60:93:1E:2E:FC:89:7E:0D:DC:84:16:5C
Authority key identifier: 88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
Certificate issuer: /CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Certificate serial: 0199FC58EAA5C407DBC6E527F1E483FD45A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
Manifest number: 1163
Signing time: Sun 19 Oct 2025 12:01:49 +0000
Manifest this update: Sun 19 Oct 2025 12:01:49 +0000
Manifest next update: Mon 20 Oct 2025 12:01:49 +0000
Files and hashes: 1: iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl (hash: bcDicntm5PTiwn6XNjXvl8UmQwVfC6QmWSPTUAiaNBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:ea:a5:c4:07:db:c6:e5:27:f1:e4:83:fd:45:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=889347eb63db0e61230c5c31e9e19dfce7e941c4
Validity
Not Before: Oct 19 12:01:49 2025 GMT
Not After : Oct 20 12:01:49 2025 GMT
Subject: CN=8733cf83c828bc5360931e2efc897e0ddc84165c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:b7:de:b9:80:f6:3b:e9:8c:c6:5c:90:b8:
e3:fc:72:76:8d:88:84:58:bd:ff:d4:76:57:7a:d9:
7e:7c:f7:a2:eb:36:86:95:05:86:a8:4d:f3:96:2e:
de:c0:d9:2c:52:8c:91:31:13:f2:96:f1:31:45:5d:
ae:73:c9:49:3c:35:3b:45:64:b9:0c:eb:61:59:73:
59:fd:b4:8d:c5:dd:c7:a3:67:e0:42:56:24:88:5c:
22:a2:a3:f2:27:a0:3e:35:39:2b:f5:59:02:05:59:
9f:2f:3e:b8:33:86:8c:7f:b9:be:bb:5f:a4:ea:fb:
23:dd:17:60:7f:96:1d:05:a5:9b:0c:4c:3c:ee:6f:
35:33:62:aa:a7:d8:cf:be:2c:0b:d4:c2:94:80:95:
21:a2:c3:8d:2d:1f:bc:1f:fe:27:29:86:35:aa:fe:
c0:9d:74:4e:64:ac:5a:f7:7b:2a:62:c5:a6:5e:be:
f7:cc:40:1e:e6:06:e8:4e:ad:f1:2e:b0:44:46:24:
c4:d8:2c:dc:92:86:8d:01:c4:08:a1:eb:45:34:2f:
d0:bd:95:33:a2:ce:4f:ed:07:ec:87:65:33:66:86:
73:dd:bb:65:7a:62:49:e3:9c:21:0f:28:0b:04:c2:
38:a0:16:b2:5d:41:d0:1f:1a:a5:66:fa:43:82:cd:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:33:CF:83:C8:28:BC:53:60:93:1E:2E:FC:89:7E:0D:DC:84:16:5C
X509v3 Authority Key Identifier:
keyid:88:93:47:EB:63:DB:0E:61:23:0C:5C:31:E9:E1:9D:FC:E7:E9:41:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iJNH62PbDmEjDFwx6eGd_OfpQcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/69daa7-cfaf-4ef9-8f5f-d5eb621fc3ac/1/iJNH62PbDmEjDFwx6eGd_OfpQcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:ae:47:f0:7e:0b:b0:b2:e2:4b:87:7e:b0:92:e9:4a:d8:e5:
99:fd:29:98:71:b8:28:8b:4d:17:63:eb:0d:68:67:5c:7f:eb:
be:71:2e:d0:a8:94:47:17:15:44:79:fb:02:7f:8f:9c:f1:77:
21:e0:ed:14:b5:4b:8b:8b:e4:e4:6f:9e:74:d3:52:c4:aa:ab:
dd:7c:c4:83:08:2a:4c:f1:09:1a:41:ed:c1:e2:d6:79:d7:d2:
11:63:3d:8c:78:38:51:a6:ba:99:2c:93:25:2c:ab:fb:17:0e:
40:b4:c2:9c:18:db:2a:84:09:b5:6c:04:71:ea:69:89:74:e7:
da:9a:40:6a:b0:a4:43:fc:88:00:2e:64:6a:ed:ae:c0:a1:77:
22:cb:07:a1:27:c6:92:2e:e8:13:d2:7f:1f:93:94:8e:46:55:
2d:06:0d:e0:fc:fa:f2:af:60:7b:5c:3d:3f:9a:1d:aa:1b:cd:
c1:1a:09:5f:51:e2:5f:a1:89:a2:9d:9a:e6:84:89:77:89:0b:
30:aa:5f:0d:a7:c4:50:d0:5f:cc:15:08:92:02:48:8d:da:c1:
40:1a:7b:ab:9b:e8:65:64:65:c1:a0:00:2f:8f:9c:a6:5a:39:
57:f2:44:7c:0f:88:51:6b:4a:bb:76:43:51:09:68:39:bb:ad:
cd:56:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:40:47 2025 by rpki-client