Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
File: I-RRZMVy7d5d8lORfMEqLf05i5c.mft (raw, json)
Hash identifier: Hb9uaYTYahAS5AnZ7tMs7wL0bG8D4+FN8OXV07cet/A=
Subject key identifier: C9:F5:41:AF:82:35:F8:5D:59:53:C7:E3:BD:55:86:29:B7:1D:61:A5
Authority key identifier: 23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
Certificate issuer: /CN=23e45164c572edde5df253917cc12a2dfd398b97
Certificate serial: 0199FBEA7F0F9BC90BCDC604E5D4775C516A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
Manifest number: 07B2
Signing time: Sun 19 Oct 2025 10:01:13 +0000
Manifest this update: Sun 19 Oct 2025 10:01:13 +0000
Manifest next update: Mon 20 Oct 2025 10:01:13 +0000
Files and hashes: 1: I-RRZMVy7d5d8lORfMEqLf05i5c.crl (hash: rdAmecMTSz9v7Y6P0PJr6P9aWJ/SrMXi+5WnRpQSj2A=)
2: Qf0cAOk73br7c02Yp4LiYn6tSvI.roa (hash: Uq615z1vQ76UBbAOWh8ANumqrOuVi1i2JY2ord8ybMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:7f:0f:9b:c9:0b:cd:c6:04:e5:d4:77:5c:51:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e45164c572edde5df253917cc12a2dfd398b97
Validity
Not Before: Oct 19 10:01:13 2025 GMT
Not After : Oct 20 10:01:13 2025 GMT
Subject: CN=c9f541af8235f85d5953c7e3bd558629b71d61a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:ce:f8:dd:85:3e:67:09:03:71:cd:3d:92:
7f:63:bc:3e:d5:b7:51:c0:51:5e:d3:de:47:13:e4:
56:21:c9:67:e3:10:a9:98:7c:6b:31:2a:c8:9c:fc:
cc:66:a1:0e:93:94:ab:40:a6:df:56:46:f3:53:33:
ed:16:48:60:fd:46:69:d3:1f:d6:8b:54:0f:fc:8c:
86:9d:80:db:2a:23:98:cd:64:d5:8d:2a:70:92:40:
b0:ff:7b:88:a2:09:9b:be:24:0b:b4:42:3f:31:52:
6f:05:0c:71:9d:d0:2f:77:a0:3b:2c:bf:e7:a9:b2:
80:87:dd:fc:f3:bd:38:8e:8e:41:fd:8c:bc:59:ae:
9c:82:17:eb:c4:0d:91:6e:cd:66:2b:2a:89:4c:b8:
78:af:b0:68:0b:18:4b:d4:e8:b9:52:70:30:c7:95:
39:3d:c4:3c:d2:96:c2:9b:83:b4:ae:a8:17:a1:d5:
93:4d:b8:9c:a8:30:a0:03:a5:bc:df:25:4b:3a:d2:
a9:dd:55:25:e3:28:fe:93:6b:5a:76:a8:bf:8c:13:
01:ca:3d:a8:3c:92:61:b9:39:fd:2e:b0:56:96:36:
49:bc:f9:01:50:73:a4:34:a5:94:c9:b6:68:ec:1c:
f2:6b:7f:64:49:c6:a4:82:1f:65:60:fb:26:cf:6d:
3a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:F5:41:AF:82:35:F8:5D:59:53:C7:E3:BD:55:86:29:B7:1D:61:A5
X509v3 Authority Key Identifier:
keyid:23:E4:51:64:C5:72:ED:DE:5D:F2:53:91:7C:C1:2A:2D:FD:39:8B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-RRZMVy7d5d8lORfMEqLf05i5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/68a4b2-5894-47c5-be01-66aa2a23239e/1/I-RRZMVy7d5d8lORfMEqLf05i5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:96:5a:c0:33:7e:01:16:9d:ca:fd:11:2e:b9:30:b9:7b:4e:
1c:b3:72:2a:b3:77:f2:99:67:ea:2b:62:a2:68:9c:bf:c7:6f:
b9:e9:be:a3:78:c4:88:85:ba:36:86:30:ee:d1:2e:e7:57:84:
b8:d0:71:24:85:ca:38:08:84:de:2e:cb:13:55:93:dc:ac:f5:
a3:eb:a4:97:1b:3c:d4:61:2f:6b:56:f0:16:72:66:f8:52:f1:
fe:b6:1d:85:6f:02:06:2d:c9:5a:3d:21:0c:ad:d7:aa:22:c9:
26:d3:68:72:00:6f:7e:b4:4e:da:c3:68:0b:ca:2e:58:6d:e4:
4b:8f:d6:48:de:73:1e:ad:97:d6:4e:b7:50:9f:b5:97:f9:c7:
91:88:77:11:17:c5:42:af:ae:2f:76:aa:7f:06:6f:2a:ad:5c:
5b:8b:14:1c:82:c5:74:b0:51:64:23:38:d8:67:95:cd:14:79:
2d:56:63:d9:4a:3b:14:e3:3d:c2:cc:de:18:d0:fd:89:f4:cf:
c8:88:ad:90:b7:b0:7f:49:d6:1e:43:ac:5e:37:d6:e0:1e:70:
ea:bf:30:3a:67:81:da:c8:60:50:e6:64:01:ee:c6:41:39:5d:
1f:c5:17:48:9e:81:c7:83:7e:6e:1b:63:ad:9a:43:e6:12:a5:
62:59:b7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:21:40 2025 by rpki-client