Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
File: IsOFEHH5YIjHtxGcteFGPLq5jFk.mft (raw, json)
Hash identifier: O6Pa0OuLdr6YkvPeK5j68BW9CqpNj8RVxbZ/PKqSBW8=
Subject key identifier: 04:29:2D:D8:67:E8:1A:F1:D7:13:6B:61:0E:50:B6:D7:39:8C:0D:A9
Authority key identifier: 22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
Certificate issuer: /CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Certificate serial: 0199FBEAFB1633B001E2CD4566C1EA10FCB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
Manifest number: 112F
Signing time: Sun 19 Oct 2025 10:01:44 +0000
Manifest this update: Sun 19 Oct 2025 10:01:44 +0000
Manifest next update: Mon 20 Oct 2025 10:01:44 +0000
Files and hashes: 1: IsOFEHH5YIjHtxGcteFGPLq5jFk.crl (hash: EQfpmQWSIbxsp87yT3VWfjFM5310TT5LaeP6RyILveA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ea:fb:16:33:b0:01:e2:cd:45:66:c1:ea:10:fc:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c3851071f96088c7b7119cb5e1463cbab98c59
Validity
Not Before: Oct 19 10:01:44 2025 GMT
Not After : Oct 20 10:01:44 2025 GMT
Subject: CN=04292dd867e81af1d7136b610e50b6d7398c0da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e6:10:95:b7:c8:4c:a2:75:66:8c:47:bf:91:
2e:f1:58:c4:8e:5d:f3:ff:4d:30:60:53:94:9a:17:
26:e9:ac:56:23:b2:13:03:68:9a:7e:b3:c3:0f:b2:
4b:e6:e6:b5:82:92:03:36:2a:7a:6d:a5:7b:7d:eb:
c6:43:37:e7:56:b5:00:41:b5:ba:82:d0:cd:a1:88:
f9:0c:84:2d:5f:c0:0c:ac:9d:9d:ed:16:8c:37:2d:
86:c8:30:47:22:14:05:bb:ee:72:05:3e:ff:ba:68:
97:17:cf:ee:79:bd:fc:fe:c8:7c:b2:cc:8d:b6:1c:
6d:cf:36:51:fc:f8:7c:67:eb:f7:72:67:04:e0:49:
ec:5a:51:e8:cf:03:d4:83:20:60:3e:52:31:e3:9b:
ae:31:f0:80:ba:6a:4f:d0:84:93:0f:b3:ac:45:18:
b3:a4:0f:fc:a2:fe:ed:c7:79:2c:c1:3b:23:02:5b:
c5:3e:b0:92:8f:7e:d0:fe:0a:c8:ba:f0:88:13:a3:
e9:52:af:dc:e1:d0:a3:f5:2b:76:c5:21:e2:b4:e6:
c8:10:c1:67:fa:54:c9:fd:1b:3d:e9:de:34:4b:c7:
a3:25:aa:99:34:10:03:71:82:fb:17:ca:0e:61:c3:
59:f2:b6:4f:2f:82:78:0e:ef:fb:4f:28:b2:ac:02:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:29:2D:D8:67:E8:1A:F1:D7:13:6B:61:0E:50:B6:D7:39:8C:0D:A9
X509v3 Authority Key Identifier:
keyid:22:C3:85:10:71:F9:60:88:C7:B7:11:9C:B5:E1:46:3C:BA:B9:8C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsOFEHH5YIjHtxGcteFGPLq5jFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f0ff5a-516c-4b8e-b9a2-cbfde0290708/1/IsOFEHH5YIjHtxGcteFGPLq5jFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:34:ae:32:01:99:b6:19:0c:00:63:0f:aa:dd:15:61:82:
53:d0:2a:46:c3:44:4f:9a:a7:89:67:9c:14:75:de:dc:2b:ce:
f4:8d:0b:64:0b:45:03:d4:81:4c:b7:0b:c2:7a:70:2a:51:a4:
c5:b1:5c:fb:35:c8:ac:11:a6:a9:21:f9:29:50:c1:82:4d:1b:
9e:f6:84:08:b7:89:d9:66:6a:06:80:50:8a:0f:61:94:ae:f0:
81:8d:9b:97:3e:3c:9b:bf:ab:9f:48:cb:0d:0c:de:53:5f:93:
e9:6c:f6:36:42:62:dd:53:b8:0a:34:0e:7d:89:9a:d7:1b:e3:
9c:87:66:e5:59:f0:63:e7:06:77:02:ff:b6:c6:a0:52:49:e0:
51:e3:58:07:51:f5:bb:4a:f3:b0:d4:20:3c:79:c5:3a:03:49:
40:18:98:d5:14:8a:d7:51:b3:4d:00:6a:38:0f:73:bb:02:73:
f8:da:ce:b1:76:80:6f:71:9c:ef:f6:bf:8c:56:17:c7:cb:51:
dd:38:ff:12:5b:43:7a:96:4d:00:d1:82:4c:5f:74:b0:6b:12:
47:2f:c4:ad:46:db:ce:86:44:96:65:37:6f:81:f9:a0:85:bd:
81:50:11:0d:29:2d:93:8e:80:69:0d:1a:08:3c:f3:7c:e4:60:
67:1b:28:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:04:58 2025 by rpki-client