Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
File: Iycd4-AQWavm0aWTxKJP9uGI1k8.mft (raw, json)
Hash identifier: HJ4klU/CoiYkNfhEDUY/KAOk7t8W+65zmckZY5A9jko=
Subject key identifier: E6:E1:9F:E0:8A:10:8F:A0:91:95:14:40:62:01:35:FD:48:9E:60:22
Authority key identifier: 23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
Certificate issuer: /CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Certificate serial: 0199FBEC129D7B2C8C9AA5544A3438D31A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
Manifest number: 0EE2
Signing time: Sun 19 Oct 2025 10:02:56 +0000
Manifest this update: Sun 19 Oct 2025 10:02:56 +0000
Manifest next update: Mon 20 Oct 2025 10:02:56 +0000
Files and hashes: 1: Iycd4-AQWavm0aWTxKJP9uGI1k8.crl (hash: yyVzfvwdxCulHDSGWclwBrEH9UMmmoNEqEXiOsRz0ho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:12:9d:7b:2c:8c:9a:a5:54:4a:34:38:d3:1a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23271de3e01059abe6d1a593c4a24ff6e188d64f
Validity
Not Before: Oct 19 10:02:56 2025 GMT
Not After : Oct 20 10:02:56 2025 GMT
Subject: CN=e6e19fe08a108fa091951440620135fd489e6022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:98:dc:ed:c7:e3:c3:e8:14:c8:ac:53:d9:88:
c7:0e:72:75:95:b5:69:f8:94:fb:38:b8:9d:68:87:
25:4c:a5:cd:15:72:94:75:15:da:f2:74:bf:26:f0:
99:8f:39:77:70:b1:24:be:43:37:67:9f:21:fa:66:
c6:ea:95:2b:64:a8:28:0d:52:e1:91:94:61:67:8f:
d4:f1:63:26:42:38:af:83:e7:9a:9b:2e:ef:2a:90:
66:69:89:d2:98:1c:38:29:bf:2a:50:37:23:03:53:
d5:cf:d3:79:51:40:ff:f4:cb:cb:9e:34:a6:1f:58:
06:21:1d:5a:c8:62:a5:53:eb:d5:f4:1d:d4:47:0d:
4c:1e:30:1d:73:94:8e:95:dc:2c:35:ee:bf:77:26:
f5:4e:0d:a0:34:78:1a:fa:ea:aa:72:aa:b6:b0:0b:
85:49:d2:17:23:5f:0f:bc:11:fb:4c:6e:5b:d4:07:
03:c5:da:d6:d9:5f:fb:68:40:7e:ad:03:8d:0e:83:
5b:92:80:e9:5a:bb:7d:4f:79:1d:3c:1c:c4:91:a3:
c3:f8:3f:93:47:80:b1:f2:34:48:2c:c7:d9:8a:db:
5a:a0:15:28:11:95:5f:c1:91:1d:3a:de:ff:be:97:
1a:d0:fd:60:18:a2:1a:a6:22:16:4b:0c:bd:4d:60:
b0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:E1:9F:E0:8A:10:8F:A0:91:95:14:40:62:01:35:FD:48:9E:60:22
X509v3 Authority Key Identifier:
keyid:23:27:1D:E3:E0:10:59:AB:E6:D1:A5:93:C4:A2:4F:F6:E1:88:D6:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iycd4-AQWavm0aWTxKJP9uGI1k8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3f7a06-2b45-4a0b-ba6c-958c376506ed/1/Iycd4-AQWavm0aWTxKJP9uGI1k8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6c:e0:a4:fc:3a:ee:21:e9:5f:f2:bc:bb:26:03:81:09:ad:
36:01:a5:2a:7c:6f:18:0c:da:35:de:54:9d:9a:cc:75:bb:47:
a6:cd:e4:d4:a9:c0:e1:7e:56:29:d4:c5:99:cc:82:1a:10:ae:
2d:54:60:4b:80:f6:3b:a6:68:91:d2:8d:3f:f7:ac:cd:8b:97:
45:4a:f1:0f:1e:c3:1e:45:b1:0c:d4:71:b4:21:80:13:7a:32:
1b:10:85:78:01:10:f7:10:3e:bf:4f:92:68:72:ea:46:ae:b1:
11:4a:f3:84:6f:12:42:d4:05:5a:03:e8:40:23:73:bb:a5:5e:
fc:3b:30:80:5e:42:7e:17:1b:95:15:7f:74:8c:54:66:6e:0a:
53:00:91:d9:fd:a5:8f:ef:12:18:3a:29:e1:6f:8e:47:fd:58:
e5:ad:8c:be:8b:ad:d5:f7:6f:30:b7:41:99:f7:9c:eb:2c:c3:
4b:4f:b2:28:34:32:98:fb:31:09:ba:5d:64:ce:15:e4:69:e8:
1b:d3:d2:a0:25:4b:21:c8:19:bd:0b:51:d6:c3:5b:1c:3b:09:
25:8f:a2:a2:59:2f:af:d4:7d:89:88:4f:52:35:c7:bf:eb:85:
78:0e:34:16:c4:50:da:a2:38:b2:fe:c0:5e:d9:b2:65:b4:55:
b6:29:4a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:03 2025 by rpki-client