Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File: I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier: 4DQ5k5ltjGOa3qAdemLk2jV1BBMQhsgCo1dCqAf0Rds=
Subject key identifier: A9:78:82:05:B7:52:EC:57:28:3C:2C:EB:75:14:0F:C1:5A:8D:91:70
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer: /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial: 0199FEB4B7CB267C8A6ADC1E1E77721C38E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number: 0209
Signing time: Sun 19 Oct 2025 23:01:20 +0000
Manifest this update: Sun 19 Oct 2025 23:01:20 +0000
Manifest next update: Mon 20 Oct 2025 23:01:20 +0000
Files and hashes: 1: GLkcEMe4eneYkegJdDsN96p2G5w.roa (hash: a+Y+AIr4ILwMbtFOtGWppkOOeW987wrq4kOZaYCKOMI=)
2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: ja53fw2AGy3Sa6pkTKXlVwOQg5pa8xwcNW4klkyQLUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:b7:cb:26:7c:8a:6a:dc:1e:1e:77:72:1c:38:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Validity
Not Before: Oct 19 23:01:20 2025 GMT
Not After : Oct 20 23:01:20 2025 GMT
Subject: CN=a9788205b752ec57283c2ceb75140fc15a8d9170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f4:62:85:bf:30:93:81:bb:63:fc:74:39:e6:
85:ef:92:d4:cb:10:73:fb:42:a6:dd:6d:9f:16:ac:
cb:bb:ec:80:45:76:01:7d:be:32:53:99:2a:c4:da:
e6:b3:ae:8a:e1:1b:07:90:71:c8:e4:38:1a:1c:11:
4c:77:b7:fd:42:f9:fc:ce:fc:0a:7d:f1:0f:97:9d:
c9:9d:16:c1:91:1d:b0:e4:a9:88:d9:d2:6e:db:21:
13:c7:03:5c:af:c3:db:5d:ab:61:d9:0d:94:fa:62:
50:cd:86:57:dd:8f:5c:bc:ab:fc:cf:c2:c9:6e:b0:
6b:a9:e6:5d:e7:c6:27:76:41:25:7f:a2:45:c7:c0:
9e:69:88:a7:df:ae:81:f1:9a:2f:87:4a:72:81:74:
65:1c:95:59:5b:3b:69:ba:21:1d:b4:7f:78:93:53:
44:a3:ad:2c:3d:a0:9b:dc:48:b9:05:6a:04:fb:11:
de:82:77:56:52:25:b0:8c:98:e2:f6:19:7a:9f:fa:
26:a5:3d:d4:57:6a:ea:91:78:b2:17:f9:21:98:d0:
ce:3b:ae:be:a9:76:63:7d:97:4d:bb:c0:62:7c:07:
96:83:f9:e8:c5:eb:d7:1d:8c:33:55:3d:1f:c5:f5:
3d:8a:7a:49:23:19:75:00:a9:0b:8b:5c:db:c5:20:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:82:05:B7:52:EC:57:28:3C:2C:EB:75:14:0F:C1:5A:8D:91:70
X509v3 Authority Key Identifier:
keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:83:16:65:97:b4:dc:81:34:9c:6a:44:d7:52:ce:69:83:a6:
d3:a1:37:7b:2f:c3:51:8c:63:e6:11:9e:c7:a1:e0:9e:40:cb:
11:01:c2:64:44:b3:b3:95:69:65:12:48:0f:0d:ab:0b:15:2f:
a5:cd:8e:0e:6e:1c:88:cf:99:88:18:e0:55:cf:38:cf:35:ed:
66:81:81:ef:22:f5:31:2b:78:22:28:a8:f8:c7:c1:ea:96:60:
8b:f8:48:89:14:a8:c1:72:50:bd:06:66:6b:cd:20:6b:9e:0a:
b0:69:cd:95:90:3d:a5:8e:99:29:89:32:63:62:24:e2:49:6b:
aa:cd:b7:da:69:0c:07:9a:5b:4b:24:a5:a1:9a:14:ce:6a:59:
06:59:d3:0f:40:07:46:3b:35:54:16:d4:2b:87:63:0c:a5:f4:
ce:af:df:b3:d7:64:d0:b0:fb:58:e0:ab:32:3c:bf:8d:b8:ef:
23:db:0a:43:6b:39:10:08:8e:8b:27:63:b0:1f:0b:da:50:07:
d2:1e:34:a6:8d:ce:3c:ff:9c:89:0f:18:00:80:22:ca:37:5f:
8f:89:28:59:bf:13:e3:53:ba:1c:a0:ca:2d:73:7a:a6:9b:fe:
e8:dc:7f:0d:45:fe:81:06:54:eb:be:fa:7c:b4:a3:37:a4:0a:
6b:b4:7e:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 02:38:40 2025 by rpki-client