Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: tpRhVbDpB0lWQDPyHktAaQHSM3PNdO0tzT4HzOapsC4=
Subject key identifier: 26:9D:CA:61:1E:CF:13:3F:D0:47:E3:76:E2:9E:16:DA:54:5D:A0:54
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 0199FBEBE8AC2F8495D7BEC5DB6DF3E6089B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 11CE
Signing time: Sun 19 Oct 2025 10:02:45 +0000
Manifest this update: Sun 19 Oct 2025 10:02:45 +0000
Manifest next update: Mon 20 Oct 2025 10:02:45 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: VJuPnI1nIqXcwRbVYpBoat5UVYNJhLc4KDf4WF3cN3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:e8:ac:2f:84:95:d7:be:c5:db:6d:f3:e6:08:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Oct 19 10:02:45 2025 GMT
Not After : Oct 20 10:02:45 2025 GMT
Subject: CN=269dca611ecf133fd047e376e29e16da545da054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:da:5c:58:f5:e0:3b:80:bb:83:13:78:bb:b8:
f1:df:82:19:d4:7f:d9:17:44:53:31:c8:94:4b:46:
62:3e:b3:01:da:a0:48:40:ba:04:d7:f3:8f:9a:8b:
91:f2:63:f5:32:a8:6e:53:d8:0f:f3:f1:ab:49:b5:
66:83:c2:60:bb:64:6d:36:9c:5d:33:e3:2b:84:ff:
58:aa:1d:2e:fd:d7:7e:87:97:a8:c1:3f:82:32:6a:
06:58:53:26:37:32:2f:eb:a9:08:ce:e5:13:9f:e9:
13:df:09:90:06:4a:77:40:8d:c5:04:e5:09:ea:b7:
3f:7f:e0:b1:80:ea:82:fc:64:44:1a:66:85:38:7b:
80:08:bf:03:26:f8:c5:b3:07:8a:03:50:27:02:87:
16:ba:c2:1f:0c:2f:47:4a:58:12:04:69:31:85:51:
37:bd:9e:5d:84:a4:be:b5:a7:a7:c3:df:5e:d3:d1:
e6:09:97:68:03:1f:0a:03:80:43:6f:39:24:a9:6b:
9a:ab:16:99:95:cc:a2:1c:6e:c2:28:ba:bb:26:3c:
fb:9b:ac:f5:30:f6:6f:41:51:1a:92:2b:bb:5e:92:
e4:b2:0a:f8:85:84:93:35:84:83:78:30:45:48:64:
4b:79:23:d1:7e:f8:57:91:fe:5c:0f:e4:8f:61:02:
34:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:9D:CA:61:1E:CF:13:3F:D0:47:E3:76:E2:9E:16:DA:54:5D:A0:54
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:2e:d5:50:2d:cd:62:1d:d7:b4:98:ce:d5:32:a4:0a:5e:2b:
a4:9b:56:bd:8c:67:8c:53:97:cc:35:95:7a:67:82:61:d8:0e:
60:2a:a7:f1:3f:0c:e6:0d:3d:86:3c:9c:80:17:47:bc:77:20:
41:b2:44:8a:b4:bf:18:90:fd:6b:ea:42:94:5b:68:ff:87:f1:
79:91:58:ef:f7:9d:74:43:ac:d7:9d:90:54:7f:dd:9d:47:94:
4d:1e:54:cb:6b:48:cd:3f:0b:35:68:0b:9d:db:75:b1:78:e8:
6c:7a:1a:12:57:80:0a:d4:48:c3:48:58:ba:1c:15:16:fc:23:
33:cf:97:84:4d:a3:ba:9f:ce:22:fb:1b:94:8e:26:c9:6f:e6:
8b:de:8a:f3:b2:1c:84:20:84:47:ce:9d:03:b1:d0:23:11:42:
bc:9e:e3:de:1c:4e:e1:2c:1b:74:a2:ad:f7:3c:8b:27:70:9f:
b8:89:ff:95:03:7d:41:4f:6c:5d:f6:95:9b:18:aa:85:17:a0:
62:94:12:91:b9:fb:6b:03:f5:e4:c2:44:a4:7a:09:db:26:31:
33:3f:c9:96:51:52:9a:22:4b:c2:0e:eb:6c:8f:f0:88:f4:f8:
dc:fe:b5:78:8b:6f:76:64:30:20:56:12:06:80:9f:23:cf:23:
5e:e4:a3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:14:25 2025 by rpki-client