Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: qC4e031pYU8v26eaYXtmVreSPON9mULXMTh6OLOlclE=
Subject key identifier: DB:C1:51:AA:CC:68:0B:58:5D:84:5D:01:AE:4E:A1:A7:19:58:20:97
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 0199FEB4BB3A1D483BEA85F980B471A2AAA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0C2A
Signing time: Sun 19 Oct 2025 23:01:21 +0000
Manifest this update: Sun 19 Oct 2025 23:01:21 +0000
Manifest next update: Mon 20 Oct 2025 23:01:21 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: RBjElvdAjsiibKs/N41sI4y6m+l8+pxJj4eGU5e7qxE=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:b4:bb:3a:1d:48:3b:ea:85:f9:80:b4:71:a2:aa:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Oct 19 23:01:21 2025 GMT
Not After : Oct 20 23:01:21 2025 GMT
Subject: CN=dbc151aacc680b585d845d01ae4ea1a719582097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:9f:6b:a8:29:26:31:03:1b:a6:4f:e4:43:
a7:80:e3:c5:7d:f2:3b:a4:54:7f:3f:78:bc:93:7b:
a4:ef:84:bf:61:de:f9:32:0e:a3:25:29:1f:a1:f0:
ca:c4:71:8a:3e:3a:6b:fc:07:30:d5:72:db:28:f3:
e3:c6:e4:c9:1e:8a:81:9d:dd:28:f9:86:da:a6:62:
df:85:ca:96:bc:5a:a5:b9:d8:51:c1:cf:21:eb:f3:
d2:b4:28:29:3a:0e:ae:94:2c:40:b0:58:5e:f4:7d:
b4:97:5c:44:92:62:61:71:52:f9:fe:89:09:2f:c6:
02:8b:e1:24:c9:0f:12:4e:0b:53:dc:27:4d:e5:98:
f6:5f:ff:6a:a7:a6:f4:71:d8:8e:0a:8d:94:20:02:
5e:bf:6b:4f:b8:24:59:a5:86:45:de:05:4e:2f:c3:
47:b8:fa:b5:f7:91:c1:23:fc:0b:96:3a:09:89:45:
53:dd:1c:20:38:1b:31:a2:d2:bd:c4:7c:4b:cf:d3:
1e:6e:64:ad:d9:22:51:be:43:75:7d:a7:2a:e3:ea:
4e:eb:74:12:7e:67:ad:25:1b:cc:b4:60:17:ed:0d:
66:b6:72:f8:a5:30:1d:71:9c:e4:01:12:69:80:dd:
fe:98:9d:a2:5b:e7:a3:fd:41:df:67:74:1f:8e:1a:
81:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C1:51:AA:CC:68:0B:58:5D:84:5D:01:AE:4E:A1:A7:19:58:20:97
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:81:88:32:a5:5c:dc:5d:6a:7d:51:5b:b4:46:7b:c9:48:36:
8b:ff:61:a7:87:4d:9a:a6:ff:b1:7e:62:de:fb:3b:f6:f1:5e:
4d:7c:de:a5:28:3b:9b:ea:62:b2:f1:78:41:ef:db:37:2b:1e:
1d:1a:c9:08:9f:8b:66:67:53:dc:71:34:e8:b6:c9:6f:47:ee:
79:4f:9d:ae:c3:09:17:09:2c:0c:ca:a3:9f:6a:e3:ce:5f:0f:
be:76:f7:28:84:e0:24:5f:63:c9:6b:b7:81:cc:dd:6b:53:3a:
22:04:11:26:89:2a:15:c9:2c:09:5e:58:e7:9b:5a:ff:1a:2d:
5d:f5:60:7a:3c:f9:9a:81:c1:ea:f5:d9:76:c5:97:93:27:5d:
4a:8b:61:2f:e3:39:9e:00:0d:a1:5e:f5:e6:c2:9d:74:9d:02:
80:c9:06:bb:a4:3f:d1:90:c4:05:d9:a4:11:ea:10:8f:91:27:
f0:68:47:a2:bd:31:a6:5a:85:ed:9d:16:be:b4:6d:67:5f:4f:
f2:10:d0:31:21:91:a4:4a:7b:58:50:cf:84:cd:e1:a1:1e:2f:
7b:9c:31:36:60:f4:11:ae:3e:e9:47:71:a8:56:fa:b5:a5:fc:
26:5e:30:06:e2:a4:91:13:78:0c:2a:69:cc:0e:1e:96:f6:22:
23:1a:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:59:25 2025 by rpki-client