Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
File: iaWq49f3LuzoOWtBSSIIrdUhhDU.mft (raw, json)
Hash identifier: fe59ewUk5cca70fkffTgH2iCo+EJNkwwXs2Bp8HAuUA=
Subject key identifier: 6E:90:53:25:AB:60:91:05:AA:E6:F9:B6:28:7B:B3:D3:16:1D:95:FE
Authority key identifier: 89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
Certificate issuer: /CN=89a5aae3d7f72eece8396b41492208add5218435
Certificate serial: 0199FCC675308843128F1D1A6FFE7E46B836
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
Manifest number: 15D3
Signing time: Sun 19 Oct 2025 14:01:28 +0000
Manifest this update: Sun 19 Oct 2025 14:01:28 +0000
Manifest next update: Mon 20 Oct 2025 14:01:28 +0000
Files and hashes: 1: iaWq49f3LuzoOWtBSSIIrdUhhDU.crl (hash: WBORRT9Ce70Y34ljujLzYAk7rdCn4oZD/a3b/+f8FdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:75:30:88:43:12:8f:1d:1a:6f:fe:7e:46:b8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89a5aae3d7f72eece8396b41492208add5218435
Validity
Not Before: Oct 19 14:01:28 2025 GMT
Not After : Oct 20 14:01:28 2025 GMT
Subject: CN=6e905325ab609105aae6f9b6287bb3d3161d95fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:43:46:e0:c9:00:67:86:79:96:db:63:ef:
24:57:0d:43:57:d7:c4:2c:be:c1:39:08:52:37:2a:
e4:b2:35:50:b7:c4:53:f9:d7:df:79:8c:26:d7:52:
2b:61:c4:e1:70:64:c5:00:e3:01:6b:2d:38:a3:30:
69:fa:a9:27:81:6c:7b:e4:b3:8a:7d:42:27:c7:22:
ac:d1:2b:83:50:ed:d6:ff:b9:49:de:ad:ce:93:95:
71:57:14:66:60:92:db:dc:1d:17:5c:84:ae:0d:40:
08:1c:8d:1b:cf:15:36:55:7b:8a:8f:8c:21:4f:92:
64:7f:3d:3e:3c:fb:54:ec:af:d6:ca:4e:53:a4:3b:
42:48:ca:15:f3:b3:1f:f8:25:40:4d:b3:50:f8:16:
0c:9f:10:59:79:e8:81:ef:ef:40:de:ab:8a:f7:0c:
ec:d8:73:67:62:c3:95:c9:c5:5f:ec:76:af:70:9a:
33:50:92:a2:9b:78:63:b5:ff:6f:18:33:ab:5b:a2:
1f:7f:d5:d6:c9:3a:09:00:16:17:36:12:c4:56:5b:
81:21:e7:f5:84:b0:61:67:c3:71:94:37:0e:64:24:
ab:82:0e:44:9e:9f:25:cf:c4:5b:95:ae:a3:b4:b0:
1c:e9:c0:fc:9d:e4:5d:d9:2e:56:44:e3:2a:ff:cd:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:53:25:AB:60:91:05:AA:E6:F9:B6:28:7B:B3:D3:16:1D:95:FE
X509v3 Authority Key Identifier:
keyid:89:A5:AA:E3:D7:F7:2E:EC:E8:39:6B:41:49:22:08:AD:D5:21:84:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iaWq49f3LuzoOWtBSSIIrdUhhDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/9145cb-02bd-47e6-b04b-0871152a1aa3/1/iaWq49f3LuzoOWtBSSIIrdUhhDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:43:a3:f8:86:79:8f:24:c1:b7:f4:a4:1f:52:62:26:c3:9b:
6e:53:43:f2:61:17:cb:45:37:1f:03:41:b4:a2:a7:03:a7:91:
fc:89:f7:cd:98:33:48:64:d6:59:3b:7c:d4:3f:54:1a:0b:5d:
1d:a8:d6:25:0a:81:92:7c:94:c7:2b:8c:e2:a8:a6:87:2b:bc:
f6:39:97:a9:93:a5:78:3e:c4:f5:fa:fd:0a:33:08:49:02:6b:
71:c7:3f:c3:7b:3b:3f:7d:1d:41:49:5d:22:63:df:82:7a:6b:
b5:05:3d:ff:aa:c1:a0:9e:0b:a1:68:ef:b7:17:1a:f0:a4:06:
a6:43:13:b1:5b:05:8f:ed:e8:44:ce:13:5b:3e:8f:c6:46:08:
6b:c0:54:44:34:b8:a4:8d:54:4e:61:af:ca:e4:75:c8:0a:08:
4e:20:23:44:ee:29:dd:64:0c:f1:26:ce:83:fe:47:68:82:32:
58:40:02:47:33:31:b6:ea:ed:3f:e4:f9:a8:b3:dd:51:3c:2c:
4c:06:d1:ec:6f:61:35:8a:0a:40:6c:76:ce:d9:e6:fc:2b:16:
06:05:c3:0a:01:bb:eb:c0:d5:e7:58:58:ba:8f:f1:d2:7f:fb:
0c:77:43:41:32:31:97:46:35:46:88:48:4a:36:5b:b3:94:d1:
63:2d:21:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:37:43 2025 by rpki-client