Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
File: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft (raw, json)
Hash identifier: PeRpR551BuKQgSZ89NtSWXOVIS9Q0T54aZAoFs9+1ek=
Subject key identifier: B2:A4:67:56:83:33:0C:A0:3A:23:70:EF:9F:58:78:91:51:CA:21:27
Authority key identifier: 21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
Certificate issuer: /CN=21ac38fe8105fb59a2cd257f519f858595840301
Certificate serial: 0199FC5844421602198680A2993FA36D0480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
Manifest number: 067E
Signing time: Sun 19 Oct 2025 12:01:06 +0000
Manifest this update: Sun 19 Oct 2025 12:01:06 +0000
Manifest next update: Mon 20 Oct 2025 12:01:06 +0000
Files and hashes: 1: Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl (hash: kB4X7kNr+q10s27xeGzltqYaEEBqnT3HirMdN/HcC/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:44:42:16:02:19:86:80:a2:99:3f:a3:6d:04:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ac38fe8105fb59a2cd257f519f858595840301
Validity
Not Before: Oct 19 12:01:06 2025 GMT
Not After : Oct 20 12:01:06 2025 GMT
Subject: CN=b2a4675683330ca03a2370ef9f58789151ca2127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b7:45:c7:b1:f6:24:d4:27:b1:ab:0c:db:23:
1a:e4:f7:06:cd:0c:a4:5a:f4:66:0f:98:c1:6a:c4:
b6:aa:6b:69:09:52:0e:79:09:89:77:f1:e9:09:6e:
9c:6d:cf:fc:e2:96:d2:fd:58:14:41:1a:bb:4a:5a:
eb:e5:6e:e0:11:b1:6f:84:4d:3c:47:fb:db:6c:b9:
14:16:58:a0:7a:fe:35:6b:96:a5:62:e0:c6:64:95:
ab:15:62:62:e8:47:a7:51:fd:25:7b:13:0b:5d:8b:
56:3a:fb:41:5a:f0:fb:cf:25:e1:28:3e:55:72:39:
25:ed:18:d5:39:71:11:a9:9a:1b:28:11:fe:e3:25:
6b:83:c5:68:00:c2:71:85:dc:a7:9f:c5:b1:01:74:
9a:43:96:39:6c:36:d9:56:73:19:d8:65:0c:3a:4e:
92:24:8c:a2:90:ce:0d:24:3d:50:26:8f:fd:16:a5:
d6:88:82:b8:09:98:11:a8:a0:a4:58:29:fc:1b:4e:
b4:df:f0:7e:1a:2c:57:73:7f:f8:58:99:a5:27:0d:
a1:24:d2:89:ae:fb:33:ac:00:36:6d:8a:23:8a:34:
19:5b:45:b2:8d:c7:4a:0a:21:b3:3e:33:3d:51:76:
86:e5:27:58:24:20:32:27:4d:a1:98:47:d8:e3:2f:
6b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:67:56:83:33:0C:A0:3A:23:70:EF:9F:58:78:91:51:CA:21:27
X509v3 Authority Key Identifier:
keyid:21:AC:38:FE:81:05:FB:59:A2:CD:25:7F:51:9F:85:85:95:84:03:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/345c62-2e0a-4ce1-befb-0cf54cfa8da1/1/Iaw4_oEF-1mizSV_UZ-FhZWEAwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:85:ce:6d:81:bf:18:ac:f6:43:f8:8c:3b:8e:d2:87:36:38:
78:29:61:a6:f3:b8:0b:20:3a:bf:d4:64:cd:1e:69:02:00:6d:
3a:fb:60:8e:45:c3:0b:3f:37:5f:23:cc:1a:13:30:52:97:ec:
35:06:35:ec:09:b4:b6:d7:00:cb:3a:be:16:27:90:1d:d1:80:
30:3f:51:1c:f4:d9:aa:83:93:d6:2e:ee:90:e5:cb:3b:65:16:
2b:3c:bb:08:9d:19:6e:eb:3b:5a:bd:e0:08:07:ed:d0:6b:9b:
b0:7e:5f:19:4e:d9:f6:79:08:bd:82:03:58:53:9a:66:14:0f:
4a:a1:57:1f:94:b3:16:05:b2:a8:1a:0f:68:02:b7:c8:1d:ff:
37:48:c4:da:92:80:f6:fd:4d:58:a9:32:47:d7:f2:98:a4:08:
df:2b:aa:c7:80:8e:60:01:f9:d4:d2:d7:d7:57:4a:a2:27:0b:
cc:8e:43:d4:90:31:ad:d8:b8:2d:a2:04:ab:5f:87:c8:d3:a5:
b9:d0:75:e6:5f:66:ca:47:1b:e0:b1:fe:7d:c1:a4:16:bb:c9:
ba:94:d7:39:ed:17:05:c0:d8:71:f0:e1:ee:97:21:a0:79:d8:
a6:45:0c:8f:75:d2:31:2f:37:ff:be:12:6b:fc:3d:a8:c8:8d:
1c:4b:84:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:57 2025 by rpki-client