Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
File: IxNmmEaTAQHlodA48EtTTaCLonY.mft (raw, json)
Hash identifier: Bxn87Tegxdi/GbwMq76MVK9kzGWu5KjP/tCyE7R5aX8=
Subject key identifier: BA:8A:41:A3:EF:03:59:4D:B7:F6:14:05:9E:66:E2:E3:65:32:72:32
Authority key identifier: 23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
Certificate issuer: /CN=2313669846930101e5a1d038f04b534da08ba276
Certificate serial: 0199FD346F0B9E9EC6D3D9B9015B6221CB5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
Manifest number: B2
Signing time: Sun 19 Oct 2025 16:01:35 +0000
Manifest this update: Sun 19 Oct 2025 16:01:35 +0000
Manifest next update: Mon 20 Oct 2025 16:01:35 +0000
Files and hashes: 1: IxNmmEaTAQHlodA48EtTTaCLonY.crl (hash: FATNH0aRMickLWaBPxKLkvz5SB6dApaywaLSf4X6Tvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:6f:0b:9e:9e:c6:d3:d9:b9:01:5b:62:21:cb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2313669846930101e5a1d038f04b534da08ba276
Validity
Not Before: Oct 19 16:01:35 2025 GMT
Not After : Oct 20 16:01:35 2025 GMT
Subject: CN=ba8a41a3ef03594db7f614059e66e2e365327232
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:26:1f:69:bd:be:01:c1:4d:32:d7:0e:de:a8:
c7:0d:a9:5b:0f:86:c6:c7:b0:17:c8:3f:5b:24:bf:
95:6b:fc:88:7f:ef:1b:3b:dd:90:6d:1c:3c:16:14:
62:cb:c2:ce:3d:2e:13:a4:35:d4:63:a0:03:f8:a2:
6a:74:bb:28:4f:18:c1:cb:78:07:0a:6c:e2:dc:af:
6c:bc:e3:20:c0:e5:d7:f6:b5:8c:c5:2f:33:37:a7:
68:af:a8:b1:c5:87:7d:55:b4:de:d8:f3:86:43:e2:
3a:3f:a4:68:c2:03:09:38:04:cf:eb:8d:50:56:b0:
a0:65:8b:d7:e3:d9:15:a2:77:e3:fa:71:3e:b9:34:
80:0f:01:ff:f7:e9:39:23:ca:5b:8a:e3:56:84:88:
17:6e:45:6a:40:b9:43:a0:5d:8a:af:f5:64:a4:e5:
8a:66:4a:43:a7:5f:d3:2d:8d:38:0d:1a:68:a9:b6:
d1:d6:ad:a7:09:f7:12:f3:bb:b8:32:eb:33:d2:25:
bb:03:32:25:4d:86:52:d8:11:aa:a3:d3:2c:71:b2:
9b:61:21:3d:af:a0:06:d2:9b:64:d9:e8:76:27:70:
ea:7d:c6:e2:c0:5d:a5:e3:34:da:6c:36:0c:3c:97:
3b:d5:d6:66:1c:0a:1f:97:90:97:dd:7c:cf:75:e3:
e3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8A:41:A3:EF:03:59:4D:B7:F6:14:05:9E:66:E2:E3:65:32:72:32
X509v3 Authority Key Identifier:
keyid:23:13:66:98:46:93:01:01:E5:A1:D0:38:F0:4B:53:4D:A0:8B:A2:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxNmmEaTAQHlodA48EtTTaCLonY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/934fc6-0724-4cd6-a417-eea9661381b4/1/IxNmmEaTAQHlodA48EtTTaCLonY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8a:a5:a0:a8:cf:cf:41:d5:e6:73:3b:34:69:02:4a:ef:3e:
53:88:10:47:b6:bd:d7:51:50:21:98:bd:88:d0:2a:b4:06:b7:
70:29:99:26:69:d0:38:a5:d5:2d:11:d5:5c:df:15:f0:9c:70:
57:cc:76:c7:01:9a:d1:2e:10:aa:e9:f2:b3:62:02:d7:d5:a9:
70:a5:3c:d0:6e:2d:15:af:64:8d:e0:e0:99:a6:4d:0a:8f:8d:
2d:52:5a:e2:9c:ed:fe:9c:e7:40:27:53:e3:23:9c:60:18:b1:
c7:c7:62:9d:b4:e2:e3:d6:c6:7f:13:e4:6a:32:c1:13:81:9a:
4a:61:ce:a5:16:2b:db:92:e2:7d:75:f5:c7:c6:ce:6e:15:dd:
db:50:e7:82:61:1c:88:67:c1:19:8b:f1:cc:f5:49:45:a1:ff:
43:75:54:fe:64:13:4c:55:5e:2f:f4:bf:2a:72:37:2e:97:35:
15:d0:17:fd:8c:79:4f:b9:f9:22:f3:9d:8b:ce:05:bc:c0:06:
d0:66:b6:66:81:52:0c:b0:0a:de:2c:0e:87:91:1c:f2:fb:5f:
a1:a4:40:04:65:5f:db:3b:a0:c4:5d:2e:2f:d9:01:25:54:6c:
89:55:d8:ad:39:21:22:10:00:f1:9b:ab:4e:c7:d5:7f:af:02:
25:61:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:27:45 2025 by rpki-client