Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: g80AFbFZxhjjwg2y9GQSSArgjLomS64W23Xec2FTQkI=
Subject key identifier: 2D:B8:2C:F6:A8:51:E0:10:A7:88:A4:0A:39:95:66:65:13:59:26:D2
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 0199FD6AF8689DDF463355AA76DCA6371AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 13AA
Signing time: Sun 19 Oct 2025 17:01:09 +0000
Manifest this update: Sun 19 Oct 2025 17:01:09 +0000
Manifest next update: Mon 20 Oct 2025 17:01:09 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: qQiMSFSgpzjR3adnBxWxtC6GenKFOMdEY5IB4TqN86o=)
2: ICR_37PsCBP-8LWQQc9BQZWkbu8.roa (hash: qbGaCfhiVfxLumC4av9v0LJhrwsxTdIAQc0ayhncJww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f8:68:9d:df:46:33:55:aa:76:dc:a6:37:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Oct 19 17:01:09 2025 GMT
Not After : Oct 20 17:01:09 2025 GMT
Subject: CN=2db82cf6a851e010a788a40a39956665135926d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:99:dd:79:7b:04:f3:59:35:fc:26:be:a3:76:
16:c0:09:3c:52:d7:bd:81:40:75:c4:c0:fc:c6:80:
99:e6:0f:70:86:59:35:10:97:6a:28:2f:99:9f:94:
89:ef:ca:e0:9e:dd:9b:80:7f:8c:27:c6:6c:37:d0:
b7:fa:36:64:75:cb:42:ef:34:a2:1a:ec:f2:49:cf:
b8:9f:c1:b7:4a:3e:cc:f5:74:13:2d:4d:9f:8b:b7:
c3:65:bd:00:ad:e5:6b:63:53:3f:1b:32:65:d1:dc:
00:28:9f:72:7b:9c:c3:76:f2:df:6c:98:6e:99:01:
8e:d9:d9:de:3f:61:d8:fe:1a:0d:49:15:6d:ea:a8:
70:9a:b4:03:ca:ba:78:98:64:88:d3:71:45:ef:e3:
ff:bc:96:03:cb:73:d8:8b:64:5c:19:c5:1f:13:05:
89:55:81:a8:81:66:28:3e:de:c0:35:36:bc:3c:b2:
ec:58:4b:d2:00:37:99:c3:de:d2:53:8c:3b:0d:1d:
7f:ec:42:cc:2b:6a:85:19:5b:ec:fc:2b:ca:5a:a6:
ac:87:8e:41:82:10:e1:75:97:21:fd:ca:86:39:fb:
ff:7f:b6:40:81:47:67:8b:42:3c:45:66:17:fb:58:
50:a6:9a:ad:97:39:13:15:fb:bd:3a:c4:50:6a:4f:
db:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B8:2C:F6:A8:51:E0:10:A7:88:A4:0A:39:95:66:65:13:59:26:D2
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2c:a1:ad:a9:4f:09:5e:f0:d4:e8:46:f3:d3:5f:01:df:43:
74:5d:f7:03:a2:29:20:8d:22:9b:e6:4c:5c:8d:0c:1a:a6:3d:
6e:3a:37:26:8e:df:24:cf:f5:70:05:31:71:ee:dd:88:50:65:
7e:ff:2d:f4:9c:34:4a:c2:4e:51:66:12:93:1e:f9:8b:37:f0:
7f:f4:31:44:d6:fe:d2:7d:5f:6f:12:4d:6c:97:56:ac:5e:46:
f4:cd:86:e9:1c:dd:20:ad:04:94:4b:12:33:01:a6:7f:37:6d:
1f:19:20:93:71:fa:fd:83:df:c3:53:96:75:f6:12:be:1a:fe:
ad:e4:ca:c1:1c:57:0a:de:6d:aa:9c:dc:04:cf:21:63:22:fa:
94:7f:9f:8b:b2:b4:b2:af:76:c0:3e:a1:f1:33:30:34:80:8c:
c5:d8:1a:5a:5d:73:b4:c9:23:cf:3f:2b:43:c8:33:cd:12:0d:
26:d9:77:b4:31:30:b8:12:f2:3e:b6:91:a5:61:6a:7c:87:e3:
3b:b1:23:bb:5f:45:59:f5:10:be:6d:1d:49:0a:48:8c:b0:c1:
6e:17:9d:91:a5:b9:99:c9:06:bd:9b:ea:de:d5:9b:80:e6:93:
6f:9a:a7:40:bc:59:b7:6e:af:e5:36:df:bb:67:c2:c1:1b:2b:
5a:5d:df:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:03 2025 by rpki-client