Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
File: IlVxaqH0w8EChxihwzHiKzOerXw.mft (raw, json)
Hash identifier: DZqz+qwMsqYd86Ky4p/lS9SsTtQwVnkNXL1x7Knzzxg=
Subject key identifier: FD:8C:32:C7:C9:85:C8:E7:6E:B8:65:D6:CE:37:F0:B3:5A:5B:98:C4
Authority key identifier: 22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
Certificate issuer: /CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Certificate serial: 0199FCC60A4C77594C3849579041262C9DC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
Manifest number: 1363
Signing time: Sun 19 Oct 2025 14:01:00 +0000
Manifest this update: Sun 19 Oct 2025 14:01:00 +0000
Manifest next update: Mon 20 Oct 2025 14:01:00 +0000
Files and hashes: 1: IlVxaqH0w8EChxihwzHiKzOerXw.crl (hash: wejHgG4/le63Ib9HGN8spbbQAEMC+wjFN/iA05SsoI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:0a:4c:77:59:4c:38:49:57:90:41:26:2c:9d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2255716aa1f4c3c1028718a1c331e22b339ead7c
Validity
Not Before: Oct 19 14:01:00 2025 GMT
Not After : Oct 20 14:01:00 2025 GMT
Subject: CN=fd8c32c7c985c8e76eb865d6ce37f0b35a5b98c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:93:04:6b:f5:bb:c2:ec:d9:f1:b3:94:5c:93:
66:3f:84:d4:e9:a1:b2:e0:07:99:1b:b0:fc:2a:d3:
97:18:19:ca:6f:ae:86:e6:76:39:05:d4:42:ea:71:
b8:ef:9c:b4:8e:3e:cf:a4:3a:03:ff:bc:9e:dd:28:
3f:a7:0d:74:86:a6:85:7c:51:3f:fb:65:f2:43:00:
56:cf:4b:71:85:41:e7:78:4a:0c:5e:ea:4e:d8:1a:
ce:41:11:21:2d:de:2e:a9:71:4c:f6:b7:21:66:ef:
5f:1d:1f:11:55:a7:83:2b:d8:e2:04:f8:27:fd:7b:
2a:ab:8d:29:88:aa:1d:21:39:32:41:5b:94:3b:64:
6c:21:36:d7:52:ff:b4:85:a7:57:66:91:5a:cf:3f:
1b:f9:7d:cb:0b:68:25:6a:c3:f6:98:45:68:ef:61:
4c:a9:34:96:c9:63:01:9c:fa:29:26:4d:6d:75:0d:
64:e9:02:5d:97:78:e4:fb:a6:e3:19:f7:30:79:59:
50:76:05:cc:29:10:b1:46:8c:66:46:86:c4:d2:16:
51:61:74:bf:8a:1f:08:1e:f2:dc:5a:05:d2:6a:28:
d8:dd:a7:3f:da:50:aa:63:8c:ab:61:3c:f6:58:47:
5f:45:97:06:e7:3b:6b:ed:91:49:c6:31:9c:15:c3:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8C:32:C7:C9:85:C8:E7:6E:B8:65:D6:CE:37:F0:B3:5A:5B:98:C4
X509v3 Authority Key Identifier:
keyid:22:55:71:6A:A1:F4:C3:C1:02:87:18:A1:C3:31:E2:2B:33:9E:AD:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IlVxaqH0w8EChxihwzHiKzOerXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cbf67b-a65a-42a3-8908-07369e14cade/1/IlVxaqH0w8EChxihwzHiKzOerXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:13:26:53:9c:b0:78:c0:0f:95:90:a3:e9:ce:e3:ee:b0:d0:
6b:4b:57:23:94:0d:95:cf:38:86:3c:13:01:7c:69:cf:c2:d5:
a5:0e:a9:01:f4:ae:44:48:98:1c:d4:e1:f0:3c:ab:7e:c9:16:
4c:b6:6c:7c:1e:4d:37:4f:8b:9e:90:5c:ec:b4:14:0c:c3:22:
a0:0a:72:7d:f0:ae:f7:9f:0a:67:76:12:75:7f:ca:1c:28:14:
b3:a8:2b:f2:72:5e:e1:38:92:8b:ec:5d:89:a6:47:33:35:1e:
1c:13:7a:ba:8f:5b:38:7f:20:12:35:0a:31:b3:ae:53:7e:70:
e7:97:26:1d:b5:18:6f:fb:ce:e3:ee:bc:20:c4:ef:dc:45:43:
65:25:82:89:bf:e1:fa:cd:5a:8a:04:2a:25:aa:1b:8b:3b:f0:
c8:19:84:b5:d9:42:cd:ca:19:b3:23:23:ea:da:43:19:48:45:
80:e8:0c:e6:6b:69:08:e0:d8:d6:80:25:e7:81:7f:9c:8b:02:
63:7a:c1:15:35:f9:c8:f1:1e:5a:05:c6:64:85:ad:0f:93:b9:
48:75:7a:7e:91:f6:09:ea:3b:6e:52:89:b9:c5:24:33:02:39:
26:9a:7b:eb:81:0a:d2:08:d6:8f:f1:c0:3a:90:77:a2:c8:59:
d1:1d:55:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 23:28:39 2025 by rpki-client