Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
File: i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft (raw, json)
Hash identifier: xzLKP5WWP/uFPX5xfttpvmszQfmQcYkIpngfPyokdUY=
Subject key identifier: FC:95:B2:77:F9:3A:9C:A6:05:6A:19:2E:1E:4E:45:58:03:2C:55:CE
Authority key identifier: 8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
Certificate issuer: /CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Certificate serial: 0199FB45C2F62F9464C666EF2B779980A281
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
Manifest number: 02E3
Signing time: Sun 19 Oct 2025 07:01:17 +0000
Manifest this update: Sun 19 Oct 2025 07:01:17 +0000
Manifest next update: Mon 20 Oct 2025 07:01:17 +0000
Files and hashes: 1: i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl (hash: ipnhEfaYazUxSFswwcX+wlLeUmog5N1I4g/xi4wYXg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:c2:f6:2f:94:64:c6:66:ef:2b:77:99:80:a2:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69149881976ee273c511043e580b7d1d1ba7c4
Validity
Not Before: Oct 19 07:01:17 2025 GMT
Not After : Oct 20 07:01:17 2025 GMT
Subject: CN=fc95b277f93a9ca6056a192e1e4e4558032c55ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:5f:d4:91:a1:4d:2e:2f:e3:cf:9d:21:53:
e5:34:77:97:5f:04:a3:fb:11:b9:35:f7:37:50:6d:
10:63:e5:59:13:52:78:38:23:37:fc:77:5f:02:80:
66:4c:23:90:60:4c:1e:ea:00:10:3f:74:bc:d3:8a:
25:1e:04:84:9d:ae:57:1f:ca:3c:55:d4:5f:7e:4c:
bb:02:0b:c9:91:0e:77:f6:13:06:23:77:b6:c7:81:
53:b8:63:c3:c1:91:39:02:87:89:c6:d9:00:0a:eb:
a3:7e:f8:c0:d4:44:0d:28:6b:8d:d9:1e:ff:aa:64:
55:80:d5:86:b9:dc:d9:ae:d0:9b:bd:e1:bd:42:3f:
2a:20:71:ca:c8:2f:93:c7:9d:db:39:34:35:49:f2:
bc:a0:3c:6a:18:a6:5f:bd:86:dc:2d:4c:74:4c:17:
45:66:f2:01:7b:82:e5:3e:84:81:c0:f8:d8:64:b5:
b2:67:bc:f4:ee:31:5e:9d:a3:02:54:e0:5f:e4:dd:
a8:56:13:cc:8f:d7:56:9c:05:37:18:1e:60:d9:13:
d5:c3:d9:c5:6a:61:5e:d4:cb:2a:00:55:6c:c9:f3:
5c:f4:4c:9c:bd:33:55:41:99:7f:e4:64:df:8d:90:
fe:ed:17:6d:f3:42:f2:1b:23:69:f5:3e:f1:66:77:
b6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:95:B2:77:F9:3A:9C:A6:05:6A:19:2E:1E:4E:45:58:03:2C:55:CE
X509v3 Authority Key Identifier:
keyid:8B:69:14:98:81:97:6E:E2:73:C5:11:04:3E:58:0B:7D:1D:1B:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2kUmIGXbuJzxREEPlgLfR0bp8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/2923da-2f91-4ff1-b7ff-9620322e4f15/1/i2kUmIGXbuJzxREEPlgLfR0bp8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1b:a4:24:49:2c:f8:00:ce:a5:74:0c:cb:ad:8b:f1:37:4b:
48:41:79:68:10:a6:d3:ff:93:7c:4a:f0:d5:33:d6:7e:7a:85:
e3:87:f6:4f:cf:cc:25:91:7c:df:01:2a:19:61:db:bc:fb:43:
0a:89:88:94:75:e4:4c:38:62:7e:0e:83:5f:29:bb:71:dd:dc:
a9:2c:28:95:d4:3f:68:29:44:80:fe:22:0f:1f:8b:e0:af:3f:
98:e3:aa:1d:97:76:f2:eb:f0:0b:3f:da:24:18:b6:c3:2d:16:
4c:ff:55:7c:ef:c8:99:d5:be:c0:a1:0c:da:9a:b3:5d:49:7f:
e9:51:bb:74:05:c4:a4:fe:21:4f:0b:05:87:50:87:ba:7e:a3:
c2:d6:f6:c8:b7:f1:56:5c:d3:df:a3:0e:5d:eb:38:27:29:2b:
5e:15:22:d5:21:38:0e:34:57:79:e3:34:eb:0d:0e:8f:c9:02:
12:07:4f:24:e8:b7:88:39:62:30:7a:8e:70:d1:21:da:f0:db:
d1:d0:36:da:02:63:50:76:3e:c8:0d:b2:99:2f:1b:15:f7:4a:
6f:d8:a4:10:81:f8:85:2b:2e:0d:0d:e3:c2:bf:64:f9:e9:c3:
39:b9:c5:b0:9b:d5:8b:c1:e0:81:45:8b:2d:5a:20:33:11:cc:
d0:56:43:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:10:59 2025 by rpki-client