Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: wQmE7HOgjhMXxm+KOSDM/Fw+MSWSOMz7vutHCcMdqho=
Subject key identifier: 77:CA:29:43:56:08:7E:3C:68:73:B3:49:8D:D2:BC:2E:90:1C:C1:C6
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 0199FEEBB21C8A5DEAE85DFAA7C30EAAB0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 04D7
Signing time: Mon 20 Oct 2025 00:01:23 +0000
Manifest this update: Mon 20 Oct 2025 00:01:23 +0000
Manifest next update: Tue 21 Oct 2025 00:01:23 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: +MecEKw9k0RCUedpg4Jnofu1+e2Z9Fq+U0T9G7Y5Ujg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:eb:b2:1c:8a:5d:ea:e8:5d:fa:a7:c3:0e:aa:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Oct 20 00:01:23 2025 GMT
Not After : Oct 21 00:01:23 2025 GMT
Subject: CN=77ca294356087e3c6873b3498dd2bc2e901cc1c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e5:fe:b0:45:94:ac:5c:e2:9e:6e:f5:f6:88:
4f:6c:bd:49:62:8c:aa:19:16:85:e8:1b:95:ff:13:
6c:41:3f:c4:95:1a:bb:fa:a3:2c:42:5a:3c:ab:58:
49:1c:48:07:55:92:d3:37:2b:b0:4a:00:a5:9c:e7:
88:de:af:87:b7:4c:95:fb:08:25:7f:20:22:0b:e9:
3f:7f:bd:b6:1d:20:69:6b:4b:1e:5b:b6:40:75:c0:
86:78:ec:12:58:58:4e:7a:0a:d6:77:54:69:3b:52:
8f:91:53:87:9d:b1:93:c2:53:e1:48:71:38:bf:38:
16:33:d0:89:4a:66:3c:84:fe:9f:83:02:01:95:5b:
32:46:0e:20:d2:c0:51:c1:7e:1c:3d:54:9f:3e:80:
f7:c7:df:c4:de:ae:f7:31:f7:ee:17:8c:05:a9:f8:
39:17:85:47:86:ee:57:a1:4a:6f:c7:cf:57:fa:ca:
65:c4:49:a0:00:6c:78:14:04:0a:9b:8d:eb:96:fb:
91:fd:ce:4a:36:bb:7f:c7:c5:13:94:20:eb:bf:f5:
81:e5:cd:dc:7d:22:58:f2:9a:22:03:80:b3:b6:c0:
d6:cb:c9:07:34:9c:57:e1:4b:5d:f6:4d:57:a5:25:
08:e7:8a:29:ff:df:ee:b8:48:4e:50:31:86:c1:14:
19:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:29:43:56:08:7E:3C:68:73:B3:49:8D:D2:BC:2E:90:1C:C1:C6
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3b:bf:f9:66:22:25:72:f3:95:10:7e:35:00:f1:5e:16:82:
30:d9:ef:ed:31:64:a8:c9:bd:4d:f3:3d:d8:94:6c:a4:9a:e4:
8b:7f:2b:5e:87:f2:04:30:81:c0:66:c9:9a:9b:4d:38:1e:4c:
19:87:10:7d:2f:79:59:8e:1d:78:71:dc:92:0e:2b:03:da:ca:
fa:22:67:80:7b:9c:a4:49:23:d7:4c:b5:40:ce:e1:82:35:96:
88:92:5b:66:79:a8:2a:2a:43:3b:67:f0:d2:12:23:b5:7c:a5:
d4:18:da:19:dd:5a:42:ed:24:9a:ad:32:3b:f3:03:a7:e2:96:
ef:8c:01:58:68:6e:e1:e8:5a:6b:d5:b7:bf:5d:9e:70:78:da:
4c:3a:2d:d1:a9:0e:6f:0f:2d:03:e2:e2:b0:87:e1:fe:08:36:
59:66:a8:00:d5:d7:16:a7:f5:20:a7:d0:f3:cf:c9:3b:4c:ed:
27:63:d0:45:fa:f9:37:69:25:df:34:98:75:14:a4:4a:94:8f:
10:04:a6:15:94:c9:88:70:59:90:f1:5e:39:cf:3a:ea:62:c6:
e8:de:cb:e0:aa:17:8e:a6:9c:c3:03:de:6e:b4:84:8f:9d:10:
db:8f:b9:b1:8e:f3:6b:ab:e7:af:c2:0f:19:39:ea:48:82:f9:
9b:32:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 03:26:28 2025 by rpki-client