Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
File: 1IdkFNyZXRTt46AaMjtiuQb4PFc.mft (raw, json)
Hash identifier: 1ib+QjUOlYAwDFfPpOwk2lUXQB1h1o0SU3b9OJP8XCc=
Subject key identifier: C2:C0:2F:CB:75:4B:69:8E:9F:39:EE:82:F5:B9:AB:FB:DF:B2:8B:95
Authority key identifier: D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
Certificate issuer: /CN=d4876414dc995d14ede3a01a323b62b906f83c57
Certificate serial: 0199FC8FAFE0B5AAB26BB4272199ECF40D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
Manifest number: 0669
Signing time: Sun 19 Oct 2025 13:01:39 +0000
Manifest this update: Sun 19 Oct 2025 13:01:39 +0000
Manifest next update: Mon 20 Oct 2025 13:01:39 +0000
Files and hashes: 1: 1IdkFNyZXRTt46AaMjtiuQb4PFc.crl (hash: htgzoqt/eajZgK+KMy5j/Xo8jrEFWY+eiZskxg7xuM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:af:e0:b5:aa:b2:6b:b4:27:21:99:ec:f4:0d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4876414dc995d14ede3a01a323b62b906f83c57
Validity
Not Before: Oct 19 13:01:39 2025 GMT
Not After : Oct 20 13:01:39 2025 GMT
Subject: CN=c2c02fcb754b698e9f39ee82f5b9abfbdfb28b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:8c:3d:ec:d6:88:14:ca:35:51:71:59:72:91:
22:02:cb:ed:48:a7:61:03:07:59:a6:61:96:d7:88:
25:ce:5d:62:40:db:09:fa:9d:05:28:27:00:cc:2d:
39:ec:6f:63:bc:89:6f:db:05:66:12:5f:f5:3c:b1:
16:2b:0c:0c:7c:24:77:60:0c:f3:56:65:2f:0a:62:
cf:c0:ff:e0:78:4d:55:a1:a3:9d:4b:1c:b2:1d:b0:
80:5b:80:85:a2:1c:fd:77:fd:b4:b4:d7:42:3b:c7:
9e:46:43:d4:cf:66:db:4f:3f:1f:d4:c8:59:f9:e2:
e1:92:76:b3:c9:1d:72:3b:b4:bd:50:20:e9:3d:2f:
2a:eb:39:13:ad:7b:59:9d:cb:2c:40:a3:6d:54:ad:
07:b3:20:2f:5b:8b:e5:71:5e:98:98:f3:c6:03:fb:
8e:28:d2:a6:a7:65:21:09:09:5e:30:0b:1a:16:eb:
7c:50:82:4d:0c:7a:fe:35:57:86:df:c5:94:67:9f:
4c:63:df:cd:0a:28:13:00:6e:26:94:09:30:89:ae:
12:90:79:37:17:99:f7:df:34:27:69:00:24:1c:de:
00:a6:7f:ab:35:da:ae:5d:59:5f:91:9b:f0:4f:43:
9a:be:f0:d1:6b:69:c1:13:51:1b:72:2e:d0:b9:c0:
60:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:C0:2F:CB:75:4B:69:8E:9F:39:EE:82:F5:B9:AB:FB:DF:B2:8B:95
X509v3 Authority Key Identifier:
keyid:D4:87:64:14:DC:99:5D:14:ED:E3:A0:1A:32:3B:62:B9:06:F8:3C:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IdkFNyZXRTt46AaMjtiuQb4PFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/469a73-2cf3-4687-acc6-102c4ba8cc4b/1/1IdkFNyZXRTt46AaMjtiuQb4PFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:64:5c:15:d8:78:61:69:a8:35:ff:d9:8d:40:47:ec:52:17:
7c:3c:80:42:0e:8f:0b:8d:c9:71:fc:9c:7d:6a:9c:0c:9d:b5:
3f:d9:fd:53:f3:0d:19:75:b3:41:c3:4a:7c:5a:1f:7c:96:cc:
32:6e:e7:df:5a:cf:84:99:d4:87:74:82:7c:36:d4:7c:4d:9e:
a1:f5:44:97:fc:8c:b5:48:5f:20:08:1c:f2:3e:ae:78:c9:05:
95:c8:08:16:28:b5:1c:4d:44:90:77:da:20:93:a3:f2:14:d5:
48:64:8c:0f:6c:2e:98:dc:21:0d:4c:00:cf:1f:51:35:50:d7:
08:ee:7d:e8:36:7a:b6:19:eb:c7:c2:6f:8c:c7:6f:2f:91:64:
d7:ae:ce:f5:3c:03:90:36:dc:c9:95:8c:d4:9e:b6:a9:99:3a:
b1:89:f7:85:1f:04:52:5c:2a:3c:19:70:60:3c:6a:91:9f:e2:
33:89:f9:18:2b:34:47:5d:96:eb:6d:3a:c8:af:9c:e4:76:03:
a5:48:8e:4f:59:42:1d:e9:7e:c8:63:fd:26:ca:0c:c2:30:41:
19:a3:a4:8e:42:7f:12:73:7a:70:1f:42:41:4c:18:44:39:3a:
42:5d:47:26:28:21:a5:68:d7:96:64:fd:0d:49:7c:77:92:43:
65:2a:38:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:43 2025 by rpki-client