Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
File: In6Vgaaaz4EZMg4TeYV6UTvSONs.mft (raw, json)
Hash identifier: 1MrdvS7g4flhevuzj7UArmQsggEAHl2pPf9usK4STBM=
Subject key identifier: FA:90:DB:F8:DF:8F:EE:7D:1F:75:4D:0B:57:46:E4:8E:DD:13:2A:18
Authority key identifier: 22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
Certificate issuer: /CN=227e9581a69acf8119320e1379857a513bd238db
Certificate serial: 0199FAD7F7B75D2B77850E1F2C77B63D415A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 05:01:21 +0000
Manifest this update: Sun 19 Oct 2025 05:01:21 +0000
Manifest next update: Mon 20 Oct 2025 05:01:21 +0000
Files and hashes: 1: In6Vgaaaz4EZMg4TeYV6UTvSONs.crl (hash: 4/IYePUx2lERqVcqSDak9FUMwGzW8MKCkaE2ns6N84A=)
2: eJ7uPrM8JY33NNPBvoVZtJuwfgo.roa (hash: 9nSK/KxQ/IGq4AdrWK6p4xTHdEJaVTMR/Qd+c8XyqcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:f7:b7:5d:2b:77:85:0e:1f:2c:77:b6:3d:41:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=227e9581a69acf8119320e1379857a513bd238db
Validity
Not Before: Oct 19 05:01:21 2025 GMT
Not After : Oct 20 05:01:21 2025 GMT
Subject: CN=fa90dbf8df8fee7d1f754d0b5746e48edd132a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:f0:b3:6b:e9:85:90:36:6f:1d:de:59:c0:
cd:9e:08:5e:ac:b0:d1:4f:5e:c2:a4:24:39:46:73:
d7:a0:56:02:a4:f9:d8:7d:6c:2e:d4:a9:90:b1:ca:
c4:97:20:69:9c:57:24:55:c3:42:02:99:fd:77:b2:
11:c4:3c:cf:64:df:fc:47:f2:71:c0:cd:a1:a1:c7:
e9:9c:1a:5d:d0:b2:64:b2:cb:5f:20:0c:fd:3d:0e:
01:50:8b:dd:54:c4:8c:f9:79:ff:6a:82:44:b7:2a:
c9:8f:92:05:22:48:8a:93:50:6a:80:94:40:69:a2:
40:0c:9c:e2:ab:44:fe:d1:a9:e7:60:ca:53:8d:a0:
2e:0d:8a:04:11:e0:fe:cc:da:ea:bf:49:4f:38:4d:
46:27:0e:ee:fc:85:9f:da:a2:9d:c3:ea:99:5a:c9:
6c:56:51:25:27:80:3a:a5:c8:a4:c0:da:4a:96:21:
af:ee:ee:ac:84:b1:83:55:57:b6:9e:58:da:22:69:
a9:87:c3:2d:3a:05:ac:b9:31:b1:d8:40:24:8e:24:
f1:1f:7c:0b:25:c2:7d:bb:ca:10:8f:68:91:12:a9:
0b:ec:57:21:9d:91:02:ec:5f:da:3c:e0:65:f3:6d:
21:48:e2:e1:31:02:f1:95:bc:49:6a:77:24:67:37:
b4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:90:DB:F8:DF:8F:EE:7D:1F:75:4D:0B:57:46:E4:8E:DD:13:2A:18
X509v3 Authority Key Identifier:
keyid:22:7E:95:81:A6:9A:CF:81:19:32:0E:13:79:85:7A:51:3B:D2:38:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/In6Vgaaaz4EZMg4TeYV6UTvSONs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2b83a1-748d-4f55-8b3b-d9df45dbbadf/1/In6Vgaaaz4EZMg4TeYV6UTvSONs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6c:06:24:b1:f8:ec:ff:d5:b0:5c:2b:cc:7c:7b:ef:7c:57:
31:bf:4a:4a:22:e5:08:8b:9f:d6:05:59:2d:bd:0c:e7:b7:14:
ac:3e:64:fe:2d:ca:fe:d0:4d:3a:4b:8b:df:c6:30:10:2a:c4:
0e:b3:b5:71:d9:ec:12:f1:63:fb:7b:a0:a1:18:88:d6:1e:46:
ff:b9:c9:6b:a1:8d:bd:5b:6c:7a:a2:50:02:7e:9d:20:f1:a9:
6c:7a:0d:98:a7:03:18:67:b1:3c:0b:9c:97:1c:da:dc:54:92:
7f:13:18:c7:ab:93:7f:fb:72:4b:36:23:14:0b:fa:8b:3a:55:
d5:b4:7e:93:28:66:23:eb:95:9f:1a:00:31:58:0a:7a:e6:8b:
ef:ca:8e:bc:76:41:cc:30:b4:2f:6b:df:f3:31:ec:07:d5:03:
83:19:47:87:ef:b5:90:26:05:44:6d:e1:38:74:32:79:5a:28:
0c:59:4d:16:d1:5e:e8:5d:04:88:d3:83:46:d8:57:98:1e:8e:
d7:df:d5:47:89:eb:09:2f:08:71:d3:db:00:1d:f4:0f:c4:72:
8f:45:73:a6:a8:8b:42:32:db:f5:56:78:ed:3c:10:a8:0e:49:
22:bd:47:c5:0d:9e:14:28:1f:a5:87:43:80:e9:6b:b7:ae:0e:
a7:5a:2d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:27:08 2025 by rpki-client