Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
File: I-VNMniWj26JlDXq-hVwlnX20DA.mft (raw, json)
Hash identifier: j4CocXNxLXX06AqJtO+AyW+Kx+83gyFqnHMnD6aonxw=
Subject key identifier: 0A:AD:09:9F:53:BE:E3:69:88:05:7E:0E:4B:E1:BD:17:E7:4F:EE:82
Authority key identifier: 23:E5:4D:32:78:96:8F:6E:89:94:35:EA:FA:15:70:96:75:F6:D0:30
Certificate issuer: /CN=23e54d3278968f6e899435eafa15709675f6d030
Certificate serial: 0199FAA132497546D7FF537883A9E47B6CC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
Manifest number: 1A
Signing time: Sun 19 Oct 2025 04:01:32 +0000
Manifest this update: Sun 19 Oct 2025 04:01:32 +0000
Manifest next update: Mon 20 Oct 2025 04:01:32 +0000
Files and hashes: 1: I-VNMniWj26JlDXq-hVwlnX20DA.crl (hash: Vbwk3/s/wy2YdRXWJbsEVTODc5+/MOSlUcBSjRkd+mk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:32:49:75:46:d7:ff:53:78:83:a9:e4:7b:6c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e54d3278968f6e899435eafa15709675f6d030
Validity
Not Before: Oct 19 04:01:32 2025 GMT
Not After : Oct 20 04:01:32 2025 GMT
Subject: CN=0aad099f53bee36988057e0e4be1bd17e74fee82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:d7:9f:6c:fb:e8:98:81:a2:35:7e:2c:fe:
75:5b:a8:74:dd:df:d3:92:0f:f7:5f:af:e1:8b:eb:
ab:5a:c5:59:f2:52:bf:86:90:41:df:84:12:d9:f9:
26:1f:40:bd:3c:c4:ed:15:75:83:7b:cd:e7:da:3b:
e7:f0:05:70:2c:9d:e2:a5:52:68:2b:3f:06:63:ad:
7f:5d:25:6f:50:b3:3d:38:cc:62:ad:e2:7d:4e:d7:
e8:7a:47:3f:28:b8:96:89:0d:a7:0f:81:e8:a4:41:
05:20:99:c3:4a:0c:44:61:03:13:41:39:e5:82:50:
32:8a:3b:44:dd:66:a5:8f:f1:08:d0:7f:1c:13:f3:
a4:77:1e:2b:b5:41:7e:64:b4:c0:ed:bc:36:ae:42:
3c:2a:ce:ee:36:04:08:81:48:9b:9e:c2:dc:92:0c:
0e:10:26:64:95:33:30:fd:de:3a:f7:b9:1b:11:bc:
dd:aa:c7:ec:17:91:98:b0:57:4e:c3:9f:f3:80:5f:
f4:cc:42:e5:6b:eb:e4:8f:b3:0d:0a:35:14:65:b7:
51:d1:20:e0:23:9e:19:a1:01:7d:24:b3:80:cc:58:
60:15:e9:a1:f8:51:d2:59:0e:be:65:04:eb:a7:15:
29:7d:10:9e:f5:a6:63:84:d0:54:5f:5c:bb:03:97:
b4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AD:09:9F:53:BE:E3:69:88:05:7E:0E:4B:E1:BD:17:E7:4F:EE:82
X509v3 Authority Key Identifier:
keyid:23:E5:4D:32:78:96:8F:6E:89:94:35:EA:FA:15:70:96:75:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-VNMniWj26JlDXq-hVwlnX20DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/893712-0e66-4cae-a6de-9a160c2788d1/1/I-VNMniWj26JlDXq-hVwlnX20DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:2b:df:b5:b2:a7:01:65:5c:59:60:7f:8e:02:d1:2c:4c:b9:
30:25:33:38:43:86:01:54:56:c1:8c:8f:7b:22:ec:18:37:25:
97:61:4b:3d:a4:0c:47:1a:4c:17:b9:69:be:16:7b:2d:d8:48:
1b:3a:ed:68:45:c0:a4:89:ab:c3:25:e4:72:2a:81:82:f4:02:
37:86:29:60:e7:07:ec:c4:72:fa:38:84:f3:b9:b7:a9:6c:68:
93:b1:3e:61:c1:df:a3:8b:a0:0b:56:56:24:01:b7:e4:1e:37:
ec:9d:d5:55:64:fd:26:d7:1c:1a:1a:c9:9c:8b:2f:54:5f:ba:
76:48:c4:e8:6a:20:25:4e:24:7e:f8:c4:1a:fc:3c:07:55:e1:
32:ee:34:c2:cd:6e:42:44:f3:0e:fb:6b:8e:46:61:97:2e:54:
c1:06:0b:a5:c3:48:95:ec:98:97:56:eb:b3:f8:48:33:1e:4e:
0f:ad:b5:83:a9:ce:c8:41:cd:7c:7b:f5:5a:84:1c:3a:f1:ad:
14:e4:09:c5:e8:81:54:ba:97:09:a5:39:2a:7c:70:f8:b4:9a:
1d:4a:af:e7:04:fc:73:d7:7c:2e:5e:b7:6e:c3:87:07:d6:f3:
fb:12:82:fb:3b:2e:2d:06:3a:54:37:57:81:88:05:92:57:33:
2f:8f:09:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 13:04:33 2025 by rpki-client