Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
File: I9NN09IR5cLqe9L1J6E-HploIOw.mft (raw, json)
Hash identifier: +/ZopSUyj0FkkAh0AG7n23O1GPOvpklayNRI5Yk+v+s=
Subject key identifier: 7C:F8:C7:60:3F:AE:A5:5C:6A:65:3C:80:61:F5:0F:0F:75:96:3E:B2
Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Certificate serial: 0199FFC783119C57C20E0F478A5C865F9C6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
Manifest number: 10DE
Signing time: Mon 20 Oct 2025 04:01:29 +0000
Manifest this update: Mon 20 Oct 2025 04:01:29 +0000
Manifest next update: Tue 21 Oct 2025 04:01:29 +0000
Files and hashes: 1: I9NN09IR5cLqe9L1J6E-HploIOw.crl (hash: gmxWzIFb9u77aeQBxwGuymhfPCTHtaoVdvz02uxPhKg=)
2: LposyqjV73-zT4I-NkDoALIwk_k.roa (hash: OHnWiOPJ0+vl8RYqLw+3oMseEcMGYzbghowhWqyDjck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:83:11:9c:57:c2:0e:0f:47:8a:5c:86:5f:9c:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Validity
Not Before: Oct 20 04:01:29 2025 GMT
Not After : Oct 21 04:01:29 2025 GMT
Subject: CN=7cf8c7603faea55c6a653c8061f50f0f75963eb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1e:e3:0f:a1:b9:4a:df:5f:6e:c4:5e:b9:8d:
c3:c9:2b:fa:58:7e:d4:3b:b5:1a:09:ed:29:f2:8f:
4b:94:03:90:04:9f:d6:60:04:54:ac:01:ce:a4:e2:
f1:1c:26:b9:5d:a7:0e:51:6e:98:57:75:f3:08:7c:
4a:35:ad:2e:96:4b:8c:a1:ad:59:99:ca:d7:34:1a:
25:96:13:ac:fc:4a:9f:c1:77:95:c3:75:47:33:86:
ad:32:5d:eb:38:f5:4a:7c:ff:c9:38:d9:63:37:8a:
1c:3c:4a:bf:2b:be:27:c3:f4:12:87:7d:f7:d2:28:
aa:30:4e:8f:a9:30:01:7e:33:93:e6:be:60:84:45:
5c:f4:71:75:05:31:ae:27:fc:85:72:b5:42:72:5b:
2b:cb:59:c6:5f:11:50:da:ad:48:4b:ca:16:6d:f7:
ba:a5:30:4e:61:2d:ee:2f:98:90:3c:23:23:ad:d1:
7c:eb:76:7a:32:9f:de:c2:d7:48:39:a9:d6:85:8c:
8b:66:bb:f6:05:c8:96:f8:a8:6b:00:a1:45:f7:10:
e4:9c:1f:c2:bd:b8:7e:42:b3:07:d4:f1:c8:d4:a4:
61:22:95:77:4c:cf:56:58:6f:63:e9:75:51:60:e6:
a5:27:69:3c:26:bc:57:3f:94:4c:8e:39:cb:6c:9c:
f7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:F8:C7:60:3F:AE:A5:5C:6A:65:3C:80:61:F5:0F:0F:75:96:3E:B2
X509v3 Authority Key Identifier:
keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:81:2d:25:4b:0c:82:27:59:d7:94:72:e8:d1:de:a2:70:3b:
8e:5b:a5:2b:90:b7:16:7d:ff:5d:cf:53:98:22:7d:2d:d5:aa:
9e:68:5e:87:82:e7:1b:31:61:a3:55:4c:3f:d6:3c:11:e5:01:
46:ee:ce:b6:97:a2:0f:c1:76:f2:de:74:07:63:03:8e:c8:c9:
38:91:b4:13:13:a5:40:48:e8:e0:a0:78:44:1b:7e:ae:6e:d9:
ce:a8:47:65:7d:c3:79:a9:02:c2:0c:c2:11:31:ef:08:8f:c8:
6b:1c:7c:03:a3:51:9a:ca:30:18:1e:15:a4:be:42:be:0e:83:
2c:84:8c:6e:ae:f1:fc:95:6d:8c:fa:af:45:7f:0c:23:f5:97:
2b:b5:fa:dd:70:19:ba:32:b8:34:eb:a3:b6:9c:bb:c9:5c:36:
55:c6:6d:a5:b7:72:eb:6f:0a:22:0d:44:96:f0:e6:45:5a:5c:
62:11:69:e3:16:a5:e6:7b:49:ec:a1:2c:1a:c4:b1:da:ba:9e:
3a:94:ea:42:b5:f9:ac:9f:25:3c:76:39:d0:fd:b5:8b:20:13:
34:de:43:90:d4:fd:af:4e:ff:c7:5c:05:8d:92:b5:ea:c4:91:
ad:78:82:8c:e4:02:9b:09:b6:90:ea:0d:19:a9:ea:71:e5:40:
a8:14:96:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:48:17 2025 by rpki-client