Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: 64Tx6LO23+YQuUCsZIt2BYpzqxxA6kwxzd8oQPI+esI=
Subject key identifier: B8:A1:A8:BB:64:AC:98:0B:A7:46:75:D7:A3:C3:1C:22:70:FB:30:56
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 0199FD3411B7BDAE37D5C68769C2D70913CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 13C7
Signing time: Sun 19 Oct 2025 16:01:11 +0000
Manifest this update: Sun 19 Oct 2025 16:01:11 +0000
Manifest next update: Mon 20 Oct 2025 16:01:11 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: PBH4WRSIn4NpEF+yh919YzY2OpC7WtplCLFtoPneOis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:11:b7:bd:ae:37:d5:c6:87:69:c2:d7:09:13:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Oct 19 16:01:11 2025 GMT
Not After : Oct 20 16:01:11 2025 GMT
Subject: CN=b8a1a8bb64ac980ba74675d7a3c31c2270fb3056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:88:57:5b:ef:af:c5:a4:fb:c0:7f:2f:4d:
02:9d:a7:b2:65:17:72:d6:b4:99:f2:c4:a5:b7:40:
a5:4c:a4:dd:80:1c:e5:13:18:a2:bd:55:c6:b7:c9:
c8:4f:72:35:13:bc:09:68:db:81:04:a1:a2:56:f4:
80:b2:d5:ec:fc:3f:31:3e:52:16:29:cb:cb:01:1e:
fa:d5:fa:7b:d5:dc:d0:35:65:6c:48:63:16:7d:a6:
00:50:04:23:96:a1:ed:d1:8f:66:99:f0:44:78:35:
1d:94:ac:c4:51:9a:48:e4:d0:88:92:57:3a:93:89:
5d:ce:29:eb:7a:32:a6:33:2e:93:73:70:51:73:69:
25:b7:46:a3:63:d8:42:de:8a:5b:f9:29:f3:83:38:
38:12:ae:7e:a1:df:b4:de:a6:c8:72:a4:32:59:62:
3d:fe:26:a3:40:37:15:4a:f9:90:10:58:0d:9b:ac:
ee:d1:01:64:0f:13:fa:3b:7d:fb:3e:c8:35:14:f5:
cf:ab:9d:20:b1:37:59:6c:c9:e2:6c:05:65:bc:80:
02:6e:bb:8f:49:30:cf:9f:ad:da:b3:44:00:00:88:
8d:6c:e5:07:39:e0:7f:a5:48:1d:75:88:e0:33:fb:
c9:52:f1:df:11:25:87:8b:1d:7d:94:1b:bb:2c:0f:
98:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A1:A8:BB:64:AC:98:0B:A7:46:75:D7:A3:C3:1C:22:70:FB:30:56
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:63:45:96:d9:7d:08:22:ff:a3:35:2d:cf:af:f5:ee:16:92:
ed:cc:af:f4:9d:6e:c6:10:d9:73:a8:90:22:a7:e2:18:47:bd:
01:bc:1a:de:f2:08:69:da:ce:5e:f2:4f:5b:00:26:08:1e:6d:
8d:ef:ff:76:62:83:53:77:be:45:47:bd:15:bf:81:1a:ed:bb:
31:1d:2d:40:71:b2:3f:85:5f:0a:98:d6:1e:f4:04:68:0e:cd:
f7:b3:72:6e:c4:ba:ae:ef:22:8f:84:64:39:24:4a:3d:6e:8f:
34:90:10:e4:a3:b8:dd:5c:20:06:7e:00:00:73:d8:e6:c9:7c:
0e:0d:2a:6d:18:1a:a4:d5:85:01:78:3c:a7:ff:59:36:74:55:
ee:57:8f:f5:4b:8c:63:f6:da:93:30:a2:48:89:77:22:c8:02:
ca:c6:18:e7:14:a3:ae:7e:cb:2d:2d:55:5c:1d:68:10:9e:22:
06:9b:00:70:ea:58:79:69:53:88:1a:47:03:0e:72:9a:1b:a7:
d7:89:d6:ee:ca:4f:01:82:22:41:6d:12:86:2c:34:7c:fa:dd:
26:e4:d0:30:eb:bd:20:99:9f:d1:ce:9e:91:bb:de:ff:d1:1a:
97:8a:b2:9d:cc:25:9e:be:63:60:4a:d5:c9:74:e3:92:f7:75:
a9:2a:b3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:54:41 2025 by rpki-client