Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: LJ9dTlxpPX0gXtXYkG70b7YyVzn9HZ8d7eKPLcXHVbM=
Subject key identifier: 90:09:C2:81:DB:3F:FE:CA:14:DD:ED:3C:60:E7:2A:22:0F:D9:D7:19
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 019A725C496A9A08660F9B4418ECF3F4C6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 171C
Signing time: Tue 11 Nov 2025 10:00:41 +0000
Manifest this update: Tue 11 Nov 2025 10:00:41 +0000
Manifest next update: Wed 12 Nov 2025 10:00:41 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: jxomj7VSdoQd4QxncP3ESv+SHLa/d35aExHZrQ/je+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:49:6a:9a:08:66:0f:9b:44:18:ec:f3:f4:c6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Nov 11 10:00:41 2025 GMT
Not After : Nov 12 10:00:41 2025 GMT
Subject: CN=9009c281db3ffeca14dded3c60e72a220fd9d719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:e4:1b:f8:bd:49:f8:b6:76:10:d1:2e:a5:
65:88:11:f8:5d:ea:78:0f:ac:06:d8:1c:a0:f3:98:
e0:4a:5d:92:d0:8a:79:a1:2b:41:e8:90:b8:fd:ea:
74:28:75:50:fc:ea:83:fb:f6:f4:fd:5a:09:be:45:
49:2b:ca:34:74:df:04:90:42:f5:f1:95:ad:73:2d:
fe:90:25:d4:bb:01:95:2c:d3:2c:ff:ca:a0:ec:2e:
31:12:75:b1:cd:4f:51:07:9c:c5:b0:35:b5:5b:0c:
44:61:08:2c:a2:f5:46:e5:ed:19:ee:a3:35:f2:d9:
92:fe:75:ca:f8:cd:be:ed:29:97:ca:74:1a:4b:8e:
29:f7:b6:1e:ec:c1:dc:87:7c:da:84:7d:d5:45:7e:
40:a6:3a:7b:3f:3b:f5:f6:3d:87:6f:ca:26:5b:03:
17:72:1e:6c:08:b1:6f:a2:36:c4:22:01:35:ec:19:
ce:54:7a:da:17:72:da:fd:18:31:0f:dc:83:77:9e:
3f:96:14:a5:52:5d:f0:3a:e2:9b:e6:08:32:05:a2:
e6:82:85:37:24:6d:4c:b8:13:d1:f5:fc:c3:f0:fe:
34:42:1b:d2:fb:22:a2:ee:bc:de:70:c2:81:fc:aa:
5a:96:f3:c6:48:72:b0:8e:53:9c:3c:b6:9a:35:e5:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:09:C2:81:DB:3F:FE:CA:14:DD:ED:3C:60:E7:2A:22:0F:D9:D7:19
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3a:9f:09:42:33:75:c2:5a:2b:84:47:76:af:28:49:a8:58:
c1:9d:11:d0:4b:1e:d1:0b:cd:9c:44:8b:5e:01:42:a3:c9:ef:
cc:18:37:2e:e8:6f:ac:d4:a3:10:9e:6a:ae:58:72:dc:f3:a2:
4d:7d:75:90:46:fc:51:6e:14:42:b2:16:56:5d:03:e8:56:c6:
2b:6a:47:a3:3e:55:1c:85:cd:fd:83:4a:f5:17:2c:90:f9:87:
50:9b:51:01:cd:a5:ff:c8:62:05:9b:b3:f3:b9:ca:b8:e7:8b:
ee:29:77:bb:d4:32:d7:6a:87:f5:1a:85:cc:23:87:e6:75:ee:
75:fb:4c:ae:30:02:5e:24:7f:96:d6:44:f2:a4:e4:13:d1:4b:
80:f4:9c:85:ee:5c:39:79:e1:47:f4:da:6b:88:f8:cc:7e:a5:
e2:62:87:e0:d7:5d:8d:db:de:a1:de:3d:ca:03:d0:cb:ff:43:
5b:b8:a6:f1:b6:78:5f:c8:ef:0c:4b:34:ce:d6:4e:ed:db:41:
dd:5c:be:a9:15:bd:a2:40:32:fd:75:a6:e9:04:4e:cf:9a:67:
89:df:b3:e0:78:48:3d:9a:38:4a:75:42:d7:3d:09:2a:46:0a:
f1:66:5b:f7:c4:d2:f6:44:5e:d4:5a:b6:a8:9f:c2:f4:e4:ba:
95:e4:51:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:17:46 2025 by rpki-client