Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
File: IsXMfDZMkOr6uml-C_WfBVaalpU.mft (raw, json)
Hash identifier: RyFHoKe2Sl5mFnOeY5quQzuoZ/jR3X9RCjo9h0G0FR0=
Subject key identifier: 5E:1F:36:D7:D0:1F:0A:C1:E9:D3:9D:19:DF:EA:40:AC:48:4E:36:11
Authority key identifier: 22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
Certificate issuer: /CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Certificate serial: 019A71134A9CD57106E08396C1B9EE11844B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
Manifest number: 0DA1
Signing time: Tue 11 Nov 2025 04:01:20 +0000
Manifest this update: Tue 11 Nov 2025 04:01:20 +0000
Manifest next update: Wed 12 Nov 2025 04:01:20 +0000
Files and hashes: 1: IsXMfDZMkOr6uml-C_WfBVaalpU.crl (hash: srLuDWQHNOQhKk37RFfcQTNXqB1zqCZgWB74uQVGyf0=)
2: Rwalp_l1gE5qteHvPqygUpBfDbs.roa (hash: uNWR8irKkp/fDA/zKVLrXnW+fuP58wA187hFjBN4YQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:4a:9c:d5:71:06:e0:83:96:c1:b9:ee:11:84:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c5cc7c364c90eafaba697e0bf59f05569a9695
Validity
Not Before: Nov 11 04:01:20 2025 GMT
Not After : Nov 12 04:01:20 2025 GMT
Subject: CN=5e1f36d7d01f0ac1e9d39d19dfea40ac484e3611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:9a:62:09:02:24:1d:66:c6:b8:bd:60:92:
dd:55:71:a7:b6:4f:20:4d:64:2a:e0:57:18:71:7b:
95:84:e8:74:bb:92:df:fc:b3:ee:69:53:9d:7d:d6:
85:34:2a:66:c1:a8:1b:e8:80:84:5b:cf:a8:af:a2:
e9:80:78:3e:1f:79:d8:0d:55:f1:a1:3f:e0:40:f4:
12:9e:d6:a9:fe:cd:09:48:09:09:41:4f:9a:b8:33:
62:43:bb:fe:32:52:06:89:d8:24:1a:c2:b6:54:b1:
28:56:9a:af:8e:10:1a:a5:a9:8e:78:96:8f:64:65:
eb:41:92:7e:4d:73:3f:23:96:32:c9:8a:6e:df:e7:
fc:5e:21:c8:61:39:05:9e:e1:49:62:4b:95:2e:37:
44:ef:1e:ae:1a:f8:7f:59:f7:c8:4d:82:5f:bc:bb:
e9:27:ba:39:6b:ee:da:be:85:b4:dd:00:91:4e:54:
30:8f:dd:84:be:24:71:84:15:97:7e:cc:75:50:f4:
a3:32:f0:d6:30:03:57:d1:6c:da:c8:be:db:07:3b:
27:45:62:64:63:fd:13:59:79:50:3b:3f:de:4b:37:
39:91:39:6c:66:80:20:09:4b:4a:ee:a5:bc:81:8e:
9a:a5:a5:88:d7:f7:21:9b:c1:6e:df:f1:44:26:ea:
10:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:36:D7:D0:1F:0A:C1:E9:D3:9D:19:DF:EA:40:AC:48:4E:36:11
X509v3 Authority Key Identifier:
keyid:22:C5:CC:7C:36:4C:90:EA:FA:BA:69:7E:0B:F5:9F:05:56:9A:96:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsXMfDZMkOr6uml-C_WfBVaalpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/569442-4e6d-4ebe-9bb2-3fdb753a8619/1/IsXMfDZMkOr6uml-C_WfBVaalpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:26:d6:67:c6:dd:77:f8:23:16:56:96:d6:65:ae:c3:f3:0e:
33:02:7d:86:9c:a3:a6:98:34:b5:36:64:ae:9b:1f:2d:fa:39:
66:fc:1f:9a:dc:a1:ff:a6:6b:76:9b:87:6f:67:eb:a0:e2:7f:
aa:ae:f7:7a:a6:dc:f4:de:1e:8d:ba:95:a3:cd:b1:a6:93:7f:
b6:79:d9:42:c6:e3:da:97:d8:37:f1:21:4b:6b:a2:ce:9e:8d:
59:40:f3:63:28:3f:0d:9e:76:9e:e6:57:44:38:3e:64:dd:83:
bd:75:e3:22:c9:95:2d:9a:01:b4:19:08:b6:ca:ff:82:3a:01:
7e:a5:38:13:f9:66:38:b9:a1:c8:4b:72:c3:41:6e:b5:b4:c4:
f2:7d:67:34:92:9c:0d:0c:eb:47:4a:28:3d:8f:86:51:b3:0b:
9f:8d:2e:16:2c:4d:4b:52:92:37:60:4b:54:fe:3e:74:37:c9:
ac:80:9c:56:4b:b9:7e:76:05:4d:7e:f8:2e:c3:1f:3e:6b:67:
77:d8:45:3f:83:63:02:9b:f0:e1:67:c0:2f:54:96:e6:84:aa:
8d:f2:1d:d6:60:3e:28:bd:5d:5a:29:53:3e:fa:e8:50:60:93:
39:80:52:ee:c9:e8:c5:e9:41:ca:c1:94:84:c1:a6:42:d3:db:
f6:61:49:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:59 2025 by rpki-client