Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
File: IqETXjyWLnRuT1fR6qSUoEnwOxs.mft (raw, json)
Hash identifier: t+104za1smwU/WkkwzhM9//+7axcHD6Veu6CqZyZtf0=
Subject key identifier: 8C:A2:DE:C6:17:BF:1A:9D:0B:82:E6:42:1C:CB:88:B4:76:EE:AD:3F
Authority key identifier: 22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
Certificate issuer: /CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Certificate serial: 019A714A0AD6961952C4EA4D00AEFD7E2944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
Manifest number: E8
Signing time: Tue 11 Nov 2025 05:01:09 +0000
Manifest this update: Tue 11 Nov 2025 05:01:09 +0000
Manifest next update: Wed 12 Nov 2025 05:01:09 +0000
Files and hashes: 1: IqETXjyWLnRuT1fR6qSUoEnwOxs.crl (hash: jEye4ymXpQI8otzQ4YRnLXgpD8v6W6OiilO8Eachzlc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:0a:d6:96:19:52:c4:ea:4d:00:ae:fd:7e:29:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a1135e3c962e746e4f57d1eaa494a049f03b1b
Validity
Not Before: Nov 11 05:01:09 2025 GMT
Not After : Nov 12 05:01:09 2025 GMT
Subject: CN=8ca2dec617bf1a9d0b82e6421ccb88b476eead3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:65:61:04:38:75:91:06:1c:da:39:74:1e:
12:21:80:45:5e:63:88:c4:3f:e2:03:da:12:75:28:
39:ac:bf:04:b0:a1:b0:c1:b7:dc:b7:48:27:ad:49:
2d:5c:85:d3:64:2a:ad:97:b0:24:08:7c:d6:35:77:
13:68:bb:43:f3:91:77:d1:4e:ee:a0:e9:e7:ca:49:
23:81:eb:22:49:ad:55:fd:81:d9:c6:a4:6d:36:55:
17:72:08:47:36:f1:85:38:0e:1c:08:05:c9:34:a1:
93:75:41:e0:b7:37:d8:6f:11:89:c9:96:cd:6e:cc:
a5:e1:40:7c:1f:51:87:c9:51:bb:16:6c:9c:23:26:
45:4d:c9:71:2d:8a:bd:a4:f4:4a:39:83:92:4c:75:
1d:16:da:02:13:af:44:c9:e1:93:bb:a4:77:3d:c6:
70:6f:e5:0e:93:d3:fe:1c:11:5d:11:b7:17:bb:05:
bc:c2:42:fc:cb:72:09:e9:7b:77:a5:6d:df:76:b0:
9e:b7:c1:ad:66:1e:87:de:8f:f9:8a:aa:bc:51:6e:
cf:32:26:18:92:3c:39:4f:d0:f8:76:9d:d8:b1:b0:
be:4d:49:dc:cd:9c:98:9c:60:34:99:f9:3f:34:88:
95:f6:42:1d:1a:cc:0f:5f:51:ec:d7:67:5b:5d:e4:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:A2:DE:C6:17:BF:1A:9D:0B:82:E6:42:1C:CB:88:B4:76:EE:AD:3F
X509v3 Authority Key Identifier:
keyid:22:A1:13:5E:3C:96:2E:74:6E:4F:57:D1:EA:A4:94:A0:49:F0:3B:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqETXjyWLnRuT1fR6qSUoEnwOxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f066c-dc7a-4a45-8574-a5b295aefc00/1/IqETXjyWLnRuT1fR6qSUoEnwOxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:3c:c8:83:03:99:da:50:20:eb:c1:19:5b:6c:e5:91:69:9e:
b6:39:6b:20:81:a0:ed:03:49:f7:71:5a:24:f3:de:d6:9a:60:
bd:21:b4:d1:0b:3f:b6:16:19:54:83:73:9d:ea:47:be:87:a5:
3d:26:c3:de:af:c0:91:fa:72:27:36:c0:31:d0:2e:93:17:72:
0d:66:82:df:cc:34:ae:a7:aa:4c:ae:eb:ab:35:0d:45:f8:51:
58:5d:67:f9:b1:30:bb:55:84:2d:18:b1:54:98:e2:cf:84:9f:
83:76:06:df:9f:11:01:75:99:d8:d8:4c:83:02:35:b7:c8:66:
06:88:e7:ac:ff:5d:20:36:9f:9e:b6:0b:e1:98:31:04:11:fb:
c9:1a:a4:91:18:a9:e4:e5:59:92:ad:bc:53:07:7c:87:c5:b0:
a3:c1:cd:24:6f:76:35:e0:a9:58:1f:32:89:ed:61:ab:55:f2:
35:6d:2c:e0:34:ea:77:80:81:e4:1f:15:f1:e4:f7:24:96:4e:
ed:9a:3a:70:8e:98:8e:ed:40:0a:58:c6:5a:67:b4:69:8c:4f:
45:73:61:7b:e6:6e:d7:9b:2d:75:85:bc:4f:cb:12:47:03:25:
5d:7a:1a:67:90:1f:b0:4a:3c:15:b3:02:e7:55:0d:35:12:89:
22:17:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:00:32 2025 by rpki-client