Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: tUA5/6uQ6cSh4dkH3GjcPJOov9fOmaUMjlFuP/uirlM=
Subject key identifier: B0:37:B6:7D:C8:CE:5E:9B:68:F8:1D:F6:6D:A9:D1:DC:64:30:C1:B1
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019A232E47151CA017060D684D3E4CBB2534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: A4
Signing time: Mon 27 Oct 2025 01:00:26 +0000
Manifest this update: Mon 27 Oct 2025 01:00:26 +0000
Manifest next update: Tue 28 Oct 2025 01:00:26 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: 03GEc9jlfFyBQNF0KT0gDmgk/hGc8lWa4EX2CEDE+JA=)
2: PwxQMG9ujj6pfZhzC7G_kz3NsYA.roa (hash: 09V39ykqveB1AyZv1j7X/quqHqzhf0uH/toO7YLzAy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:2e:47:15:1c:a0:17:06:0d:68:4d:3e:4c:bb:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Oct 27 01:00:26 2025 GMT
Not After : Oct 28 01:00:26 2025 GMT
Subject: CN=b037b67dc8ce5e9b68f81df66da9d1dc6430c1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:c6:63:e1:c9:78:41:e6:b7:fe:14:db:80:96:
7c:e6:49:a9:05:1e:d1:d2:70:b9:e3:0d:2c:58:13:
a8:de:24:33:31:ea:00:e2:84:68:ea:3c:15:ed:97:
f6:7b:8d:5a:ab:c7:88:78:58:1f:48:3b:18:2d:48:
83:9b:14:36:0d:0f:62:51:f9:cb:7e:89:91:1e:bb:
4a:07:cb:cd:6b:a4:e4:46:df:6a:04:08:00:53:46:
ae:cf:19:fa:eb:c9:d1:dd:91:a7:bd:1a:f1:a2:f5:
b7:9a:e5:5e:b3:cf:c0:8c:68:4d:81:fe:a2:da:8d:
c8:dd:d5:d5:98:40:e3:01:95:a2:b2:44:d1:fc:76:
54:94:5b:68:b7:41:4e:76:a1:95:35:a1:b9:77:2e:
27:57:7d:a4:86:5a:71:60:b4:c7:45:a3:5b:23:84:
00:d1:11:cd:b7:19:ff:d3:ae:2e:b6:d7:db:b8:54:
ef:71:53:ef:4e:10:90:60:b4:f5:2b:be:9e:f3:f0:
ee:28:de:58:b0:c1:38:f6:f4:d7:5d:eb:a6:b3:d5:
6e:06:ad:2d:ec:fd:8e:d8:14:33:3c:fa:b5:4b:0b:
08:08:53:21:3c:0d:23:c6:cb:5b:3e:b4:99:85:ab:
a7:58:71:9f:f5:f6:00:dc:a2:ff:0c:46:38:44:80:
2f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:B6:7D:C8:CE:5E:9B:68:F8:1D:F6:6D:A9:D1:DC:64:30:C1:B1
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:78:94:99:9e:5f:6a:0f:90:01:63:f1:c6:82:39:81:9f:b4:
9b:cd:ae:2f:a5:0c:0d:fc:e9:d7:2b:91:60:77:29:94:8a:6f:
dc:56:b6:7c:c6:ff:a4:db:c2:4a:4e:1a:df:37:c9:2d:0b:9c:
d4:a5:7c:88:b5:8a:6a:a4:9e:2f:b7:10:4b:6a:9f:74:20:d1:
18:f5:94:82:48:e8:f2:12:7a:40:ca:d8:ba:09:25:8b:12:b9:
5d:38:a1:40:01:77:ed:77:95:c2:49:db:2a:b8:88:58:1f:d3:
bd:36:b4:e8:1b:94:39:a5:3c:e4:b9:6f:06:84:c7:16:00:5b:
3a:2b:fc:34:08:3a:8c:d1:d5:90:48:fb:7c:ac:43:d4:78:fa:
83:fd:65:f7:c9:76:d0:ab:e4:5c:d6:4d:ae:d9:d0:b3:5c:22:
51:74:cf:00:06:3e:d1:89:35:9f:d6:00:98:7e:4d:03:15:70:
c5:89:f2:7a:c1:58:5f:12:54:e9:13:c4:8a:71:b0:32:03:68:
99:df:51:c5:3b:ed:5f:2d:74:d7:eb:89:e7:fb:ac:0f:ef:73:
f6:a3:f0:22:ac:2d:dd:01:a7:15:e0:d8:7f:a2:22:9f:d3:e6:
1e:db:87:68:1b:21:70:3a:2c:31:33:37:82:bf:55:35:77:8a:
f7:43:9a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 07:12:13 2025 by rpki-client