Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier: XJg8iVv9c5wq325Lt3/nAavOp26H5WF8q3+OomJ+6F0=
Subject key identifier: 8E:A1:35:BB:CC:0C:8A:BD:93:32:01:A5:6B:C1:9E:F4:8F:E7:5F:3F
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 019A0BCAE7F734124EF3531E9DA624350AE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number: 16EC
Signing time: Wed 22 Oct 2025 12:00:38 +0000
Manifest this update: Wed 22 Oct 2025 12:00:38 +0000
Manifest next update: Thu 23 Oct 2025 12:00:38 +0000
Files and hashes: 1: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: mka+JnONMW9HwqsMvGVbhqct6bRzMl/M1GGyWGgB7PU=)
2: oIUHNd2flzQuApFJl7WS3G_Ds7Q.roa (hash: r9vW54cG8T4ZtS4qpMsUDsSVtPyOl8cyq1L4laCQ/ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Oct 2025 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:0b:ca:e7:f7:34:12:4e:f3:53:1e:9d:a6:24:35:0a:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: Oct 22 12:00:38 2025 GMT
Not After : Oct 23 12:00:38 2025 GMT
Subject: CN=8ea135bbcc0c8abd933201a56bc19ef48fe75f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bf:0b:2c:48:b0:b5:ea:ed:c0:8d:9c:b5:dd:
f5:6f:65:3e:a4:fd:e6:08:55:10:83:e1:d1:0e:dc:
71:77:87:47:d5:c8:09:8f:ba:ba:eb:94:14:48:41:
63:d3:0b:ce:6f:a8:32:b5:15:ee:ae:d9:53:64:07:
0e:ba:dc:2f:eb:c7:bb:67:a1:88:9e:58:2a:99:94:
f0:54:0e:d3:9a:38:06:66:4c:cc:9d:d6:36:fa:31:
e1:e7:79:e3:81:83:35:ba:21:52:d4:76:32:84:c7:
df:16:db:92:c0:c7:0f:59:43:cf:c2:b0:03:82:4c:
c4:66:fc:b2:22:68:6e:70:ef:ca:84:ca:93:43:72:
66:19:17:6d:9a:ae:94:7b:38:16:b0:ba:ae:a9:61:
a4:7f:10:91:f5:3d:f2:ce:0e:4f:17:bb:0f:71:dc:
1c:52:d9:50:b1:41:ef:78:ae:36:4d:2c:4c:d5:b6:
6d:c1:77:65:1d:f4:ec:ab:ae:a7:3b:66:04:5c:ca:
dc:a6:99:83:18:dc:10:55:87:0f:ef:c9:32:d1:a7:
72:03:6c:e2:fd:9a:59:06:72:b3:db:83:92:ab:18:
50:dc:49:37:25:a4:32:70:28:34:24:eb:c0:ed:3a:
80:3a:49:f0:33:33:79:14:7d:11:24:f7:47:43:29:
00:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A1:35:BB:CC:0C:8A:BD:93:32:01:A5:6B:C1:9E:F4:8F:E7:5F:3F
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:e3:98:8b:fd:59:34:a0:9c:c2:fe:07:7e:2a:81:58:c8:d2:
54:2f:ca:df:a2:69:af:31:c5:d2:fb:37:43:50:1b:9e:97:76:
b4:b8:ae:6b:0f:b8:9e:db:84:17:d6:0e:3e:61:6f:f3:a7:65:
95:49:fd:c5:5f:b3:d2:85:f8:e0:10:8d:81:36:ae:61:1f:9e:
56:08:37:71:71:73:0f:fe:24:63:e4:18:3a:b6:58:92:1b:5c:
7e:28:af:d0:54:24:6b:7a:fb:33:3b:d3:8f:3d:e5:ab:c4:96:
17:f2:25:b9:12:64:5a:31:e1:74:fd:03:b2:6d:61:7c:b5:88:
e5:0f:75:49:f7:e9:18:83:1d:41:70:33:44:a3:a7:20:69:11:
3a:fa:3a:9a:88:a3:8c:d7:6b:94:1e:22:67:37:47:64:00:2a:
ce:17:30:40:dc:14:1f:6a:29:57:93:ae:99:c7:96:dd:69:22:
6b:46:c0:21:34:a3:ee:7d:68:7b:8c:54:5f:96:b7:ff:9d:d7:
c6:ce:73:e5:75:9a:a6:bc:7e:00:9b:ed:9b:ed:0e:e3:d8:85:
92:59:4b:39:60:3a:c1:9a:d8:d9:25:f4:c5:d9:07:52:17:69:
49:86:3a:a1:2c:e9:29:cc:a5:d7:c5:74:ca:ed:67:2b:cb:1a:
ca:fd:e0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 19:48:23 2025 by rpki-client