Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
File: IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft (raw, json)
Hash identifier: TWXZBa3QCQzAv1pYiISsyunU3LHiTsHzbVtbHFfCIXA=
Subject key identifier: C1:07:B1:81:2F:08:98:0F:08:E4:AE:D1:50:50:97:D7:57:EC:A6:E0
Authority key identifier: 21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
Certificate issuer: /CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Certificate serial: 019A714A1869B0E9B8742148022D8983BE25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
Manifest number: 5B
Signing time: Tue 11 Nov 2025 05:01:12 +0000
Manifest this update: Tue 11 Nov 2025 05:01:12 +0000
Manifest next update: Wed 12 Nov 2025 05:01:12 +0000
Files and hashes: 1: IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl (hash: kdwPAwzDKTMHME6Nmkb/oVcj9j5pR67eZJpLkoTS/zw=)
2: apIk3T0uW96QniURNfkrJpo6bx0.roa (hash: lnybSVbj9b/iDsuE6W4oGYnfxclTTGDOOhv6E7X00Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:18:69:b0:e9:b8:74:21:48:02:2d:89:83:be:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2112899e3b08c17f5c335b5cbc78da5adfef9b1f
Validity
Not Before: Nov 11 05:01:12 2025 GMT
Not After : Nov 12 05:01:12 2025 GMT
Subject: CN=c107b1812f08980f08e4aed1505097d757eca6e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:0d:36:cc:23:f6:66:0c:78:73:2d:3b:04:3a:
ab:da:b9:d9:87:48:3d:7f:e0:80:c4:1f:6a:da:ed:
3d:9c:47:70:0b:ad:a3:58:22:06:2c:69:74:a6:02:
92:da:b5:bc:28:90:3c:c1:51:e3:cb:29:c8:92:24:
3e:8d:9e:b6:de:43:18:90:01:6b:e2:1a:73:cd:66:
3a:6b:6e:c8:ed:dd:e5:43:9c:ee:58:c5:19:21:32:
e9:25:4b:42:86:17:5c:c6:3d:f3:37:35:83:57:e1:
9c:79:e8:99:41:cc:39:e0:92:ce:1e:fa:9d:8b:2d:
27:3c:50:3e:3c:f6:9e:1b:e7:13:29:9d:9f:01:ea:
24:d8:cb:7a:ee:fc:e7:ee:7e:59:5f:4d:76:b0:75:
97:6b:89:3e:4f:3a:e5:86:1f:be:32:5c:0b:53:ef:
c3:f3:4d:a8:d2:75:cf:c5:53:38:ea:0a:db:04:e6:
54:49:ca:7a:bb:fb:cb:d1:42:77:71:b8:06:6d:7d:
ec:a2:19:bf:81:98:08:02:d0:73:5a:f3:9c:92:84:
4d:bf:7e:08:8f:40:ff:79:38:d7:4e:18:70:9e:ed:
f3:74:d2:91:82:e2:80:d3:92:01:3b:42:26:a0:1d:
a6:73:66:23:28:a3:7d:36:32:0b:eb:2c:e6:19:83:
c4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:07:B1:81:2F:08:98:0F:08:E4:AE:D1:50:50:97:D7:57:EC:A6:E0
X509v3 Authority Key Identifier:
keyid:21:12:89:9E:3B:08:C1:7F:5C:33:5B:5C:BC:78:DA:5A:DF:EF:9B:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRKJnjsIwX9cM1tcvHjaWt_vmx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/5417f4-4d66-4de9-935d-97ad2374a597/1/IRKJnjsIwX9cM1tcvHjaWt_vmx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:4b:a8:d6:03:a0:4e:42:6d:0c:c1:c3:3e:ff:47:a3:3b:17:
99:05:7b:eb:84:ee:dd:3b:44:a7:4f:20:00:b8:db:44:49:36:
cd:82:c2:83:11:1a:7b:ee:fd:24:3f:90:85:6d:48:0e:d2:de:
bd:db:a1:3a:e7:19:b2:b2:4e:cc:63:24:bb:32:b0:d5:39:8d:
0c:b4:4b:f7:d5:59:5f:e3:8e:c8:54:ef:c2:e1:57:ff:a0:14:
b9:52:c3:45:32:89:1a:ea:68:88:91:2e:26:86:5f:39:cc:72:
71:cf:9a:e6:33:0a:56:23:78:87:4d:27:39:11:24:b8:d5:80:
62:66:fb:c1:1b:fc:4e:33:47:24:46:26:b2:53:d3:04:34:31:
2b:11:eb:f8:2d:b3:28:ee:b0:cd:cb:cb:fd:c3:e2:3d:5f:2a:
7a:33:d4:3c:5b:2d:9d:be:cb:cf:d3:4e:c3:d8:3e:50:9f:35:
7b:1e:49:b6:44:4d:88:76:84:b8:e0:3e:e4:6d:0b:b7:69:f1:
24:f4:94:e7:ed:92:06:e8:33:5a:52:65:ad:91:f3:bb:37:d4:
fd:c5:ac:98:08:a4:21:ca:99:6c:b3:bb:2f:03:b5:6d:1e:e8:
74:93:a9:af:1e:55:ae:a2:0d:82:e9:e9:40:c4:85:91:f1:db:
fb:37:3c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:37:14 2025 by rpki-client