Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
File: I6YR9Nqh1JrPstsip4DM57Cb3-k.mft (raw, json)
Hash identifier: xUO8tGgTZhHIBYZFzw5EdnyEfH+cVhSX4sVA9H4GA4Y=
Subject key identifier: CF:1A:B5:45:BE:86:38:8C:08:17:8E:02:F7:11:B7:DE:55:18:58:43
Authority key identifier: 23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
Certificate issuer: /CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Certificate serial: 019A1EAD3A936910D2CD07F6D0AE08AD51BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
Manifest number: 0ADF
Signing time: Sun 26 Oct 2025 04:01:00 +0000
Manifest this update: Sun 26 Oct 2025 04:01:00 +0000
Manifest next update: Mon 27 Oct 2025 04:01:00 +0000
Files and hashes: 1: I6YR9Nqh1JrPstsip4DM57Cb3-k.crl (hash: CODsqk6XLJoYICfsatYMlDMr8AU056nIi14Ak2Eonmk=)
2: b73ddOLLjPYnTz9o7yYL4kMMo3U.roa (hash: Vc85I6rYToAbWM15WR5pMloHamrCwTA2NvWFqIsFGlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:ad:3a:93:69:10:d2:cd:07:f6:d0:ae:08:ad:51:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a611f4daa1d49acfb2db22a780cce7b09bdfe9
Validity
Not Before: Oct 26 04:01:00 2025 GMT
Not After : Oct 27 04:01:00 2025 GMT
Subject: CN=cf1ab545be86388c08178e02f711b7de55185843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:2f:ce:67:52:09:66:2d:e4:8a:90:cc:af:
58:ed:f7:2b:21:2a:17:a5:40:ee:af:f7:1b:dd:a3:
a0:73:68:a7:65:44:22:72:4a:6c:a5:6b:cf:e0:47:
a6:6b:30:ea:8e:e9:3c:1d:b5:e1:a7:41:b2:ab:e3:
80:93:cd:f5:00:6f:47:7b:b4:9a:e5:04:48:8c:17:
6b:16:c1:27:03:21:2b:c0:40:46:5e:d2:72:4c:d3:
84:04:6b:d7:ac:79:92:06:95:b1:4d:f3:40:11:e0:
ac:79:c6:9c:e3:fe:0e:33:47:0b:b4:5b:30:94:c4:
22:a1:52:5d:60:d6:7b:d4:5c:c2:97:99:52:b8:9a:
88:e4:ae:b1:b0:c8:ef:fd:db:b7:5f:2e:6f:bb:2f:
e8:d5:82:07:5a:37:c7:65:92:b7:44:38:05:83:84:
2a:f0:80:7d:5f:5a:c1:53:f5:52:fe:38:b9:54:f5:
14:57:91:51:48:4c:a1:1b:2e:e6:e0:ad:71:91:c3:
b7:02:3c:4d:0b:79:72:77:58:7e:f9:95:5b:f4:af:
16:b4:ac:06:d0:d1:c7:7b:95:cb:ee:47:5a:5e:6c:
9b:f6:49:87:3e:cb:58:ba:11:6a:9b:cc:6a:53:6f:
01:16:0b:c3:ca:2c:10:9f:15:81:2e:40:06:25:c7:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1A:B5:45:BE:86:38:8C:08:17:8E:02:F7:11:B7:DE:55:18:58:43
X509v3 Authority Key Identifier:
keyid:23:A6:11:F4:DA:A1:D4:9A:CF:B2:DB:22:A7:80:CC:E7:B0:9B:DF:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6YR9Nqh1JrPstsip4DM57Cb3-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/912152-7df8-4ebf-b1d3-4776c7093a29/1/I6YR9Nqh1JrPstsip4DM57Cb3-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f8:b7:f2:92:a2:ff:06:b5:84:fc:25:5a:a9:c2:d4:e3:58:
a9:18:2d:25:06:9b:57:ca:57:cd:78:d2:8a:f1:b2:c2:93:61:
24:04:f4:bd:a9:af:5f:39:e9:65:83:6a:33:0a:9e:9e:05:1f:
bc:be:6d:02:5d:5d:4f:97:00:df:1b:f0:a8:c6:9f:46:b8:5d:
3a:23:0a:50:09:3d:a6:5f:a9:52:8d:7d:d3:c4:40:7a:4e:10:
e9:38:80:86:85:c5:a1:03:24:a1:b3:e5:01:88:82:b5:78:c0:
3e:8d:e8:21:9c:1d:07:1f:db:97:3b:84:61:a0:f7:bd:cb:6a:
15:a6:61:68:45:5d:6d:c3:b8:39:d0:8a:9d:c1:10:dc:a5:fb:
9c:a1:f0:70:c4:03:d3:30:d7:c4:65:ce:53:f4:c6:c1:46:48:
3d:78:d3:cd:8e:c1:f2:da:a8:9f:07:3e:a8:ae:69:fe:05:27:
9c:10:70:92:7c:12:29:02:2e:f2:37:ef:c1:19:69:8d:e9:15:
a3:8c:69:2a:5d:86:8f:4a:bd:a5:7e:fd:91:1f:bf:52:78:7a:
b9:a5:6a:90:7d:d2:50:2c:bb:7d:0c:89:c2:cd:99:6a:0b:a3:
8f:3f:0c:3b:3d:88:7d:f8:9b:98:0e:d0:ae:cd:9f:c5:bf:93:
b5:9d:b1:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:15:37 2025 by rpki-client