Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
File: I90F63vZRcZd8Yc1UtzJDLLhdyM.mft (raw, json)
Hash identifier: TWSXZPAo2mMZ948v22an7oLuNylfteA0qAICwFEOyVw=
Subject key identifier: F9:BD:E4:77:41:4C:A0:89:AC:D7:DE:68:21:6C:2B:41:5E:AB:74:EE
Authority key identifier: 23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
Certificate issuer: /CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Certificate serial: 019A1E3EE8A0ED97D11BA96A65B81EB0C63B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
Manifest number: 01CA
Signing time: Sun 26 Oct 2025 02:00:30 +0000
Manifest this update: Sun 26 Oct 2025 02:00:30 +0000
Manifest next update: Mon 27 Oct 2025 02:00:30 +0000
Files and hashes: 1: I90F63vZRcZd8Yc1UtzJDLLhdyM.crl (hash: AYwXmVdDTnQzJzDPWGOMHM7aGdE0F7pmsHxQvxXwwRY=)
2: jS5n1QIkV5a4mMLNQcvKPtlrQ-M.roa (hash: lelwm9WsLrqz4fINUrusZCHF/wAouDsWxQ/qaZbxy6o=)
3: kt9kY-16BQ4necIVFRgAtvjd9vU.roa (hash: 66gMsyaOtysX+kjpi4hM+Oe5TYeIKMy84VcIEuNL1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:3e:e8:a0:ed:97:d1:1b:a9:6a:65:b8:1e:b0:c6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23dd05eb7bd945c65df1873552dcc90cb2e17723
Validity
Not Before: Oct 26 02:00:30 2025 GMT
Not After : Oct 27 02:00:30 2025 GMT
Subject: CN=f9bde477414ca089acd7de68216c2b415eab74ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:44:ac:a8:b0:7e:9d:8e:5a:5a:6b:43:00:
46:e9:1c:06:7f:67:ba:38:c0:65:28:54:88:1b:c7:
09:69:f3:c8:df:ce:ab:d4:b6:64:d1:cf:87:b6:38:
6a:31:bb:9c:ea:0e:3b:e0:0e:39:02:bd:21:38:8f:
49:a7:51:68:b7:50:be:52:f3:cd:9b:6b:90:0f:84:
0f:9e:df:b6:c1:29:3e:7a:d2:ce:58:fa:8d:5c:27:
24:b4:1e:17:1a:08:d3:03:65:b8:ca:5f:d3:a8:8e:
11:46:30:2f:22:9e:79:1c:03:ae:04:0a:72:8b:98:
84:7c:58:ee:27:92:14:97:d2:19:bd:9c:1a:31:eb:
97:4f:13:73:52:35:01:be:e1:fb:2e:f5:c0:99:96:
4f:35:38:39:34:f9:66:7b:43:58:5c:57:72:51:70:
12:07:4f:10:77:b6:31:1a:25:4b:dc:f8:29:26:3c:
ec:df:2b:29:d2:9a:b9:b1:23:e0:c6:a4:73:9f:28:
40:8b:c5:af:94:87:8e:f5:ea:63:40:d1:9e:92:08:
13:eb:e5:bf:df:2c:a3:a5:c4:9b:6a:23:a2:53:54:
59:9a:4d:70:47:a9:d1:34:58:68:30:f0:84:39:e8:
97:49:da:06:ed:99:e5:b9:7c:e1:67:70:50:2f:99:
c3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:BD:E4:77:41:4C:A0:89:AC:D7:DE:68:21:6C:2B:41:5E:AB:74:EE
X509v3 Authority Key Identifier:
keyid:23:DD:05:EB:7B:D9:45:C6:5D:F1:87:35:52:DC:C9:0C:B2:E1:77:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I90F63vZRcZd8Yc1UtzJDLLhdyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/b87e50-3510-420e-8bf5-c4a3a0a5a9b1/1/I90F63vZRcZd8Yc1UtzJDLLhdyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:7b:2e:0e:bd:f1:65:17:77:58:da:62:b5:01:83:90:b6:28:
69:ee:07:df:66:f8:0e:01:86:14:57:02:1a:50:11:53:b3:95:
39:5d:e4:56:ee:57:2f:7f:82:21:55:50:af:82:c5:6b:25:68:
46:c8:fc:a3:8e:14:f2:d5:7a:d9:58:2c:ff:e7:de:8b:05:93:
d1:9d:25:a6:66:ba:30:fa:12:48:cc:6a:92:41:89:46:17:7b:
5e:c2:61:c6:41:89:9e:21:ec:82:60:b7:05:06:35:23:c9:58:
8d:c6:ed:ba:cb:0c:92:fd:60:69:41:44:df:14:64:3d:05:07:
e5:6a:1b:ac:a2:2b:d6:43:86:85:28:b8:82:fd:d1:a9:c4:63:
06:0e:c5:bc:c7:c7:4d:e9:69:26:cf:5f:49:fd:b9:e2:a6:d5:
65:3b:e8:16:97:bf:86:cb:8b:65:aa:fd:51:71:0a:fa:24:46:
30:9b:18:eb:ff:57:89:36:03:ef:50:93:c9:09:ea:e3:cd:b8:
d6:b0:54:fa:41:5e:2d:73:27:ef:de:6e:e5:a7:b8:5d:e0:7d:
5d:70:01:df:48:6e:8b:69:a3:5d:4a:35:59:89:87:74:23:6b:
5d:d1:ea:3b:fd:88:2e:ba:7b:49:cb:3b:93:88:a7:41:3f:5d:
e1:a5:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 04:31:56 2025 by rpki-client