Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
File: I-_rMup5TJRQkgia5cE1AvdxbN4.mft (raw, json)
Hash identifier: gHGbrQKXTO7Cy/RB7JENtzyxjhR+UFDWTmOMSCTZlOQ=
Subject key identifier: 23:E2:21:91:C0:33:3C:ED:BA:51:AA:12:4F:7C:78:B7:36:29:F6:FB
Authority key identifier: 23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
Certificate issuer: /CN=23efeb32ea794c945092089ae5c13502f7716cde
Certificate serial: 019A4F99556B34B3DF0E41E3807881D525FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
Manifest number: 170A
Signing time: Tue 04 Nov 2025 16:00:40 +0000
Manifest this update: Tue 04 Nov 2025 16:00:40 +0000
Manifest next update: Wed 05 Nov 2025 16:00:40 +0000
Files and hashes: 1: I-_rMup5TJRQkgia5cE1AvdxbN4.crl (hash: bWjlt7K5h8iNTDNuagxg8c7zAT3jcYIBDMJIeNN6VbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:55:6b:34:b3:df:0e:41:e3:80:78:81:d5:25:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23efeb32ea794c945092089ae5c13502f7716cde
Validity
Not Before: Nov 4 16:00:40 2025 GMT
Not After : Nov 5 16:00:40 2025 GMT
Subject: CN=23e22191c0333cedba51aa124f7c78b73629f6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e5:a7:a0:b1:45:77:36:52:6a:41:29:83:f6:
31:97:6f:3f:3c:07:d4:f2:b6:6a:71:1d:22:cf:b3:
8d:42:32:5e:6a:f4:d2:af:11:f3:b8:98:f7:ee:8e:
12:84:a6:6d:8a:7b:95:d5:1e:44:9e:3a:9a:73:be:
ac:09:1a:b2:76:b3:f1:52:88:d0:37:7c:60:63:df:
c5:11:27:ac:a5:ac:d7:38:6b:bc:b9:4c:4e:2c:2d:
87:70:e1:2e:94:5f:fa:2b:48:62:00:fb:a0:48:b7:
05:f7:1c:23:a9:04:7e:f0:95:cd:27:a8:29:d2:c9:
09:b1:2d:fe:6c:ea:0c:e9:02:01:96:ae:4a:5a:53:
00:61:a4:26:01:c5:1e:97:56:73:7d:31:8f:82:b8:
34:b3:49:ca:02:78:53:4f:ca:c4:71:93:ea:c2:29:
b1:ce:9a:1e:6f:c3:a5:e3:fc:dc:b0:7b:a1:03:62:
4e:49:f1:06:07:e8:e8:a1:59:c5:a1:16:06:ef:d5:
c9:3c:8a:bd:68:c8:74:23:ab:38:67:3b:f3:b0:c2:
2d:85:bb:fc:e4:ef:0a:82:f6:93:03:d4:86:62:33:
58:6f:0f:7e:a5:a0:7d:b0:71:fb:c6:50:2b:27:69:
31:97:df:66:fa:ce:c6:55:98:1a:33:a6:be:fc:9c:
77:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E2:21:91:C0:33:3C:ED:BA:51:AA:12:4F:7C:78:B7:36:29:F6:FB
X509v3 Authority Key Identifier:
keyid:23:EF:EB:32:EA:79:4C:94:50:92:08:9A:E5:C1:35:02:F7:71:6C:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-_rMup5TJRQkgia5cE1AvdxbN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2052f3-2be1-417a-a416-dfbd5b5ea760/1/I-_rMup5TJRQkgia5cE1AvdxbN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:21:82:e1:e9:77:11:43:ff:49:9d:a5:87:86:ec:99:77:6f:
f0:98:f5:f3:84:a3:d0:36:19:91:81:d7:b5:3b:3d:36:f0:4d:
0a:72:15:1e:cc:7b:9f:fb:df:be:7f:01:2a:a8:56:b0:e3:39:
70:0b:ff:30:31:60:06:fe:f3:b1:1f:39:42:1f:7c:e7:0c:f3:
7a:67:17:cc:a0:11:ea:d2:86:73:46:bb:40:c6:19:fa:a8:58:
58:e9:58:88:0c:60:79:f7:c7:6e:53:b7:99:e7:99:7b:a9:59:
d4:c3:cc:ea:c9:6e:57:11:c8:5e:9a:dd:03:b2:7a:5b:d5:6f:
78:47:71:73:e4:be:43:24:b8:68:d0:3e:de:b4:db:8e:a0:2d:
2b:ff:e5:c0:66:3b:c9:60:8e:72:88:23:23:ca:8f:f4:6e:b2:
33:b5:7d:4f:cc:2c:cc:bc:d4:7e:64:38:3d:b7:5f:bf:9f:ca:
81:37:28:15:81:44:b0:25:9d:a2:4c:3d:79:2d:de:f6:ea:b6:
e6:12:cc:19:81:22:fe:23:38:4a:4c:eb:91:18:6c:d1:6b:aa:
ce:16:aa:64:e9:3d:4e:09:7b:51:11:df:f8:92:ba:79:d7:ba:
97:a2:be:86:10:fd:a5:2c:12:d1:91:02:8c:46:a8:d8:c1:2a:
48:10:62:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:47:28 2025 by rpki-client