Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
File: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft (raw, json)
Hash identifier: mnXHaf/BixTkroHM16ulFIbOP8VxaGjc0TbJFkClAbk=
Subject key identifier: 3C:AF:0A:C6:45:BD:8F:2D:2A:EA:5A:F7:C0:E2:44:BB:9A:2A:EE:86
Authority key identifier: 8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
Certificate issuer: /CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Certificate serial: 019A50E33D03F4EA28D8BEEB36957209CCA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
Manifest number: 0E44
Signing time: Tue 04 Nov 2025 22:01:00 +0000
Manifest this update: Tue 04 Nov 2025 22:01:00 +0000
Manifest next update: Wed 05 Nov 2025 22:01:00 +0000
Files and hashes: 1: i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl (hash: bGN/Ib7QtObz6DwWadfO1oTND+3z5Xj49xdayqO2vtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:3d:03:f4:ea:28:d8:be:eb:36:95:72:09:cc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69cf1ea65f08e290a0415277e65ec95b780d77
Validity
Not Before: Nov 4 22:01:00 2025 GMT
Not After : Nov 5 22:01:00 2025 GMT
Subject: CN=3caf0ac645bd8f2d2aea5af7c0e244bb9a2aee86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:de:4a:5b:8c:fa:82:eb:57:da:ce:3d:43:d4:
6e:32:90:00:93:a4:1b:97:f9:4d:6f:80:25:c9:32:
61:2e:ac:b2:39:1f:cb:41:47:a2:52:ad:2f:65:6b:
21:6b:64:f3:b2:fc:81:b4:c3:07:59:20:f1:1a:43:
7f:37:14:e3:c4:7e:f0:aa:92:07:8e:38:de:20:f3:
51:ff:d5:05:e8:cf:c1:49:79:c4:16:98:e4:79:06:
49:f4:01:84:13:e3:d9:2a:88:6b:f0:1d:7a:b4:98:
a4:4a:ad:58:22:b4:9c:43:7a:4c:38:10:2a:ae:91:
61:0d:53:90:d9:6b:ba:7c:db:15:cf:d8:66:bf:71:
10:ec:9a:ff:17:98:6f:69:05:bc:36:99:de:66:3f:
50:02:51:30:a2:29:65:a3:a6:66:64:6b:ef:50:41:
b5:a7:16:c3:fc:43:0d:6b:12:3d:ba:ae:4c:d2:b3:
6e:f0:3d:7b:56:0e:6b:98:05:79:44:17:b4:34:cf:
7b:0d:aa:e9:b0:af:af:b0:cd:80:7f:62:1c:32:8b:
eb:b4:d9:bc:80:05:81:cb:42:2e:de:5f:f4:3d:8a:
0f:d0:7d:e3:a0:8c:b4:70:e0:be:15:65:91:d4:5e:
75:d5:71:c5:dc:b2:ba:23:58:d3:00:0b:c8:fe:78:
72:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:0A:C6:45:BD:8F:2D:2A:EA:5A:F7:C0:E2:44:BB:9A:2A:EE:86
X509v3 Authority Key Identifier:
keyid:8B:69:CF:1E:A6:5F:08:E2:90:A0:41:52:77:E6:5E:C9:5B:78:0D:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/93e301-62f8-49f1-a0f7-7ed6ef73ff6d/1/i2nPHqZfCOKQoEFSd-ZeyVt4DXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:5d:f7:17:2c:41:10:d3:23:a9:ee:6f:77:89:72:f5:48:16:
6c:7e:d7:d1:79:5a:9f:56:bb:01:c7:c1:53:36:1f:fb:19:39:
43:a9:9c:89:ea:ca:8d:09:f9:5a:4f:1a:60:39:a1:03:79:88:
1a:ca:cd:67:d3:14:79:4d:50:db:3b:b3:25:a8:80:6d:82:f9:
f2:44:ee:78:68:a6:98:33:7a:2e:88:0e:45:36:87:79:7c:ed:
b1:c1:68:62:04:99:6e:75:b9:49:d0:e0:5b:b7:a0:ad:81:82:
da:df:01:f5:11:f8:e1:3c:b4:a6:1b:46:3e:6c:0c:3d:bc:89:
35:ea:56:2a:19:c3:f6:a3:87:7e:a5:d6:ba:3f:76:2f:e1:8b:
de:d4:96:88:1c:76:2b:73:82:be:75:33:cc:48:58:8a:b2:78:
ba:46:25:c3:fe:b6:62:a7:10:39:4a:ac:46:51:42:e4:5d:2f:
3d:f0:a8:0d:10:76:63:d3:b2:3c:33:a0:20:a5:7f:54:49:7e:
76:28:20:6b:79:71:9d:b7:71:8e:19:61:5e:10:b9:d7:83:03:
31:05:0b:c9:a8:ef:97:b9:32:28:da:79:1d:25:bf:df:28:09:
f4:fe:0c:e5:b1:12:72:2d:7b:2f:65:a1:d7:99:9d:fa:81:f9:
c3:06:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:19:58 2025 by rpki-client