Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
File: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft (raw, json)
Hash identifier: QqJwiDqtA/BYjGlgr8xntKH11igHKdJHnAssY6b6szM=
Subject key identifier: D1:5B:17:4B:AE:50:18:1B:19:17:0A:B6:07:D8:31:51:10:D4:E1:C8
Authority key identifier: 23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
Certificate issuer: /CN=23f5c2585382084792f13ad197205efdd2752df2
Certificate serial: 019A51874DF83CEC8AEEA34C9C2510AFA78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
Manifest number: BC
Signing time: Wed 05 Nov 2025 01:00:13 +0000
Manifest this update: Wed 05 Nov 2025 01:00:13 +0000
Manifest next update: Thu 06 Nov 2025 01:00:13 +0000
Files and hashes: 1: I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl (hash: 7E9Q1N04muY5leSdE2br2cq1hdv3RhnnOBE2i7BNyLY=)
2: PwxQMG9ujj6pfZhzC7G_kz3NsYA.roa (hash: 09V39ykqveB1AyZv1j7X/quqHqzhf0uH/toO7YLzAy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 01:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:4d:f8:3c:ec:8a:ee:a3:4c:9c:25:10:af:a7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f5c2585382084792f13ad197205efdd2752df2
Validity
Not Before: Nov 5 01:00:13 2025 GMT
Not After : Nov 6 01:00:13 2025 GMT
Subject: CN=d15b174bae50181b19170ab607d8315110d4e1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:b0:f6:f6:92:f0:42:af:67:78:64:03:5b:
51:6f:e9:84:01:2b:24:46:91:43:75:86:c1:0f:9b:
59:1e:8a:29:10:fc:04:76:1b:2e:89:e2:3e:1b:09:
4c:fd:f0:f1:0a:e6:38:13:fb:fe:b7:69:51:63:76:
4c:f9:4c:a7:90:52:17:19:c3:b6:52:09:fd:19:c4:
ac:31:8e:94:19:3a:bf:ce:e2:d8:81:88:a7:e8:03:
16:f8:32:ca:01:5b:ba:c2:8f:39:b1:9c:5f:22:41:
7f:06:26:9a:5a:61:0d:00:5c:55:c5:78:60:6a:10:
1b:0c:34:6f:e9:1c:e4:b8:4e:ba:f6:b6:87:c3:2f:
9b:fa:8f:45:69:7b:fa:d3:fe:85:fc:96:c3:9a:d5:
e4:42:f4:ba:d7:c2:19:5c:f5:87:38:ee:4f:be:42:
26:b6:ee:01:b5:98:a1:19:eb:21:4b:e5:db:09:a2:
08:be:ca:2b:3d:01:81:6f:f8:ec:8e:7c:42:15:93:
ec:a1:f0:ef:5c:94:5c:41:10:49:81:f0:29:04:82:
53:7f:14:e7:ca:cc:d5:bd:ba:10:77:80:90:33:15:
5c:32:be:c5:63:0f:5d:db:30:22:8d:ad:cb:2a:a4:
e5:51:d3:bb:f5:4e:98:0a:35:61:4e:50:2d:1e:4d:
34:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:5B:17:4B:AE:50:18:1B:19:17:0A:B6:07:D8:31:51:10:D4:E1:C8
X509v3 Authority Key Identifier:
keyid:23:F5:C2:58:53:82:08:47:92:F1:3A:D1:97:20:5E:FD:D2:75:2D:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f83d09-3413-4651-96ce-8fb5244bc256/1/I_XCWFOCCEeS8TrRlyBe_dJ1LfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:15:a1:68:c4:14:2b:f7:74:94:39:8d:84:02:3f:3a:33:42:
1d:ed:22:66:8d:da:2b:b6:0b:36:dd:26:c6:f9:2e:57:92:d9:
e5:26:40:1d:65:83:e1:1c:d4:7f:13:19:51:29:1f:6e:3b:db:
e2:10:09:2a:87:7c:53:0a:1f:c2:36:67:95:e6:6b:46:42:ff:
30:56:e4:46:52:99:a9:ea:95:b2:38:29:d3:2a:8b:ba:a9:6b:
73:35:72:bc:38:d5:c4:3a:39:5b:f4:b8:d3:90:ac:84:8f:ed:
fc:24:d7:d2:eb:4b:3d:fa:47:af:f2:b0:6f:61:9c:44:7f:cd:
3f:2a:0e:ec:9a:6d:e8:5f:40:71:cb:98:cc:07:b5:f5:6c:d2:
58:88:85:43:87:cb:65:55:1a:1e:a6:01:e1:39:03:24:b5:d1:
5d:69:5a:39:65:7a:69:d0:0e:f4:1d:6f:ac:47:d6:fc:2f:6c:
e7:db:b6:04:cd:d3:4e:e4:cc:9a:5b:69:f5:35:01:0d:ed:12:
47:fa:22:e3:5d:68:e1:a8:27:1f:59:76:60:ab:75:8f:ad:ab:
05:81:9b:09:e4:62:8f:87:0b:a0:6b:66:9a:40:95:30:e3:d1:
13:c2:4a:f0:5c:03:86:85:e3:6c:fc:63:03:f6:48:43:1f:3e:
c2:0d:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:16:06 2025 by rpki-client