Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: /+OuUxvEtai9mxpJ+aGJ2Vz9UkBclc95f03Q4ic5kRA=
Subject key identifier: C0:9B:BB:60:9B:86:86:66:BA:3F:1A:71:42:F3:45:33:52:81:F2:50
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 019A4D3D0E8BCB2C0B8E83DA36B53A523157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 1707
Signing time: Tue 04 Nov 2025 05:00:38 +0000
Manifest this update: Tue 04 Nov 2025 05:00:38 +0000
Manifest next update: Wed 05 Nov 2025 05:00:38 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: aPbVOl3/6KVzndnR/Ef8TACdDusLPvmRpz479yzuxeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3d:0e:8b:cb:2c:0b:8e:83:da:36:b5:3a:52:31:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Nov 4 05:00:38 2025 GMT
Not After : Nov 5 05:00:38 2025 GMT
Subject: CN=c09bbb609b868666ba3f1a7142f345335281f250
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a0:10:94:89:28:3e:3a:3b:aa:51:46:30:23:
af:a5:7d:ca:f9:e8:21:b3:9e:92:61:49:25:2a:0a:
0c:cd:c6:4b:d3:66:6e:bc:39:3d:8b:fd:6f:30:7d:
37:c4:88:c0:20:9a:b6:c1:9e:b6:f7:9a:e5:95:9c:
b0:6f:04:ad:8e:aa:8d:54:8c:3d:e1:ee:92:60:87:
d8:94:ed:2a:fd:4c:95:ef:9c:a8:0b:d6:e5:98:69:
e4:28:f2:7c:07:74:e6:29:dd:00:4a:37:b9:1f:20:
3e:5d:7f:9e:6c:2e:ff:97:00:35:a7:b3:5a:92:a2:
16:11:a6:e7:e7:c4:fa:10:a4:66:ca:a7:db:f4:0c:
86:2e:e3:9c:09:62:aa:02:3c:79:98:a6:df:9f:b6:
67:56:80:5a:92:eb:88:82:7b:a5:b7:51:fe:7c:fd:
a6:31:07:83:39:7a:82:60:c2:50:01:06:20:81:63:
69:ec:e5:f7:4c:27:a0:c1:e1:17:61:10:fc:96:b2:
2b:1b:d1:f3:a6:45:48:93:68:5d:bf:09:1e:bc:e8:
5e:7e:ac:bb:63:4a:1c:4c:c9:df:5f:a0:ce:15:e0:
b4:99:22:c3:5f:2a:56:28:27:81:0a:15:2f:67:cc:
be:57:5e:8c:c1:3e:16:53:7a:25:71:e0:3d:24:e4:
6c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9B:BB:60:9B:86:86:66:BA:3F:1A:71:42:F3:45:33:52:81:F2:50
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:89:e7:5f:2e:69:aa:bb:8d:84:ae:4c:89:96:1e:a1:82:82:
a0:98:05:5b:fb:e9:da:f8:2d:7d:67:c7:d3:96:2c:b8:dd:aa:
86:b1:50:8d:f3:68:e9:78:c4:02:15:6c:27:74:6c:b1:fd:f7:
34:77:5d:c3:44:12:1a:56:8b:1e:a6:fc:02:31:f3:5b:12:45:
cd:4a:92:3d:6b:75:8d:82:fc:c5:d2:fb:c0:ad:3c:5d:10:13:
86:a4:91:e6:86:04:d8:5d:79:65:ff:3e:16:6f:e7:f4:3c:d5:
f3:dd:81:ca:2f:fa:dd:04:39:eb:0f:28:62:b8:48:3e:19:48:
ca:60:1b:f4:90:6b:e9:e5:6b:61:d0:51:b1:00:39:ed:ec:6e:
d9:d9:51:6a:d2:22:69:61:52:c5:e1:b9:71:42:d7:9e:cc:92:
b1:70:c8:9c:9e:44:3d:5f:c0:4b:bf:58:bf:de:c1:e7:83:7e:
9b:16:c3:98:03:b4:cf:9c:bc:3b:6b:e6:be:e8:3f:42:d7:59:
0d:1c:df:b3:24:e0:be:62:24:f6:92:57:e0:7f:60:2a:f8:12:
f4:b1:64:c4:6d:3d:83:a3:be:2f:14:64:ed:86:a7:66:cc:9b:
87:f1:99:25:10:97:22:85:bc:aa:3f:ab:39:a3:5d:5c:48:da:
ce:44:6e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:42 2025 by rpki-client