Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
File: IIP4tbYgnefJQAjzM3vjQ2866-Y.mft (raw, json)
Hash identifier: Lp2j41YJa+W+REZPoxLSRUyYPJq1dDMd2Oweyp5xH7Y=
Subject key identifier: 9F:99:B3:FF:93:29:EB:48:57:9F:4C:9C:98:C3:06:44:D7:47:77:26
Authority key identifier: 20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
Certificate issuer: /CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Certificate serial: 019A55D2425B367CF02F1B27865DC298E6C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
Manifest number: 0765
Signing time: Wed 05 Nov 2025 21:00:34 +0000
Manifest this update: Wed 05 Nov 2025 21:00:34 +0000
Manifest next update: Thu 06 Nov 2025 21:00:34 +0000
Files and hashes: 1: IIP4tbYgnefJQAjzM3vjQ2866-Y.crl (hash: X/tl5dgWt4qiPNlRsUciTs4gvtGi2FvLRFJm7jyjFQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:55:d2:42:5b:36:7c:f0:2f:1b:27:86:5d:c2:98:e6:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2083f8b5b6209de7c94008f3337be3436f3aebe6
Validity
Not Before: Nov 5 21:00:34 2025 GMT
Not After : Nov 6 21:00:34 2025 GMT
Subject: CN=9f99b3ff9329eb48579f4c9c98c30644d7477726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:56:f3:44:96:cf:77:97:09:3a:79:66:19:
22:e6:61:1e:3c:12:f7:d4:a2:cd:18:1c:72:22:45:
75:ad:dc:6e:47:5f:88:5b:79:e4:99:13:74:01:96:
78:91:6f:e4:e7:4a:fc:65:bd:39:94:b8:c1:ce:fa:
e0:56:4e:b0:bf:67:02:64:0a:7c:48:05:97:7b:92:
01:aa:09:f9:22:f3:7b:af:d0:00:e0:d0:3c:2a:bd:
3e:4a:42:bd:f7:f0:e2:4e:12:1a:48:a3:63:c1:50:
e5:28:5c:7f:41:d0:11:ce:d8:23:eb:b3:7e:a6:32:
da:1e:c8:e8:43:a8:40:0f:4c:4d:4d:79:03:78:64:
62:b9:0d:f2:82:57:b8:df:d1:37:03:b0:49:5f:79:
49:9d:2e:66:77:c8:1d:39:78:00:e6:a4:e3:40:4a:
f1:8f:7e:c8:53:e7:a5:4f:13:14:dc:7a:6c:3d:19:
80:b3:c8:c3:92:84:86:a6:b4:cb:fa:7b:80:89:28:
bf:25:b6:e4:d1:f8:34:c4:d5:4f:10:ec:62:dc:ab:
62:b6:51:db:f7:39:68:81:d4:e1:db:9d:0e:5e:b8:
77:12:ae:35:25:c4:13:f5:2d:5a:6e:cf:0f:32:6e:
9a:56:d3:e1:6e:95:ca:0d:ac:b8:b3:7a:48:05:1e:
b4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:99:B3:FF:93:29:EB:48:57:9F:4C:9C:98:C3:06:44:D7:47:77:26
X509v3 Authority Key Identifier:
keyid:20:83:F8:B5:B6:20:9D:E7:C9:40:08:F3:33:7B:E3:43:6F:3A:EB:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IIP4tbYgnefJQAjzM3vjQ2866-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/c025e5-399a-4ce8-b5f0-acbef018d03a/1/IIP4tbYgnefJQAjzM3vjQ2866-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:78:18:17:93:fc:fb:ff:47:c3:e6:c0:a1:1d:f6:a1:80:d7:
a1:79:f1:fd:85:a7:4b:5f:ff:c2:9b:f0:92:82:5d:82:e0:ab:
f4:9e:3d:7a:42:3d:2f:f2:18:0c:20:3e:be:28:d0:5f:37:07:
af:a4:c6:59:40:35:3c:29:ea:02:e2:7a:da:fe:8c:a0:3f:2d:
c8:74:e9:71:2a:c6:76:85:93:47:7a:79:7c:5a:31:6f:55:a9:
cd:3a:46:23:aa:9d:8d:05:85:6b:25:46:15:8a:3d:0a:5e:c2:
f5:49:d2:0c:d4:b1:01:2d:02:0f:9e:79:27:f9:8d:68:46:f5:
3f:7a:84:4d:4d:31:40:d8:74:d1:b8:e5:85:65:f6:0e:a1:a8:
3d:56:b2:df:54:f2:9d:3f:c9:6a:ee:fe:20:67:02:5c:9c:2b:
a7:6b:f0:42:9f:72:02:f0:dc:7b:67:92:7f:43:60:d5:d6:cf:
ed:30:c7:3c:ba:5f:e5:8a:e9:73:02:d2:6e:e3:e0:45:64:80:
e1:e1:e9:c9:ad:2f:46:0c:5f:9d:76:d8:f4:34:25:a1:bc:60:
ab:93:50:2c:99:65:fa:2d:69:20:88:36:0a:7d:31:f7:f8:d6:
e7:b6:62:d6:48:9b:38:9b:9d:ed:2a:3c:ec:c8:bd:81:06:69:
03:1b:27:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 6 06:07:53 2025 by rpki-client