Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
File: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft (raw, json)
Hash identifier: yutpNiw5xoLFe9jCgHBhoX/YZEPOle4gAgLxxeuh/dI=
Subject key identifier: 27:07:63:65:A5:71:42:71:8A:37:88:38:D0:D6:49:F0:E3:19:B4:D5
Authority key identifier: 23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
Certificate issuer: /CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Certificate serial: 019A4D745DB513B26AE1C1F1032E2679547C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 06:01:03 +0000
Manifest this update: Tue 04 Nov 2025 06:01:03 +0000
Manifest next update: Wed 05 Nov 2025 06:01:03 +0000
Files and hashes: 1: I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl (hash: m0xi6VhULrsbluPYR6xL6BuVzCuJ8HqPa88kqXg7sFQ=)
2: MTT1Ia9LOAm3voF-tKlGjmgFAPI.roa (hash: 4bP/TTzv7AEu1D5qKcmPGabc7tnqcf7nz+XM5tO/PTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:74:5d:b5:13:b2:6a:e1:c1:f1:03:2e:26:79:54:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a42497970d65541ddb159658e3b0a6e2f516b7
Validity
Not Before: Nov 4 06:01:03 2025 GMT
Not After : Nov 5 06:01:03 2025 GMT
Subject: CN=27076365a57142718a378838d0d649f0e319b4d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:8a:5d:a0:d6:c2:a7:7c:a4:c4:08:0d:df:b5:
17:80:bd:47:7a:e7:99:63:80:9d:f0:ee:3b:f0:93:
3f:2e:9f:dc:9d:0b:0c:e3:76:0a:26:b7:60:4d:b3:
95:e6:43:f9:b8:39:f1:bc:d2:9d:c8:b4:b5:d8:7b:
f7:77:68:36:85:6f:d9:71:a6:b2:ba:1f:bb:33:7f:
0f:67:2d:39:72:fb:b0:37:95:bb:f6:cc:c6:d2:2c:
a2:d5:80:24:49:3c:13:96:cb:bf:e9:9a:9b:1d:d5:
42:52:d7:bc:85:5c:27:a0:49:91:51:db:be:60:9a:
49:38:56:cb:ff:69:8c:2b:1c:ce:c1:0e:43:71:bf:
ef:9b:55:3c:bf:bd:43:23:a3:19:95:fb:58:c0:13:
e7:f2:38:73:fb:5b:22:7a:2e:a3:ed:e4:aa:2c:dc:
18:0d:09:b2:34:72:69:4a:06:db:74:26:3a:d3:36:
55:d5:17:a2:70:a1:d0:ca:98:c7:d7:4b:d0:fd:b4:
8b:ba:7a:a4:14:ee:06:81:69:46:1b:b9:c3:49:00:
5d:22:3c:ef:27:61:15:70:6a:46:0c:c2:33:5b:3a:
81:52:c9:9c:76:65:37:e0:e7:7f:65:32:a8:31:41:
33:bc:2c:29:50:22:e0:a6:6a:d4:a3:f5:f5:54:1c:
81:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:63:65:A5:71:42:71:8A:37:88:38:D0:D6:49:F0:E3:19:B4:D5
X509v3 Authority Key Identifier:
keyid:23:A4:24:97:97:0D:65:54:1D:DB:15:96:58:E3:B0:A6:E2:F5:16:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/ba2857-c098-44d2-9c01-e720feb10103/1/I6Qkl5cNZVQd2xWWWOOwpuL1Frc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a4:59:77:ee:5a:79:2d:67:6b:41:75:6f:1e:e4:39:cb:62:
29:af:e9:ba:44:18:a8:86:41:ef:0a:1e:dd:1f:0f:e2:78:3c:
e5:40:36:63:5d:be:61:aa:31:dd:5e:c6:c3:d6:6e:61:cb:b7:
28:9c:ea:5e:51:bf:19:b2:5d:c3:44:d2:69:31:0d:41:63:89:
51:13:58:a7:3f:ef:45:c3:c5:db:88:2d:0f:33:88:e4:98:26:
93:67:af:43:a7:4a:64:1a:d2:ea:c1:04:1a:63:0a:06:6f:91:
c5:65:db:7e:33:b8:cb:31:0a:12:e6:f2:49:6a:99:d5:a1:95:
d1:60:86:fe:f4:0e:bd:cc:97:17:7d:52:d6:e2:d1:4a:22:49:
2c:f7:aa:ce:9b:8d:a4:c8:c8:91:fc:40:9b:5e:13:07:e3:06:
e2:4c:a9:c7:20:1c:f6:b2:e8:59:33:19:3d:4b:e4:ed:68:f6:
58:7b:45:00:d6:99:fe:6a:b9:e0:30:d5:18:ac:0f:a8:04:08:
5d:03:cd:66:57:44:94:7d:17:c8:3f:c9:b2:54:16:80:94:e8:
a0:53:89:08:94:f8:57:be:a4:64:c5:71:b8:5c:95:8f:4a:51:
fc:6f:78:b7:9f:5e:6e:7d:49:0c:18:fd:a6:9b:15:f0:f7:84:
7e:c1:50:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:57:18 2025 by rpki-client