Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
File: CI4DIScTMq_HfkyFefDlVZzAnFA.mft (raw, json)
Hash identifier: J1IDbME5ZuC7xl1RtVWjobQLEj2o7As9SONnEqtfMmE=
Subject key identifier: D0:94:D3:EB:2C:E9:C5:C4:2A:80:A3:9D:EB:BE:49:F7:C1:2E:C4:DB
Authority key identifier: 08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
Certificate issuer: /CN=088e0321271332afc77e4c8579f0e5559cc09c50
Certificate serial: 019A52632719DE2A4777E8F02CBE3227A9BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
Manifest number: 13D6
Signing time: Wed 05 Nov 2025 05:00:20 +0000
Manifest this update: Wed 05 Nov 2025 05:00:20 +0000
Manifest next update: Thu 06 Nov 2025 05:00:20 +0000
Files and hashes: 1: CI4DIScTMq_HfkyFefDlVZzAnFA.crl (hash: ciconbk3547EBwtvI96fjpp8usgVDAcamM78RZspFbc=)
2: ICR_37PsCBP-8LWQQc9BQZWkbu8.roa (hash: qbGaCfhiVfxLumC4av9v0LJhrwsxTdIAQc0ayhncJww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:63:27:19:de:2a:47:77:e8:f0:2c:be:32:27:a9:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=088e0321271332afc77e4c8579f0e5559cc09c50
Validity
Not Before: Nov 5 05:00:20 2025 GMT
Not After : Nov 6 05:00:20 2025 GMT
Subject: CN=d094d3eb2ce9c5c42a80a39debbe49f7c12ec4db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:54:af:61:db:ed:5e:bf:d6:f5:97:b0:a7:05:
df:39:c7:18:53:00:0c:a2:aa:87:50:65:ae:6a:3c:
93:a1:8b:b9:57:00:22:ea:fd:25:04:26:9d:7f:65:
32:ff:b1:12:75:47:cd:49:51:b7:d6:3f:a5:8d:fd:
8e:6c:84:a9:66:38:22:ee:04:f0:bf:e0:b2:47:c8:
2f:d8:d3:5b:cc:14:ba:df:8b:b9:17:e3:07:a3:15:
dc:c2:a6:ee:68:ec:ac:ac:d9:72:2e:35:e7:0e:54:
01:ba:b5:96:f7:0e:4d:1e:13:ba:be:69:ae:e3:93:
41:a4:f1:69:83:6b:e7:be:3f:a3:a8:20:39:7d:30:
40:89:0b:8a:07:2d:04:26:41:bf:03:aa:fe:ae:69:
55:66:4c:38:03:ef:41:bb:0a:49:99:d2:3d:5b:fd:
65:d4:1b:ed:22:75:f6:65:43:b4:11:f7:0e:d3:f2:
4a:12:63:c7:ab:5f:36:93:42:4b:84:9d:c5:b8:3e:
76:1d:23:0f:62:4e:2a:c4:89:2c:02:64:7e:3d:a8:
da:2d:5b:08:12:00:21:b2:d3:d9:e0:e3:bc:4b:58:
1f:c7:0f:09:2f:9f:d7:d6:c2:86:8d:0b:75:2e:6d:
03:ca:4e:e4:56:b1:40:5d:12:18:39:e2:01:77:bf:
e7:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:94:D3:EB:2C:E9:C5:C4:2A:80:A3:9D:EB:BE:49:F7:C1:2E:C4:DB
X509v3 Authority Key Identifier:
keyid:08:8E:03:21:27:13:32:AF:C7:7E:4C:85:79:F0:E5:55:9C:C0:9C:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CI4DIScTMq_HfkyFefDlVZzAnFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/a2a52c-136a-43a8-967c-f6d966ca4f07/1/CI4DIScTMq_HfkyFefDlVZzAnFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b4:94:08:5c:2b:7b:a9:e1:5f:d1:6f:0f:68:92:78:8c:c6:
4b:83:b7:6b:08:b4:a7:8a:51:56:d1:73:38:94:eb:66:dc:f3:
43:01:51:66:90:65:e0:9e:23:07:e6:16:d1:ea:c6:f5:1e:ca:
6c:df:98:d7:b2:46:5d:d2:33:aa:1c:05:9d:e6:48:72:e9:48:
e3:5e:c1:6e:9c:8c:e0:ad:86:08:81:1c:8d:e1:5e:ee:b0:47:
dc:d5:0c:02:0a:04:da:3b:f3:18:e7:45:4a:f8:25:b9:a9:9b:
e0:25:7f:45:bd:34:8d:4f:a4:fe:f0:22:13:c0:f7:95:a0:68:
56:39:87:fd:96:dd:db:eb:f6:16:84:a2:e4:d9:6f:b9:29:e6:
7d:cc:ae:69:03:52:58:85:f9:5d:4c:26:f7:2c:4c:50:20:f9:
1b:4c:2a:33:b7:9d:ac:81:8b:8c:06:a3:67:df:20:31:f6:cb:
0a:34:4e:1c:25:df:29:c4:79:16:b0:ea:c8:d6:85:d5:d1:d3:
ac:77:93:93:09:3d:db:83:f6:68:e9:ff:e5:46:e5:4f:82:f1:
bd:5e:a5:58:ac:d1:14:a2:a0:bf:c7:1f:f5:86:d8:f5:3f:60:
d1:e6:ea:d4:9e:0a:b6:4d:a2:74:7a:32:2d:a6:b4:15:13:67:
ff:30:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 08:38:34 2025 by rpki-client